cnssl.gccdn.cn

- Tongxing Wan Dian (Beijing) Technology Co., Ltd. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:3b:6f:75:2b:7a:dd:de:78:10:58:2e:d3:8a:c5:03 was issued on by DigiCert Inc.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tongxing Wan Dian (Beijing) Technology Co., Ltd.

Organization: Tongxing Wan Dian (Beijing) Technology Co., Ltd.
Locality: Beijing
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:6f:75:2b:7a:dd:de:78:10:58:2e:d3:8a:c5:03
Serial Number (int): 5625518128410629945175317225992275203
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:2a:b1:eb:28:c0:9d:36:cb:92:67:87:a3:cd:c9:0a:af:93:2e:bf
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 83:4f:fe:fb:75:47:c7:89:19:34:b2:cf:61:df:fb:44:35:35:19:82
Fingerprint (sha256): 46:08:15:12:6e:69:e0:cc:51:57:ee:fe:14:06:91:ef:03:f6:d0:64:e2:54:b1:2d:10:64:d3:2b:49:6e:e8:c5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate cnssl.gccdn.cn

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cnssl.gccdn.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cnssl.gccdn.cn
lgstudio.lg.com.cn
openapi.txnetworks.cn
ocsp.txnetworks.cn
inidc-ocsp.txnetworks.cn
idccun-ocsp.txnetworks.cn
wellidc-ocsp.txnetworks.cn
www.innisfree.cn
jcmdc-ocsp.txnetworks.cn
m.innisfree.cn
cmidc-ocsp.txnetworks.cn
www.nikkorclub.com.cn
www.lifevc.com
c1.lifevccdn.com
i1.lifevccdn.com
control-beta.txnetworks.cn
idccun-control-beta.txnetworks.cn
wellidc-control-beta.txnetworks.cn
inidc-control-beta.txnetworks.cn
jcmdc-control-beta.txnetworks.cn
cmidc-control-beta.txnetworks.cn
www.etude.cn
m.etude.cn
openapi-beta.txnetworks.cn
cc-baitu.ddcdn.com
cc.ddcdn.com
cc1.ddcdn.com
ccm.ddcdn.com
ccma.ddcdn.com
ccmb.ddcdn.com
ccmc.ddcdn.com
ccmd.ddcdn.com
ccmx.ddcdn.com
ccx.ddcdn.com
reg.nikon.com.cn
myenjoynps.nikon.com.cn
enjoynikon.nikon.com.cn
secure.pepperstone.com
cn.pepperstone.com
www.nics-training.net
d-track.send.microad-cn.com
c.lifevccdn.com
i.lifevccdn.com
static.koudai.com
secure.cn.pepperstone.com
static.qiniucdn.com
cdn1.lncld.net
ccm-baitu.ddcdn.com
admin.cn.pepperstone.com
admin-cn.pepperstone.com
static.weidian.com
www.world-we-made.com
static10.elemecdn.com
static11.elemecdn.com
fuss10.elemecdn.com
fuss11.elemecdn.com
cdn.ricequant.com
ccm-mb.ddcdn.com
image1.abaolicai.com
plugin.bang5mai.com
djicdn.com
asset1.djicdn.com
www.lg.com.cn
static.trthi.com
cn.go-wellness.epson.com
cn.api.sensing.epsonconnect.com
cn.strategyanalytics.com
tradercc.iforex.com
traderstaticcc.iforex.com
cool.lynx.cn
www.newlook.cn
jordan.nike.com.cn
unlimited.nike.com.cn
stg-s01.epson.biz
stg1-auth.cp.epson.com
exploration.lipton.com.cn
johnny-allcn.cnssl.gccdn.cn
johnny-fifteencn.cnssl.gccdn.cn
johnny-tencn.cnssl.gccdn.cn
unileverfoodsolutions.com.cn
ikacampaign.unileverfoodsolutions.com.cn
*.sslcs.txnetworks.cn
sample.lipton.cn
cdn.tagcommander.com
runclub.nike.com.cn
*.unileverfoodsolutions.com.cn
*.dove.com.cn
www.nikon.com.cn
estore-cn.pandora.net
*.nike.com.cn
*.ihaveu.net
*.ihaveu.com
*.i.hecdn.com
*.lux.com.cn
m.lifevc.com
*.pic.12306pc.cn
*.lifevc.com
*.dxpmedia.com
*.pc.lux.com.cn
*.safetree.com.cn
*.wshtgame.com
*.upliveapp.com
*.cbern.com.cn
*.lynx.cn
*.lifebuoy.com.cn
*.smallactions.cn
*.magnum.cn
*.ulcampaign.com
*.cdn.pengpengla.com
*.carel-china.com
*.walls.com.cn
*.zuanliantech.com
*.fphis.com
*.ponds.com.cn
*.topchef.net.cn

