www.colonytv.com

- NBCUniversal Media, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:c2:67:7f:da:c6:bb:70:7a:b7:e8:5e:72:aa:8c:40 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New Jersey
Locality: Englewood Cliffs
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:67:7f:da:c6:bb:70:7a:b7:e8:5e:72:aa:8c:40
Serial Number (int): 4997088795784304223018224739106327616
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e5:53:41:ab:0e:66:e5:4a:d3:19:cf:a9:ae:aa:8f:4c:ad:49:bc:b7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 13:ce:3d:72:f4:56:bf:53:b6:9b:17:02:b0:63:89:49:e7:b4:4b:73
Fingerprint (sha256): 80:e1:c7:31:ee:30:ae:6d:a1:5e:53:84:fb:ef:fb:22:88:50:a7:45:c2:14:e4:c3:53:99:21:98:d6:ad:a9:93

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.colonytv.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colonytv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colonytv.com
colonytv.com
www.refss0fstvk.net
www.wackywallpaperz.com
www.e-coin.com
stage.tvecms.usa.nbcuni.com
qa.tvecms.usa.nbcuni.com
lt.tvecms.universalkids.nbcuni.com
stage.accessonline.com
ela.nplcsystems.com
erasethehate.org
www.purgatorysd.com
ssl-secure-vpn.com
www.nbcuniversal.com
proxy.cyprusnationalbank.com
www.chiralcorp.com
www.u1rbr0uz.net
www.ma-lefilm.be
dev.tvecms.universalkids.nbcuni.com
www.lastchristmas-film.ch
uat.tvecms.usa.nbcuni.com
www.z2beeow.bxjyb2jvda.net
www.howtotrainyourdragon.com
www.1917-lefilm.ch
www.wackyholidaywallpaperz.com
www.1917-film.ch
apps.cnb.sh
www.mamimozi.hu
www.refstevorq.net
www.notimetodie-lefilm.ch
www.allrisenow.com
sdk.brand-mps.nbcuni.com
lt.tvecms.usa.nbcuni.com
accessonline.com
www.theparmenides.com
stage.erasethehate.org
dev.tvecms.usa.nbcuni.com
www.dolittle-lefilm.ch
www.depurgesouthholdings.com
www.ma-movie.be
static-prod.accessonline.com
www.lastchristmas-lefilm.ch
www.accessonline.com
stage.surf.nbcuni.com
www.ramsdalebookgroup.com
www.paramusestates.com
v1.colonytv.com
www.cyprusnationalbank.com
www.camsecpro.com
prod.tvecms.universalkids.nbcuni.com
www.securloq.com
thesecretlifeofmypet.com
www.mafilm.ch
stage.u1rbr0uz.net
www.ma-lefilm.ch
www.lomax-looneylaw.com
stage.universalkids.com
account.cyprusnationalbank.com
www.happydeathday.com
www.notimetodie-film.ch
stage.tvecms.universalkids.nbcuni.com
fsociety00.dat.sh
edit.nbcumv.com
www.thesecretlifeofmypet.com
www.universaldigitaluniverse.com
stage.temptationislandpickuplines.com
www.crimsonclupeidae.com
stage.universaltalentdevelopment.com
www.temptationislandpickuplines.com
static.accessonline.com
www.elanplcsystems.com
www.erasethehate.org
www.kraftwerks3d.com
www.ma-film.at
static-stage.accessonline.com
uat.tvecms.universalkids.nbcuni.com
directory.theparmenides.com
www.littlefilm.nl
www.surf.nbcuni.com
www.quarkltd.com
z2beeow.bxjyb2jvda.net
www.mazzkaufreichenbach.com
www.aseheinrich.com
stage.sproutonline.com
www.dolittle-film.ch

Other certificates including the domain name colonytv.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.colonytv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kbofN1vajx5edC6oNjY
cIGKEcIveX9tAQ1Y7/isgkC5ymC8kVYkyFn/dv5b/Grr0e872nyHyg8i54cvA4oG
1agWyvgoTckj3dLyaK0KAYeUXr/nNey6Tr89n6cwVou4w2abAUEQGqnsNu+y6DT+
RK3kvr33vWmS8rFCwnHl86R+vdIxDBLr07PbnlJhBjTUE0HV6lWFczZDJ4sybcJW
w2DdtM7rA/FfSPewv9nIaoxzQ3+C5tKCHIUSQ7F6MmkJaKmGI/MWNpwgis40g1ro
tZQuDLRAJmdeOag/WmV5KpnXtnBwiOp2kPqMz9Vzl55fMlz7CN2BNj3oy29tQ2In
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4997088795784304223018224739106327616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood Cliffs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colonytv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28059869817042666795528228687389757718938305571643661135402298308719284935870827046015859264352351813747878614848521629297889250732571953162625663111904413884459085602359717151486953263744597327183894392200477337904361073134070458139554084288028069025020901563627259990229525953218528631059634044703126108609419034092096239559957317278765512456217829985479892814231382991433406444448060217802758948319136714382266438506965208128284850545881878161925959537181548170411348655668533898134507053969749075204631095945355863490878845667768741568431837732852288162001909056065482542184941924865965801330109167684699342120769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e55341ab0e66e54ad319cfa9aeaa8f4cad49bcb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2079 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refss0fstvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ela.nplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purgatorysd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiralcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtotrainyourdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackyholidaywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.cnb.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamimozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refstevorq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allrisenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.brand-mps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depurgesouthholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-prod.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsdalebookgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramusestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsecpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomax-looneylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happydeathday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsociety00.dat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.nbcumv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaldigitaluniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimsonclupeidae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universaltalentdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elanplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftwerks3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlefilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quarkltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazzkaufreichenbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aseheinrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sproutonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-film.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016dbbf331ea0000040300473045022100c507bed53764871abbbc70094fe4e9f27ca733d922a9951ddd2d82c8f5d3a78102201a119b6dc9dd42a2387fca9a664f3af728a24d6daa24f7ebf6d4cfc945d494a80075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbbf33175000004030046304402205bdaf06c44a812ca7182f4ec8d35430b082bcef06657dc652abbf011b160951f02205e5626a0066ab77f62f1fea868afba3e8135d172871c0a2792a39e2afe04b888
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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