turner.com
- TURNER BROADCASTING SYSTEM, INC. -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 0b:9b:ce:72:a0:40:c8:b4:54:4a:d3:86 was issued on by GlobalSign nv-sa.
With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)
TURNER BROADCASTING SYSTEM, INC.
Organization:
TURNER BROADCASTING SYSTEM, INC.
State / Province:
Georgia
Locality: Atlanta
Country: US
Locality: Atlanta
Country: US
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:9b:ce:72:a0:40:c8:b4:54:4a:d3:86Serial Number (int): 3592693532046808949266764678
Serial Number lenght: 92 bits, 12 octets
SubjectKeyId: 58:77:c1:d4:3c:57:46:67:a1:28:ca:0a:cf:6c:61:16:61:15:f1:3f
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): ae:e6:e3:b2:5a:3f:55:cb:90:40:8f:55:0a:5c:4b:85:35:a6:dd:ad
Fingerprint (sha256): 63:4e:07:37:7b:5e:ee:9e:63:28:23:10:4c:8f:e2:de:fb:15:9c:48:eb:05:24:74:16:2f:45:bd:ee:94:37:0f
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018Check the revocation status for certificate turner.com
85
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for turner.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
turner.com
adamruinseverything.com
*.adamruinseverything.com
adultswim.com
*.adultswimfestival.com
*.adventuretime.com
aewdynamitearena.com
*.aewdynamitearena.com
cartoonnetwork.com
cartoonnetworkhotel.com
*.cartoonnetworkhotel.com
*.cdpsvc.com
chasingthecurelive.com
*.cinemax.com
static.arabic.cnn.com
*.dckidsfandome.com
*.explorepartsunknown.com
filmstruck.com
getmetohollywood.com
*.getmetohollywood.com
*.hbo.com
*.data.hbo.com
*.varys.data.hbo.com
*.hbomax.com
heaveninc.com
www.heaveninc.com
iamthenight.com
*.iamthenight.com
impracticaljokers.com
*.impracticaljokers.com
impracticaljokersmovie.com
*.impracticaljokersmovie.com
impracticaljokersthemovie.com
*.impracticaljokersthemovie.com
jokersmovie.com
*.jokersmovie.com
ncaa.com
*.bracketchallenge.ncaa.com
*.blackout.ngtv.io
*.geo.ngtv.io
*.token.ngtv.io
*.powerpuffgirls.com
*.powerpuffyourself.com
*.rickandmorty.com
samanthabee.com
sambee.com
shaqtoons.com
*.shaqtoons.com
*.stevenuniversethemovie.com
*.summercampisland.com
superstation.com
tbs.com
tcm.com
*.tcmbacklot.com
*.tcmcruise.com
*.tcmwineclub.com
thealienist.com
*.thealienist.com
tmz.com
*.tmz.com
tnt.tv
tntdrama.com
toofab.com
*.toofab.com
trutv.com
*.cdn.trutv.com
*.imgfb.cdn.trutv.com
*.static.cdn.trutv.com
*.video.cdn.trutv.com
*.qa.trutv.com
*.aspen.turner.com
*.now.turner.com
warnermedia.com
*.warnermedia.com
*.warnermediafitnation.com
*.warnermediagroup.com
*.warnermediaready.com
*.warnermediasupplierdiversity.com
*.wbtvd.com
*.certs.wbtvd.com
*.webarebears.com
*.wilfordindustries.com
*.wmcdp.io
*.ref.prism.wmcdp.io
*.prismconfig.wmcdp.io
adamruinseverything.com
*.adamruinseverything.com
adultswim.com
*.adultswimfestival.com
*.adventuretime.com
aewdynamitearena.com
*.aewdynamitearena.com
cartoonnetwork.com
cartoonnetworkhotel.com
*.cartoonnetworkhotel.com
*.cdpsvc.com
chasingthecurelive.com
*.cinemax.com
static.arabic.cnn.com
*.dckidsfandome.com
*.explorepartsunknown.com
filmstruck.com
getmetohollywood.com
*.getmetohollywood.com
*.hbo.com
*.data.hbo.com
*.varys.data.hbo.com
*.hbomax.com
heaveninc.com
www.heaveninc.com
iamthenight.com
*.iamthenight.com
impracticaljokers.com
*.impracticaljokers.com
impracticaljokersmovie.com
*.impracticaljokersmovie.com
impracticaljokersthemovie.com
*.impracticaljokersthemovie.com
jokersmovie.com
