turner.com

- TURNER BROADCASTING SYSTEM, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 47:c7:e4:0e:d6:35:8e:bf:b9:b2:6e:23 was issued on by GlobalSign nv-sa.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

TURNER BROADCASTING SYSTEM, INC.

Organization: TURNER BROADCASTING SYSTEM, INC.
State / Province: Georgia
Locality: Atlanta
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 47:c7:e4:0e:d6:35:8e:bf:b9:b2:6e:23
Serial Number (int): 22215088908666722648256048675
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1c:0b:bd:84:d0:8b:68:82:d4:d0:df:de:69:66:72:c0:46:fb:ae:a9
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 43:1c:0f:d9:9e:6f:c7:26:70:dc:12:4e:15:57:d1:36:d1:71:47:81
Fingerprint (sha256): 88:cb:7b:48:53:d3:bf:5d:59:96:37:7a:92:02:89:2c:a9:12:43:73:ec:0b:1d:ca:94:ec:35:fb:99:92:cb:ca

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate turner.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turner.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turner.com
adamruinseverything.com
*.adamruinseverything.com
adultswim.com
*.adultswimfestival.com
*.adventuretime.com
aewawards.com
*.aewawards.com
aewdynamitearena.com
*.aewdynamitearena.com
beatthecube.com
*.beatthecube.com
www.blockletegames.com
cartoonnetwork.com
cartoonnetworkhotel.com
*.cartoonnetworkhotel.com
*.cdpsvc.com
chasingthecurelive.com
*.cinemax.com
static.arabic.cnn.com
*.dckidsfandome.com
*.explorepartsunknown.com
filmstruck.com
getmetohollywood.com
*.getmetohollywood.com
*.hbo.com
*.data.hbo.com
*.varys.data.hbo.com
*.hbomax.com
heaveninc.com
www.heaveninc.com
iamthenight.com
*.iamthenight.com
impracticaljokers.com
*.impracticaljokers.com
impracticaljokersmovie.com
*.impracticaljokersmovie.com
impracticaljokersthemovie.com
*.impracticaljokersthemovie.com
jokersmovie.com
*.jokersmovie.com
ncaa.com
*.bracketchallenge.ncaa.com
*.blackout.ngtv.io
*.geo.ngtv.io
*.token.ngtv.io
*.powerpuffgirls.com
*.powerpuffyourself.com
*.rickandmorty.com
samanthabee.com
sambee.com
shaqtoons.com
*.shaqtoons.com
*.stevenuniversethemovie.com
*.summercampisland.com
superstation.com
tbs.com
tbshbcucashout.com
*.tbshbcucashout.com
tcm.com
*.tcmbacklot.com
*.tcmcruise.com
*.tcmwineclub.com
thealienist.com
*.thealienist.com
tmz.com
*.tmz.com
tnt.tv
tntdrama.com
toofab.com
*.toofab.com
trutv.com
*.cdn.trutv.com
*.imgfb.cdn.trutv.com
*.static.cdn.trutv.com
*.video.cdn.trutv.com
*.qa.trutv.com
*.aspen.turner.com
*.now.turner.com
warnermedia.com
*.warnermedia.com
*.warnermediafitnation.com
*.warnermediagroup.com
*.warnermediaready.com
*.warnermediasupplierdiversity.com
*.wbtvd.com
*.certs.wbtvd.com
*.webarebears.com
*.wilfordindustries.com
wipeoutbracket.com
*.wipeoutbracket.com
*.wmcdp.io
*.ref.prism.wmcdp.io
*.prismconfig.wmcdp.io

