movies.powster.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:25:6f:14:ce:7e:3f:11:a8:c9:49:ae:f2:eb:79:96:93 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=movies.powster.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:25:6f:14:ce:7e:3f:11:a8:c9:49:ae:f2:eb:79:96:93
Serial Number (int): 299157958726308513545400262431960035071635
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:30:de:30:b1:30:24:50:e1:ab:31:5e:d3:1b:d5:dd:4f:1f:0b:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:2c:34:17:42:54:f0:85:b3:0a:2f:13:35:63:3c:c7:d7:a0:da:a3
Fingerprint (sha256): 67:f8:f3:cd:3a:94:fb:5c:90:63:23:78:43:d7:7f:35:55:37:8e:81:b1:c7:99:b5:65:57:3f:16:77:32:c3:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate movies.powster.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for movies.powster.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amazonstudios.powio.com
api.showtimes.io
artsalliance.powio.com
bfi.powio.com
capelightshowtimes.com
cbs.powio.com
curzontickets.com
data.powster.com
disney.powio.com
eonetickets.com
facebook.powio.com
film.dcmworld.com
films.archimedia.com
films.belgafilms.be
films.bulldog-film.com
films.entertainmentfilms.co.uk
fox.powio.com
foxsearchlight.powio.com
gkidstickets.com
groupr.powster.com
gunpowdersky.powster.com
icon.powio.com
imax.powster.com
independent.powio.com
insights.powster.com
kaleidoscope.powio.com
kinotickets.concorde-film.de
koch.powio.com
lionsgatetickets.co.uk
lionsgatetickets.com
marvel.powio.com
messenger.powster.com
movies.altitudefilment.com
movies.arrowfilms.co.uk
movies.cohenmedia.net
movies.elementpictures.ie
movies.elevationpictures.com
movies.magpictures.com
movies.powster.com
movies.primalscreen.tv
movies.showtimes.io
movies.signature-entertainment.co.uk
movies.stxentertainment.com
movies.universumfilm.de
movies.vertigofilms.com
movietickets.a24films.com
movietickets.thefilmarcade.com
movietickets.vvs.ca
movietickets.warnerbros.com
neonrated.powster.com
paramountshowtimes.com
pathemovies.com
pinewood.powio.com
powster.madman.com.au
pureflixtickets.com
roadsideattractionstickets.com
sessiontimes.transmissionfilms.com.au
showcaseentertainment.powio.com
sodashowtimes.com
stdata.powster.com
studiocanaltickets.co.uk
studiocanaltickets.com
tbirdreleasing.com
thundr.powster.com
tickets.annapurna.pictures
tickets.cinemalive.com
tickets.constantin-film.net
tickets.dogwoof.com
tickets.fathomevents.com
tickets.genesiuspictures.com
tickets.majestic.de
tickets.pandastorm.com
tickets.pathelive.com
tickets.peccapics.com
tickets.picturehouseentertainment.co.uk
tickets.powster.com
tickets.roadshow.com.au
tickets.tobis.de
tickets.trafalgar-releasing.com
tickets.weinsteinco.com
triggr.powster.com
universalmusictours.com
universalshowtimes.com
www.capelightshowtimes.com
www.curzontickets.com
www.eonetickets.com
www.gkidstickets.com
www.lionsgatetickets.co.uk
www.lionsgatetickets.com
www.panteliontickets.com
www.paramountshowtimes.com
www.pathemovies.com
www.pureflixtickets.com
www.roadsideattractionstickets.com
www.sodashowtimes.com
www.studiocanaltickets.co.uk
www.studiocanaltickets.com
www.universalmusictours.com
www.universalshowtimes.com