*.jokersmovie.com
ncaa.com
*.bracketchallenge.ncaa.com
*.blackout.ngtv.io
*.geo.ngtv.io
*.token.ngtv.io
*.powerpuffgirls.com
*.powerpuffyourself.com
*.rickandmorty.com
samanthabee.com
sambee.com
shaqtoons.com
*.shaqtoons.com
*.stevenuniversethemovie.com
*.summercampisland.com
superstation.com
tbs.com
tcm.com
*.tcmbacklot.com
*.tcmcruise.com
*.tcmwineclub.com
thealienist.com
*.thealienist.com
tmz.com
*.tmz.com
tnt.tv
tntdrama.com
toofab.com
*.toofab.com
trutv.com
*.cdn.trutv.com
*.imgfb.cdn.trutv.com
*.static.cdn.trutv.com
*.video.cdn.trutv.com
*.qa.trutv.com
*.aspen.turner.com
*.now.turner.com
warnermedia.com
*.warnermedia.com
*.warnermediafitnation.com
*.warnermediagroup.com
*.warnermediaready.com
*.warnermediasupplierdiversity.com
*.wbtvd.com
*.certs.wbtvd.com
*.webarebears.com
*.wilfordindustries.com
*.wmcdp.io
*.ref.prism.wmcdp.io
*.prismconfig.wmcdp.io
Other certificates including the domain name turner.com
(limited to 100 certificates)
sgtxprdresweb01.turner.com
dns-vetting1b.map.fastly.net
mobileapps.turner.com
dns-vetting2.map.fastly.net
tul-dbs003686.turner.com
inews.turner.com
concertservice40test.turner.com
dns-vetting1b.map.fastly.net
www.eventpress.turner.com
meta-permsmgmt-prod.turner.com
lsd-prod-56m.gslb.vgtf.net
epmuat.turner.com
turner.com
cnnc-uccx-pub.turner.com
*.msc.turner.com
fw-mexso.turner.com
nycmail1.turner.com
dns-vetting1b.map.fastly.net
music.turner.com
chef-server-dev1.turner.com
sdc.turner.com
millenniuminternal.turner.com
concert40test.turner.com
aaa-uat.turner.com
harbor-dvps.turner.com
iso-splunkcsh1.iso.turner.com
turner.com
looker.turner.com
edc-splat-tve.cdn.turner.com
metrohk-coreorchsrv-vip.turner.com
l.ssl.fastly.net
tbseuropeonline.turner.com
sslvs06.igloosoftware.com
*.ref.sdvi.csc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
turner-tls.map.fastly.net
dns-vetting1j.map.fastly.net
music.turner.com
elec-useroptions-dev.turner.com
turner-tls.map.fastly.net
sdc.turner.com
dns-vetting2.map.fastly.net
eahapsfinuat.turner.com
affiliateportal.turner.com
janusstsint.turner.com
fw-bogso.turner.com
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
api.hilbert.iso.turner.com
core.ooyala.turner.com
dynaimage-prod-nba.ids.turner.com
polls.turner.com
dns-vetting1b.map.fastly.net
dns-vetting2.map.fastly.net
raext.turner.com
sslvs06.igloosoftware.com
www.turner.com
eahapsfinupuat.turner.com
janusstsmain.turner.com
dev.turner.com
catdv.turner.com
lumberjack-prod.nba.ids.turner.com
dns-vetting1j.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
msc.turner.com
*.cdn.turner.com
eshare.turner.com
bestsqs-vip.turner.com
eahapsporedprd.turner.com
dns-vetting1j.map.fastly.net
www.turner.com
cnnitouch-prod1.turner.com
docs.ids.turner.com
splunk-hec-dev.nonprod.iso.turner.com
sdc.turner.com
atl-expwy-c1.turner.com
deliver.turner.com
splashtop-chl.turner.com
mssdoc.turner.com
dns-vetting1b.map.fastly.net
sslvs01.igloosoftware.com
dns-vetting1b.map.fastly.net
l.ssl.fastly.net
admin.cartoonnetwork.asia
dns-vetting1b.map.fastly.net
detections.iso.turner.com
eahapsporedprdtc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
aspen.turner.com
eahasfadmin-new.turner.com
sslvs06.igloosoftware.com
collabredirects.turner.com
ppsprmse.turner.com
dns-vetting1b.map.fastly.net
cnn-dalton-qa-2.ids.turner.com
guardian.turner.com
dns-vetting1b.map.fastly.net
mobileapps.turner.com
dns-vetting2.map.fastly.net