Other certificates including the domain name turner.com

(limited to 100 certificates)
sgtxprdresweb01.turner.com
dns-vetting1b.map.fastly.net
mobileapps.turner.com
dns-vetting2.map.fastly.net
tul-dbs003686.turner.com
inews.turner.com
concertservice40test.turner.com
dns-vetting1b.map.fastly.net
www.eventpress.turner.com
meta-permsmgmt-prod.turner.com
lsd-prod-56m.gslb.vgtf.net
epmuat.turner.com
turner.com
cnnc-uccx-pub.turner.com
*.msc.turner.com
fw-mexso.turner.com
nycmail1.turner.com
dns-vetting1b.map.fastly.net
music.turner.com
chef-server-dev1.turner.com
sdc.turner.com
millenniuminternal.turner.com
concert40test.turner.com
aaa-uat.turner.com
harbor-dvps.turner.com
iso-splunkcsh1.iso.turner.com
turner.com
looker.turner.com
edc-splat-tve.cdn.turner.com
metrohk-coreorchsrv-vip.turner.com
l.ssl.fastly.net
tbseuropeonline.turner.com
sslvs06.igloosoftware.com
*.ref.sdvi.csc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
turner-tls.map.fastly.net
dns-vetting1j.map.fastly.net
music.turner.com
elec-useroptions-dev.turner.com
turner-tls.map.fastly.net
sdc.turner.com
dns-vetting2.map.fastly.net
eahapsfinuat.turner.com
affiliateportal.turner.com
janusstsint.turner.com
fw-bogso.turner.com
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
api.hilbert.iso.turner.com
core.ooyala.turner.com
dynaimage-prod-nba.ids.turner.com
polls.turner.com
dns-vetting1b.map.fastly.net
dns-vetting2.map.fastly.net
raext.turner.com
sslvs06.igloosoftware.com
www.turner.com
eahapsfinupuat.turner.com
janusstsmain.turner.com
dev.turner.com
catdv.turner.com
lumberjack-prod.nba.ids.turner.com
dns-vetting1j.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
msc.turner.com
*.cdn.turner.com
eshare.turner.com
bestsqs-vip.turner.com
eahapsporedprd.turner.com
dns-vetting1j.map.fastly.net
www.turner.com
cnnitouch-prod1.turner.com
docs.ids.turner.com
splunk-hec-dev.nonprod.iso.turner.com
sdc.turner.com
atl-expwy-c1.turner.com
deliver.turner.com
splashtop-chl.turner.com
mssdoc.turner.com
dns-vetting1b.map.fastly.net
sslvs01.igloosoftware.com
dns-vetting1b.map.fastly.net
l.ssl.fastly.net
admin.cartoonnetwork.asia
dns-vetting1b.map.fastly.net
detections.iso.turner.com
eahapsporedprdtc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
aspen.turner.com
eahasfadmin-new.turner.com
sslvs06.igloosoftware.com
collabredirects.turner.com
ppsprmse.turner.com
dns-vetting1b.map.fastly.net
cnn-dalton-qa-2.ids.turner.com
guardian.turner.com

Certificate

The complete raw certificate details for turner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9tnYQOICKK0cSS8Bygc
68Egf5r1sBrnrZqdS0e7nsz+KmOEaKT89AlMH6o40yU+ZQAbYpsRYjjmbpeTukPq
OsGDngvx/o7+i0qF/jSBFx2bc/n1lxc4XBKxzvC2fBGpy09eQgdtPUf5vlC4SKxp
RPToCvTIj8uVEgSXmqc2KtyeFPFIVnF7YcbGVF+Htzwv+ZNRiSGg3XmQni3Ma2hO
R22KWuGa8lNvM3+LZNNUngj2eykMhKUYjraq+fdT1F6E7/GC8ePmfL/evByugSwH
8/oAMM2uMi7MzeevRkCelN5ouuXklNo6A2zOhzzj7yY/ZdR7QM2fIz3L3YlvxJMr
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22215088908666722648256048675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 19:11:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-22 19:11:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TURNER BROADCASTING SYSTEM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23714755086671664412683487767209641788447263051765338643981742686090458491182373147839576876676606532549646948049305535923010731448347087329136543439495625615875966964333078341088723739418769961528965326847991277113587404592809090073184790868923942813783239773456891752125610951467150754811067957665916622241024451797736963403648878941852130432403416120255455483237964380521959837873094240326767763834300659799524290211991112742142845720196751529681694191723533698956708379832770417693009613325517345927857119357213550813294880291377341278543679083427378819535020462929433963431658899257100002685201977590487830440707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1849 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamruinseverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamruinseverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultswimfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventuretime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aewawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aewawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aewdynamitearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aewdynamitearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatthecube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatthecube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockletegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetworkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdpsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasingthecurelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.arabic.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dckidsfandome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explorepartsunknown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmstruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmetohollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmetohollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varys.data.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbomax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heaveninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heaveninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamthenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamthenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokersthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokersthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracketchallenge.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackout.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.token.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpuffgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpuffyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rickandmorty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samanthabee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaqtoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaqtoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenuniversethemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summercampisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbshbcucashout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbshbcucashout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmbacklot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmcruise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmwineclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealienist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thealienist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toofab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toofab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgfb.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.now.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediafitnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediaready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediasupplierdiversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbtvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certs.wbtvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webarebears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilfordindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wipeoutbracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wipeoutbracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmcdp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ref.prism.wmcdp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismconfig.wmcdp.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c0bbd84d08b6882d4d0dfde696672c046fbaea9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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