Other certificates including the domain name gccdn.cn

(limited to 100 certificates)
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
support.cdnetworks.net
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
support.cdnetworks.net
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn

Certificate

The complete raw certificate details for cnssl.gccdn.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn8zLBzGLHfe5CJ9Q78B
l6ogAuE51TP5trZu1O/VHN/2jxdM2tsc47gBLp5dTIhhY/2SlhvLrLIYQCVQG1lI
l+2dNHDItzh7WR40MPg2KqvC90lxEYZ2Ap6hkH/IoFZZmGt10lbAjvRfl75M5Qrf
xRxT2vle5SWwvIXWteIlgNOrlHQL05edvYdcHX+pc1LYmN2AJgmtUSzGjpRVBqjq
1YbkInD+RgY03mJGu0J98ef4BO8WfCgLJXj13z7oSs1uFzUeOkEh7dTv4jGRGlan
Wkn1o9n4yanfNunPgKcg/b0WRnZ+ZhML2x35K/icdWF+26TtbzpSH9B92Mvqd9mV
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5625518128410629945175317225992275203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tongxing Wan Dian (Beijing) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cnssl.gccdn.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22028189668544340529526683863380210758030514449620990993836502716471467070978147222570421770226837556461619003446663668115123714648809874897920119812472770663972156689747404016810868152727221799656623184766862326030405251746139291069354491087786035716007328209821598096728035778383629079355585908169516347115203918655164907712059835812582307785183524481588895338313694331355707185091236209416639243104101965454584063204254958184847690129405086214134982160391653535279503193846666200123951812618773922263035044624713978257877925501119777098396667721374603213611672015477802135738836257619463637139759534228172862756339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b52ab1eb28c09d36cb926787a3cdc90aaf932ebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2402 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgstudio.lg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openapi.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inidc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idccun-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellidc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innisfree.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcmdc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.innisfree.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmidc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikkorclub.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c1.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i1.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idccun-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellidc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inidc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcmdc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmidc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etude.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.etude.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openapi-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-baitu.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc1.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccma.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmb.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmc.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmd.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmx.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccx.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myenjoynps.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enjoynikon.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nics-training.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-track.send.microad-cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.koudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qiniucdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.lncld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm-baitu.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.weidian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world-we-made.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static10.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static11.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuss10.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuss11.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ricequant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm-mb.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image1.abaolicai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plugin.bang5mai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset1.djicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.trthi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.go-wellness.epson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.api.sensing.epsonconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.strategyanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradercc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traderstaticcc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cool.lynx.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlook.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlimited.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-s01.epson.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1-auth.cp.epson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploration.lipton.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnny-allcn.cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnny-fifteencn.cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnny-tencn.cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unileverfoodsolutions.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikacampaign.unileverfoodsolutions.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sslcs.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sample.lipton.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tagcommander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runclub.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unileverfoodsolutions.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dove.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estore-cn.pandora.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihaveu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihaveu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.hecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lux.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.lifevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pic.12306pc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxpmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pc.lux.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetree.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wshtgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upliveapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbern.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lynx.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifebuoy.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smallactions.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnum.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulcampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.pengpengla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carel-china.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walls.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuanliantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ponds.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topchef.net.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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