tul-dbs003686.turner.com
inews.turner.com
concertservice40test.turner.com
dns-vetting1b.map.fastly.net
www.eventpress.turner.com
meta-permsmgmt-prod.turner.com
lsd-prod-56m.gslb.vgtf.net
epmuat.turner.com
turner.com
cnnc-uccx-pub.turner.com
*.msc.turner.com
fw-mexso.turner.com
nycmail1.turner.com
dns-vetting1b.map.fastly.net
music.turner.com
chef-server-dev1.turner.com
sdc.turner.com
millenniuminternal.turner.com
concert40test.turner.com
aaa-uat.turner.com
harbor-dvps.turner.com
iso-splunkcsh1.iso.turner.com
turner.com
looker.turner.com
edc-splat-tve.cdn.turner.com
metrohk-coreorchsrv-vip.turner.com
l.ssl.fastly.net
tbseuropeonline.turner.com
sslvs06.igloosoftware.com
*.ref.sdvi.csc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
turner-tls.map.fastly.net
dns-vetting1j.map.fastly.net
music.turner.com
elec-useroptions-dev.turner.com
turner-tls.map.fastly.net
sdc.turner.com
dns-vetting2.map.fastly.net
eahapsfinuat.turner.com
affiliateportal.turner.com
janusstsint.turner.com
fw-bogso.turner.com
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
api.hilbert.iso.turner.com
core.ooyala.turner.com
dynaimage-prod-nba.ids.turner.com
polls.turner.com
dns-vetting1b.map.fastly.net
dns-vetting2.map.fastly.net
raext.turner.com
sslvs06.igloosoftware.com
www.turner.com
eahapsfinupuat.turner.com
janusstsmain.turner.com
dev.turner.com
catdv.turner.com
lumberjack-prod.nba.ids.turner.com
dns-vetting1j.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
msc.turner.com
*.cdn.turner.com
eshare.turner.com
bestsqs-vip.turner.com
eahapsporedprd.turner.com
dns-vetting1j.map.fastly.net
www.turner.com
cnnitouch-prod1.turner.com
docs.ids.turner.com
splunk-hec-dev.nonprod.iso.turner.com
sdc.turner.com
atl-expwy-c1.turner.com
deliver.turner.com
splashtop-chl.turner.com
mssdoc.turner.com
dns-vetting1b.map.fastly.net
sslvs01.igloosoftware.com
dns-vetting1b.map.fastly.net
l.ssl.fastly.net
admin.cartoonnetwork.asia
dns-vetting1b.map.fastly.net
detections.iso.turner.com
eahapsporedprdtc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
aspen.turner.com
eahasfadmin-new.turner.com
sslvs06.igloosoftware.com
collabredirects.turner.com
ppsprmse.turner.com
dns-vetting1b.map.fastly.net
cnn-dalton-qa-2.ids.turner.com
guardian.turner.com
Certificate
The complete raw certificate details for turner.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMTzCCCzegAwIBAgIMC5vOcqBAyLRUStOGMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMDExMTUwMDA2MDJaFw0y MTEyMTcwMDA2MDJaMHExCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdHZW9yZ2lhMRAw DgYDVQQHEwdBdGxhbnRhMSkwJwYDVQQKEyBUVVJORVIgQlJPQURDQVNUSU5HIFNZ U1RFTSwgSU5DLjETMBEGA1UEAxMKdHVybmVyLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAOfLIRTNbuUFzdD60iY16iWCrOr0w1wekwAJNZRJ+eUY L4GWIVQF+N6KXhG1C30BFvTI2PWzxNuLaD+R9wKku08bNdgWQ3wMx5x5dpWL2UHU TZ2iNQn+Uz+zCNRG1GiJoY7ENZQF2T4V/wHvxtXmjv8S+ZBLaTvS4IKEdqpAjSlL MGxYFt6NqV10Y/EQesmdnMEzNhE+I30LhYKBl6bVsvCuYvKq2vtzegzr7VKqfAuj RrYXZdhcEWadP725BlK0gxT4fv/eJFE3A3kGq2XfNSoa1p1gDb3EvQusvZoPcXy8 rqA6/usJ0Gs/zg3DLwuPGt+v2v+mqhcnNxCRinivQiUCAwEAAaOCCQYwggkCMA4G A1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0 cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNhMjAx OC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dz cnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEF BQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYG