movies.powster.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:55:7d:1d:3a:da:03:b2:72:5c:a5:8d:a9:8e:65:12:60 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=movies.powster.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:55:7d:1d:3a:da:03:b2:72:5c:a5:8d:a9:8e:65:12:60
Serial Number (int): 278124327784008343485562568800666734891616
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:5f:c7:16:a1:27:41:af:61:84:32:19:dc:9e:91:bf:f8:07:b5:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:b6:57:44:1b:cb:30:bc:0f:4a:61:eb:0e:4c:a4:e8:13:45:02:5e
Fingerprint (sha256): 55:d2:99:09:8d:35:59:fd:c6:c8:a8:ed:0a:92:20:c9:9e:e7:b3:7a:58:b2:d3:3b:f1:73:2c:5d:0b:51:69:3d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate movies.powster.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for movies.powster.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acontracorrientetickets.com
amazonstudios.powio.com
api.showtimes.io
artsalliance.powio.com
avironpicturestickets.com
bfi.powio.com
capelightshowtimes.com
cbs.powio.com
cinema.luckyred.it
cineventstickets.com
curzontickets.com
data.powster.com
disney.powio.com
entertainmentstudiostickets.com
entradas.avalon.me
eonetickets.com
facebook.powio.com
film.dcmworld.com
films.archimedia.com
films.belgafilms.be
films.bulldog-film.com
films.entertainmentfilms.co.uk
focusfeatures.powster.com
fox.powio.com
foxsearchlight.powio.com
gkidstickets.com
greenwichentertainmenttickets.com
groupr.powster.com
gunpowdersky.powster.com
icon.powio.com
imax.powster.com
independent.powio.com
insights.powster.com
kaleidoscope.powio.com
kinotickets.concorde-film.de
koch.powio.com
marvel.powio.com
messenger.powster.com
movies.altitudefilment.com
movies.arrowfilms.co.uk
movies.cohenmedia.net
movies.elementpictures.ie
movies.elevationpictures.com
movies.magpictures.com
movies.powster.com
movies.primalscreen.tv
movies.showtimes.io
movies.signature-entertainment.co.uk
movies.stxentertainment.com
movies.universumfilm.de
movies.vertigofilms.com
movietickets.a24films.com
movietickets.dfw.nl
movietickets.thefilmarcade.com
movietickets.vvs.ca
movietickets.warnerbros.com
neonrated.powster.com
nfptickets.com
nordiskfilmtickets.com
orion.powster.com
paramountshowtimes.com
patersonentertainmenttickets.com
pathemovies.com
pinewood.powio.com
powster.madman.com.au
roadsideattractionstickets.com
rsctickets.com
sessiontimes.transmissionfilms.com.au
showcaseentertainment.powio.com
stdata.powster.com
studiocanaltickets.com
tbirdreleasing.com
theorchardtickets.com
thundr.powster.com
tickets.annapurna.pictures
tickets.cinemalive.com
tickets.constantin-film.net
tickets.dogwoof.com
tickets.fathomevents.com
tickets.genesiuspictures.com
tickets.majestic.de
tickets.pandastorm.com
tickets.pathelive.com
tickets.peccapics.com
tickets.picturehouseentertainment.co.uk
tickets.powster.com
tickets.roadshow.com.au
tickets.tobis.de
tickets.trafalgar-releasing.com
tickets.weinsteinco.com
tickets.wellgousa.com
triggr.powster.com
universalmusictours.com
universalshowtimes.com
vertent.powster.com
www.lionsgatetickets.co.uk
www.lionsgatetickets.com
www.panteliontickets.com
www.paramountshowtimes.com
www.pureflixtickets.com