Other certificates including the domain name powster.com

(limited to 100 certificates)
tracking.powster.com
movies.powster.com
workitout.powster.com
movies.powster.com
movies.powster.com
aladdin.powster.com
demo.static.powster.com
ticketing.powster.com
movies.powster.com
movies.powster.com
focusfeatures.powster.com
movies.powster.com
app.powster.com
workitout.powster.com
movies.powster.com
ticketing.powster.com
movies.powster.com
workitout.powster.com
quiz.powster.com
movies.powster.com
app.powster.com
movies.powster.com
artsalliance.powio.com
firstman.demo.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
gatest.powster.com
tracking.powster.com
movies.powster.com
artsalliance.powio.com
labs.powster.com
movies.powster.com
movies.powster.com
workitout.powster.com
powster.com
tracking.powster.com
workitout.powster.com
powster.com
companion.powster.com
tracking.powster.com
cloudfront-test.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
labs.powster.com
powster.com
ticketing.powster.com
aladdin.powster.com
ticketing.powster.com
aladdin.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
workitout.powster.com
workitout.powster.com
app.powster.com
focusfeatures.powster.com
movies.powster.com
companion.powster.com
hoth.powster.com
*.powster.com
app.powster.com
ticketing.powster.com
labs.powster.com
powster.com
labs.powster.com
movies.powster.com
cloudfront-test.powster.com
movies.powster.com
movies.powster.com
app.powster.com
app.powster.com
workitout.powster.com
movies.powster.com
artsalliance.powio.com
powster.com
movies.powster.com
hoth.powster.com
companion.powster.com
movies.powster.com
tracking.powster.com
tracking.powster.com
aladdin.powster.com
app.powster.com
movies.powster.com
movies.powster.com
labs.powster.com
*.powster.com
movies.powster.com
workitout.powster.com
movies.powster.com
firstman.demo.powster.com
tracking.powster.com
movies.powster.com
app.powster.com
movies.powster.com

Certificate

The complete raw certificate details for movies.powster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299157958726308513545400262431960035071635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-27 23:38:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-25 23:38:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'movies.powster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805462857980822217894111396239731967973161961561631887154580661244457777520343516182445785038444389871599481803862972466434216007300090664419893910423347644260511047878282983472931922542836832739143792347536867583446867014313084049052018700756786719546229602865551534195766803966662759714883351510920244385213945767603040061928880607912358332095747833246148780468125564993551583408307246837418153310831616743291582865726419483087922632216883666823726138659389850673094443623932235632486949838428131205962861173239276005891567646568546046715140643535515279006588002097638151490008497127117034806607929042000561652504216182249998682183405117993353226467607642475107048265262236476027822065451273610241673292969166492134832323598375915777716031418421500280520300209608177113191917000910337408674449351830168105474467053736741239970489296626491477914795099494391380120227858499584500923609016594075618828142137414996725158094209863773349075704955463643594877067277327723235955252481713631554922375473864193302760255904032856809155807589221053075513437240422974808739636059408418594445599676877035118704501684656617063509008888396972021275709619158912968345568416048842735373074066853749632677196086715837679359999911539975393022423634139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f130de30b1302450e1ab315ed31bd5dd4f1f0b84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonstudios.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.showtimes.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsalliance.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfi.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capelightshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curzontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disney.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eonetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'film.dcmworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.archimedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.belgafilms.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.bulldog-film.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.entertainmentfilms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fox.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxsearchlight.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gkidstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupr.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunpowdersky.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icon.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imax.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independent.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaleidoscope.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinotickets.concorde-film.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koch.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionsgatetickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionsgatetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvel.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.altitudefilment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.arrowfilms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.cohenmedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.elementpictures.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.elevationpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.magpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.primalscreen.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.showtimes.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.signature-entertainment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.stxentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universumfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.vertigofilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.a24films.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.thefilmarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.vvs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietickets.warnerbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonrated.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramountshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathemovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinewood.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powster.madman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureflixtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadsideattractionstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sessiontimes.transmissionfilms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcaseentertainment.powio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodashowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdata.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiocanaltickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiocanaltickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbirdreleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thundr.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.annapurna.pictures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cinemalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.constantin-film.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dogwoof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fathomevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.genesiuspictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.majestic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.pandastorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.pathelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peccapics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.picturehouseentertainment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.roadshow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.tobis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.trafalgar-releasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.weinsteinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triggr.powster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalmusictours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capelightshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curzontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eonetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gkidstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionsgatetickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionsgatetickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panteliontickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramountshowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathemovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureflixtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadsideattractionstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodashowtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiocanaltickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiocanaltickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalmusictours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalshowtimes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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