Z4EMAQICMAkGA1UdEwQCMAAwggaSBgNVHREEggaJMIIGhYIKdHVybmVyLmNvbYIX YWRhbXJ1aW5zZXZlcnl0aGluZy5jb22CGSouYWRhbXJ1aW5zZXZlcnl0aGluZy5j b22CDWFkdWx0c3dpbS5jb22CFyouYWR1bHRzd2ltZmVzdGl2YWwuY29tghMqLmFk dmVudHVyZXRpbWUuY29tghRhZXdkeW5hbWl0ZWFyZW5hLmNvbYIWKi5hZXdkeW5h bWl0ZWFyZW5hLmNvbYISY2FydG9vbm5ldHdvcmsuY29tghdjYXJ0b29ubmV0d29y a2hvdGVsLmNvbYIZKi5jYXJ0b29ubmV0d29ya2hvdGVsLmNvbYIMKi5jZHBzdmMu Y29tghZjaGFzaW5ndGhlY3VyZWxpdmUuY29tgg0qLmNpbmVtYXguY29tghVzdGF0 aWMuYXJhYmljLmNubi5jb22CEyouZGNraWRzZmFuZG9tZS5jb22CGSouZXhwbG9y ZXBhcnRzdW5rbm93bi5jb22CDmZpbG1zdHJ1Y2suY29tghRnZXRtZXRvaG9sbHl3 b29kLmNvbYIWKi5nZXRtZXRvaG9sbHl3b29kLmNvbYIJKi5oYm8uY29tgg4qLmRh dGEuaGJvLmNvbYIUKi52YXJ5cy5kYXRhLmhiby5jb22CDCouaGJvbWF4LmNvbYIN aGVhdmVuaW5jLmNvbYIRd3d3LmhlYXZlbmluYy5jb22CD2lhbXRoZW5pZ2h0LmNv bYIRKi5pYW10aGVuaWdodC5jb22CFWltcHJhY3RpY2Fsam9rZXJzLmNvbYIXKi5p bXByYWN0aWNhbGpva2Vycy5jb22CGmltcHJhY3RpY2Fsam9rZXJzbW92aWUuY29t ghwqLmltcHJhY3RpY2Fsam9rZXJzbW92aWUuY29tgh1pbXByYWN0aWNhbGpva2Vy c3RoZW1vdmllLmNvbYIfKi5pbXByYWN0aWNhbGpva2Vyc3RoZW1vdmllLmNvbYIP am9rZXJzbW92aWUuY29tghEqLmpva2Vyc21vdmllLmNvbYIIbmNhYS5jb22CGyou YnJhY2tldGNoYWxsZW5nZS5uY2FhLmNvbYISKi5ibGFja291dC5uZ3R2Lmlvgg0q Lmdlby5uZ3R2Lmlvgg8qLnRva2VuLm5ndHYuaW+CFCoucG93ZXJwdWZmZ2lybHMu Y29tghcqLnBvd2VycHVmZnlvdXJzZWxmLmNvbYISKi5yaWNrYW5kbW9ydHkuY29t gg9zYW1hbnRoYWJlZS5jb22CCnNhbWJlZS5jb22CDXNoYXF0b29ucy5jb22CDyou c2hhcXRvb25zLmNvbYIcKi5zdGV2ZW51bml2ZXJzZXRoZW1vdmllLmNvbYIWKi5z dW1tZXJjYW1waXNsYW5kLmNvbYIQc3VwZXJzdGF0aW9uLmNvbYIHdGJzLmNvbYIH dGNtLmNvbYIQKi50Y21iYWNrbG90LmNvbYIPKi50Y21jcnVpc2UuY29tghEqLnRj bXdpbmVjbHViLmNvbYIPdGhlYWxpZW5pc3QuY29tghEqLnRoZWFsaWVuaXN0LmNv bYIHdG16LmNvbYIJKi50bXouY29tggZ0bnQudHaCDHRudGRyYW1hLmNvbYIKdG9v ZmFiLmNvbYIMKi50b29mYWIuY29tggl0cnV0di5jb22CDyouY2RuLnRydXR2LmNv bYIVKi5pbWdmYi5jZG4udHJ1dHYuY29tghYqLnN0YXRpYy5jZG4udHJ1dHYuY29t ghUqLnZpZGVvLmNkbi50cnV0di5jb22CDioucWEudHJ1dHYuY29tghIqLmFzcGVu LnR1cm5lci5jb22CECoubm93LnR1cm5lci5jb22CD3dhcm5lcm1lZGlhLmNvbYIR Ki53YXJuZXJtZWRpYS5jb22CGioud2FybmVybWVkaWFmaXRuYXRpb24uY29tghYq Lndhcm5lcm1lZGlhZ3JvdXAuY29tghYqLndhcm5lcm1lZGlhcmVhZHkuY29tgiIq Lndhcm5lcm1lZGlhc3VwcGxpZXJkaXZlcnNpdHkuY29tggsqLndidHZkLmNvbYIR Ki5jZXJ0cy53YnR2ZC5jb22CESoud2ViYXJlYmVhcnMuY29tghcqLndpbGZvcmRp bmR1c3RyaWVzLmNvbYIKKi53bWNkcC5pb4IUKi5yZWYucHJpc20ud21jZHAuaW+C FioucHJpc21jb25maWcud21jZHAuaW8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQW BBRYd8HUPFdGZ6EoygrPbGEWYRXxPzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABdck5IeUAAAQDAEgw RgIhAJZgVDd8jvv/FXv6YACGOGC2SgSVgS8QvuGjE6Y839g1AiEAyFKAewq8JQkb /JgvmA+d5rKvcB1Yt1Bt80VO1MILSdAAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO/ 3wwvIAvMTvFk4wAAAXXJOSHSAAAEAwBHMEUCIBaTzj8unrsCCJVkZgCx0Jrzpp2D x9MAQCJDGqfSqjTjAiEA7fU9mWIkp9E1SBzYg4C8nUCUzJigsonOIjxjqD2g9yIw DQYJKoZIhvcNAQELBQADggEBAJI0FzRW/L+NY8AmhvBURbJGgF4m28tAc5Ij55Wb j6bHQjNgvogeFQcrS8TPgV+cvbjj5KpJfI+C1WdqnU7lQCvc5BmNQFWNLT7gbBno FG6/oBeXFPDQu3YVWaBchUG6pVcdzcgiQubwZprEmHZY7Um9ib4BPMZlgugDON8P iQDusbNTwO+v7Z82ke8Y+qTCDVQXUDiCtVNktc1jyljuY0A5YWd7CV9RyGGYtRTL bKjEiDIwBgaH01wAADOzeHfXwfKPN/ip0HliIq3QPvaZln4pf/UHwYJyg2O+pR8d sM3jAKD3DRh/LuNheimaerzB3ERQj7gWJaXSqBELwoFB3e0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58shFM1u5QXN0PrSJjXq JYKs6vTDXB6TAAk1lEn55RgvgZYhVAX43opeEbULfQEW9MjY9bPE24toP5H3AqS7 Txs12BZDfAzHnHl2lYvZQdRNnaI1Cf5TP7MI1EbUaImhjsQ1lAXZPhX/Ae/G1eaO /xL5kEtpO9LggoR2qkCNKUswbFgW3o2pXXRj8RB6yZ2cwTM2ET4jfQuFgoGXptWy 8K5i8qra+3N6DOvtUqp8C6NGthdl2FwRZp0/vbkGUrSDFPh+/94kUTcDeQarZd81 KhrWnWANvcS9C6y9mg9xfLyuoDr+6wnQaz/ODcMvC48a36/a/6aqFyc3EJGKeK9C JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3592693532046808949266764678 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 00:06:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:06:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TURNER BROADCASTING SYSTEM, INC.