Other certificates including the domain name powster.com

(limited to 100 certificates)
tracking.powster.com
movies.powster.com
workitout.powster.com
movies.powster.com
movies.powster.com
aladdin.powster.com
demo.static.powster.com
ticketing.powster.com
movies.powster.com
movies.powster.com
focusfeatures.powster.com
movies.powster.com
app.powster.com
workitout.powster.com
movies.powster.com
ticketing.powster.com
movies.powster.com
workitout.powster.com
quiz.powster.com
movies.powster.com
app.powster.com
movies.powster.com
artsalliance.powio.com
firstman.demo.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
gatest.powster.com
tracking.powster.com
movies.powster.com
artsalliance.powio.com
labs.powster.com
movies.powster.com
movies.powster.com
workitout.powster.com
powster.com
tracking.powster.com
workitout.powster.com
powster.com
companion.powster.com
tracking.powster.com
cloudfront-test.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
labs.powster.com
powster.com
ticketing.powster.com
aladdin.powster.com
ticketing.powster.com
aladdin.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
workitout.powster.com
workitout.powster.com
app.powster.com
focusfeatures.powster.com
movies.powster.com
companion.powster.com
hoth.powster.com
*.powster.com
app.powster.com
ticketing.powster.com
labs.powster.com
powster.com
labs.powster.com
movies.powster.com
cloudfront-test.powster.com
movies.powster.com
movies.powster.com
app.powster.com
app.powster.com
workitout.powster.com
movies.powster.com
artsalliance.powio.com
powster.com
movies.powster.com
hoth.powster.com
companion.powster.com
movies.powster.com
tracking.powster.com
tracking.powster.com
aladdin.powster.com
app.powster.com
movies.powster.com
movies.powster.com
labs.powster.com
*.powster.com
movies.powster.com
workitout.powster.com
movies.powster.com
firstman.demo.powster.com
tracking.powster.com
movies.powster.com
app.powster.com
movies.powster.com

Certificate

The complete raw certificate details for movies.powster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278124327784008343485562568800666734891616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 23:13:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 23:13:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'movies.powster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743286630755610043520355408860518469213831752078243581642050853244548551200344045121424286751511365662898381444228792844290515329407272306380056629449836964873298744643154987837542332252559459651522556141135044623489372381387112122722437400123412057632224075948341211709669078791066762221155227239027903838666507648302456037369503387199482365664618198096235784259556804875810459976045944410330095614284335016411627735637243170534057255371661803054268515669862407835510390561772381593274852985127764611791361254992472877653499002620389174878317903287790626689622764251718054144642542822935186765485468116437535683239708947333108136340434318859386699843065717588260965555422252156382066917279083849787242221711492281332971698772153714381600909439639940760635256764269204416786258794896427876385431640007254499223149397050022437344644350464854707720715156048132156962337318808619493740027639402184125061318234220828472866592580376111533993228471873399211387363221322008472333517638294778329985837753352519322229386424084872074259223714846794604670158265609797540694845204612788728649039475040631788694020432713038523025875998769589512396077110978357754520153346542465675204032056837634058043738166767388768153452450189695197371965476731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d45fc716a12741af61843219dc9e91bff807b598
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acontracorrientetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonstudios.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.showtimes.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsalliance.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avironpicturestickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfi.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capelightshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.luckyred.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineventstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curzontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disney.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmentstudiostickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entradas.avalon.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eonetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'film.dcmworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.archimedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.belgafilms.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.bulldog-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.entertainmentfilms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focusfeatures.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fox.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxsearchlight.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gkidstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwichentertainmenttickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupr.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunpowdersky.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icon.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imax.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independent.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaleidoscope.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinotickets.concorde-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koch.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvel.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.altitudefilment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.arrowfilms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.cohenmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.elementpictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.elevationpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.magpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.primalscreen.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.showtimes.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.signature-entertainment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.stxentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universumfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.vertigofilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.a24films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.dfw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.thefilmarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.vvs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.warnerbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonrated.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfptickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordiskfilmtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orion.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramountshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patersonentertainmenttickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathemovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinewood.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powster.madman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadsideattractionstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsctickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessiontimes.transmissionfilms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcaseentertainment.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdata.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiocanaltickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbirdreleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theorchardtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thundr.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.annapurna.pictures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cinemalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.constantin-film.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dogwoof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fathomevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.genesiuspictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.majestic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.pandastorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.pathelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peccapics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.picturehouseentertainment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.roadshow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.tobis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.trafalgar-releasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.weinsteinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wellgousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triggr.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalmusictours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertent.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionsgatetickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionsgatetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panteliontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureflixtickets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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