www.colonytv.com

- NBCUniversal Media, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:12:ed:a5:bf:25:fa:27:3a:b4:cc:e2:b5:f8:d5:72 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New Jersey
Locality: Englewood Cliffs
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:12:ed:a5:bf:25:fa:27:3a:b4:cc:e2:b5:f8:d5:72
Serial Number (int): 6744421385258635007815379584602920306
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 62:10:5f:e7:b5:70:d5:3c:6e:ab:83:38:3f:b0:68:83:fa:13:e4:9b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): b3:1d:13:67:7d:47:c1:79:a5:b6:07:f9:5e:0f:c1:de:0a:9b:de:28
Fingerprint (sha256): 6b:aa:da:af:86:1f:6f:99:17:2f:05:04:32:db:b5:f2:bc:62:0c:4f:9d:ea:8f:f3:b7:c6:f3:fa:e6:f9:aa:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.colonytv.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colonytv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colonytv.com
colonytv.com
www.notimetodie-film.ch
www.trolls-ofilme.pt
www.depurgesouthholdings.com
www.ma-lefilm.be
www.ma-movie.be
www.ma-film.at
www.ramsdalebookgroup.com
www.dolittlefilmi.com.tr
www.nbcuniversal.com
www.erasethehate.org
stage.tvecms.universalkids.nbcuni.com
www.1917-lefilm.ch
ftp.cyprusnationalbank.com
directory.theparmenides.com
www.accessonline.com
www.howtotrainyourdragon.com
www.ma-lefilm.ch
www.dolittle-ofilme.pt
prod.tvecms.universalkids.nbcuni.com
stage.erasethehate.org
www.dolittle-film.ch
safety.cyprusnationalbank.com
lt.tvecms.universalkids.nbcuni.com
www.lastchristmascard.com
www.mazzkaufreichenbach.com
stage.universalkids.com
www.camsecpro.com
static-stage.accessonline.com
erasethehate.org
lt.tvecms.usa.nbcuni.com
stage.accessonline.com
www.lomax-looneylaw.com
www.notimetodie-lefilm.ch
uat.tvecms.universalkids.nbcuni.com
dev.tvecms.universalkids.nbcuni.com
www.elanplcsystems.com
mail.cyprusnationalbank.com
www.happydeathday.com
www.paramusestates.com
www.trollswereldtour.nl
siem.cyprusnationalbank.com
static.accessonline.com
v1.colonytv.com
www.quarkltd.com
dev.tvecms.usa.nbcuni.com
www.securloq.com
accessonline.com
ssl-secure-vpn.com
www.aseheinrich.com
www.crimsonclupeidae.com
ela.nplcsystems.com
www.dolittle.com.ar
www.theparmenides.com
www.cyprusnationalbank.com
apps.cnb.sh
www.kraftwerks3d.com
vpn.cyprusnationalbank.com
fw.cyprusnationalbank.com
www.mamimozi.hu
www.e-coin.com
stage.sproutonline.com
stage.tvecms.usa.nbcuni.com
www.wackyholidaywallpaperz.com
fsociety00.dat.sh
www.wackywallpaperz.com
stage.surf.nbcuni.com
stage.temptationislandpickuplines.com
www.dolittle.hu
www.surf.nbcuni.com
edit.nbcumv.com
www.purgatorysd.com
www.lastchristmas-film.ch
www.u1rbr0uz.net
z2beeow.bxjyb2jvda.net
thesecretlifeofmypet.com
www.z2beeow.bxjyb2jvda.net
www.1917-film.ch
stage.u1rbr0uz.net
www.allrisenow.com
www.ssl-secure-vpn.com
stage.universaltalentdevelopment.com
www.dolittle-lefilm.ch
www.mafilm.ch
www.temptationislandpickuplines.com
www.littlefilm.nl
www.refstevorq.net
www.lastchristmas-lefilm.ch
sdk.brand-mps.nbcuni.com
www.chiralcorp.com
www.refss0fstvk.net
www.universaldigitaluniverse.com
account.cyprusnationalbank.com
proxy.cyprusnationalbank.com
static-prod.accessonline.com
ids.cyprusnationalbank.com
qa.tvecms.usa.nbcuni.com
www.thesecretlifeofmypet.com
uat.tvecms.usa.nbcuni.com

Other certificates including the domain name colonytv.com

(limited to 100 certificates)
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com

Certificate

The complete raw certificate details for www.colonytv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytZQJkmkCWyGdXcvZadm
kxtIe6P6+HJfRGrxVgXRondeBaFHKFZhbpWMQ1Bdk15z+V4+ijZ1bJV2Zsd1kQhX
MgLEaxN4ADxBsTKDv8IxaNaLXIvGSwZMjQTrVMHpvf9DRW0lZUrnMcEZPo1vb9F8
aqwK3q07YceWAmQ/tDucOxWWwlrpdDP5f5NiFZZKAcxMYmi123IZ7u5xgS79pNRc
/3wKExGbnkeb7sgw5YYoNIbWoCTdmT8f8nbFEel/B3kA8NsZjNe0xHAIPXS2ld6l
3DALpJhkZe/4gB9OGEDHzDRkkQK7MsMEt/4sWqVEfkHqDn4Kn+7ktbjhvJWwX09q
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6744421385258635007815379584602920306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood Cliffs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colonytv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25605819323786027644681706062931155361407303251810968213435034479931720995032929334449897894143028595062415213396976275704746979068080733045718595582214703429112349757904994515655739494251041519049811332686513489883284651649888691155905549125900064436673933476199895906577697297878215262309320002102322185068080057355065317855297106118621944609753707916023239177332878894513148863342782062642457578281422101707388542554271073758002829996101430998216080068529025965494820650050888464063884972806913225055206404000688590832517160487993960947727622494394860656597673498350846977992028742710885322789879978242235945675471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62105fe7b570d53c6eab83383fb06883fa13e49b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trolls-ofilme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depurgesouthholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsdalebookgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittlefilmi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtotrainyourdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-ofilme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmascard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazzkaufreichenbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsecpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomax-looneylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elanplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happydeathday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramusestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollswereldtour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siem.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quarkltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aseheinrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimsonclupeidae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ela.nplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.cnb.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftwerks3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamimozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sproutonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackyholidaywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsociety00.dat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.nbcumv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purgatorysd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allrisenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universaltalentdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlefilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refstevorq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.brand-mps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiralcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refss0fstvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaldigitaluniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-prod.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ids.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b3e59f89c524d0edc7b799e91968ba445627e8d6cc2169ed4671b73f1c43b44c242897a0708e22b82573a57a69380449402ea51715aab826f96990b36f49908640eafdcf059f5a7b828dccf948387b0b2e9a8993a39dd3aba92e5cd8fefc0ca3c3dca0a2d587472d9f7e9a11883dd8f77803a8952aa5c14b7e395cb0712cd43df268190a127d69d343dac263b438dfa2de9f20ac7fa2dcd03434eea07553a97fa673e93eb8bcdccbccf906ec8053ec1d0c733d48aaf90d0f66e27086d20a33a9e382e20956669cb27a174015f235942efb6bcb5a50c277a31cac2580acccf6af87063a01c5980667768f6adabd42b9c52552b2e7017731e69eb1b0f5d1e43580