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turner.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29261215200617518366558760544229601157819601251666476670884273751644531904576693744660295314014841131385742174457869655560772724884737350292204323986421969351637804407777918560835432425097745238260799103846082009102458009424758051260708616829200674263147412388458717084240529645153383569661805152308496467133548888187550702608783354566840107418278428829756879535203605563482869311926859391804811410853672815468868425074243440755395901720327813808129178562291144383537726072688176994076846987513039702551825656864087655005917499777633206092927213953239551698288755269957733037221796808114900643398231446239761111400997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1673 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamruinseverything.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamruinseverything.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultswim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultswimfestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventuretime.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aewdynamitearena.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aewdynamitearena.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetworkhotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkhotel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdpsvc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasingthecurelive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.arabic.cnn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dckidsfandome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explorepartsunknown.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmstruck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmetohollywood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmetohollywood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varys.data.hbo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbomax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heaveninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heaveninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamthenight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamthenight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokersmovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokersmovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokersthemovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokersthemovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokersmovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokersmovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncaa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracketchallenge.ncaa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackout.ngtv.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.ngtv.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.token.ngtv.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpuffgirls.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpuffyourself.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rickandmorty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samanthabee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaqtoons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaqtoons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenuniversethemovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summercampisland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superstation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmbacklot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmcruise.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmwineclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealienist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thealienist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnt.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntdrama.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toofab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toofab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trutv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.trutv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgfb.cdn.trutv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static.cdn.trutv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.cdn.trutv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.trutv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.turner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.now.turner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediafitnation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediagroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediaready.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediasupplierdiversity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbtvd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certs.wbtvd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webarebears.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilfordindustries.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmcdp.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ref.prism.wmcdp.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismconfig.wmcdp.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5877c1d43c574667a128ca0acf6c61166115f13f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000175c93921e50000040300483046022100966054377c8efbff157bfa6000863860b64a0495812f10bee1a313a63cdfd835022100c852807b0abc25091bfc982f980f9de6b2af701d58b7506df3454ed4c20b49d0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175c93921d2000004030047304502201693ce3f2e9ebb020895646600b1d09af3a69d83c7d3004022431aa7d2aa34e3022100edf53d996224a7d135481cd88380bc9d4094cc98a0b289ce223c63a83da0f722 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009234173456fcbf8d63c02686f05445b246805e26dbcb40739223e7959b8fa6c7423360be881e15072b4bc4cf815f9cbdb8e3e4aa497c8f82d5676a9d4ee5402bdce4198d40558d2d3ee06c19e8146ebfa0179714f0d0bb761559a05c8541baa5571dcdc82242e6f0669ac4987658ed49bd89be013cc66582e80338df0f8900eeb1b353c0efafed9f3691ef18faa4c20d5417503882b55364b5cd63ca58ee63403961677b095f51c86198b514cb6ca8c4883230060687d35c000033b37877d7c1f28f37f8a9d0796222add03ef699967e297ff507c182728363bea51f1db0cde300a0f70d187f2ee3617a299a7abcc1dc44508fb81625a5d2a8110bc28141dded