turner.com

- TURNER BROADCASTING SYSTEM, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 48:d6:29:16:6c:6f:0e:ad:1b:dd:11:28 was issued on by GlobalSign nv-sa.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

TURNER BROADCASTING SYSTEM, INC.

Organization: TURNER BROADCASTING SYSTEM, INC.
State / Province: Georgia
Locality: Atlanta
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:d6:29:16:6c:6f:0e:ad:1b:dd:11:28
Serial Number (int): 22541824863202022883805958440
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b7:1d:8e:19:80:8e:0a:ed:3c:23:fb:1c:2d:82:1d:7f:34:98:71:4c
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 6d:1e:cf:ac:b9:62:37:73:01:17:18:c2:88:f9:a7:29:d8:a7:73:e8
Fingerprint (sha256): 9b:d2:a6:c1:d5:cd:11:6d:79:41:54:5b:b2:6e:8b:1b:11:b5:38:5c:45:e1:09:4b:77:a0:6d:2d:96:f8:94:e2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate turner.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turner.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

turner.com
adamruinseverything.com
*.adamruinseverything.com
adultswim.com
*.adultswimfestival.com
*.adventuretime.com
aewawards.com
*.aewawards.com
aewdynamitearena.com
*.aewdynamitearena.com
www.blockletegames.com
cartoonnetwork.com
cartoonnetworkhotel.com
*.cartoonnetworkhotel.com
*.cdpsvc.com
chasingthecurelive.com
*.cinemax.com
static.arabic.cnn.com
*.dckidsfandome.com
*.explorepartsunknown.com
filmstruck.com
getmetohollywood.com
*.getmetohollywood.com
*.hbo.com
*.data.hbo.com
*.varys.data.hbo.com
*.hbomax.com
heaveninc.com
www.heaveninc.com
iamthenight.com
*.iamthenight.com
impracticaljokers.com
*.impracticaljokers.com
impracticaljokersmovie.com
*.impracticaljokersmovie.com
impracticaljokersthemovie.com
*.impracticaljokersthemovie.com
jokersmovie.com
*.jokersmovie.com
ncaa.com
*.bracketchallenge.ncaa.com
*.blackout.ngtv.io
*.geo.ngtv.io
*.token.ngtv.io
*.powerpuffgirls.com
*.powerpuffyourself.com
*.rickandmorty.com
samanthabee.com
sambee.com
shaqtoons.com
*.shaqtoons.com
*.stevenuniversethemovie.com
*.summercampisland.com
superstation.com
tbs.com
tbshbcucashout.com
*.tbshbcucashout.com
tcm.com
*.tcmbacklot.com
*.tcmcruise.com
*.tcmwineclub.com
thealienist.com
*.thealienist.com
tmz.com
*.tmz.com
tnt.tv
tntdrama.com
toofab.com
*.toofab.com
trutv.com
*.cdn.trutv.com
*.imgfb.cdn.trutv.com
*.static.cdn.trutv.com
*.video.cdn.trutv.com
*.qa.trutv.com
*.aspen.turner.com
*.now.turner.com
warnermedia.com
*.warnermedia.com
*.warnermediafitnation.com
*.warnermediagroup.com
*.warnermediaready.com
*.warnermediasupplierdiversity.com
*.wbtvd.com
*.certs.wbtvd.com
*.webarebears.com
*.wilfordindustries.com
wipeoutbracket.com
*.wipeoutbracket.com
*.wmcdp.io
*.ref.prism.wmcdp.io
*.prismconfig.wmcdp.io

Other certificates including the domain name turner.com

(limited to 100 certificates)
sgtxprdresweb01.turner.com
dns-vetting1b.map.fastly.net
mobileapps.turner.com
dns-vetting2.map.fastly.net
tul-dbs003686.turner.com
inews.turner.com
concertservice40test.turner.com
dns-vetting1b.map.fastly.net
www.eventpress.turner.com
meta-permsmgmt-prod.turner.com
lsd-prod-56m.gslb.vgtf.net
epmuat.turner.com
turner.com
cnnc-uccx-pub.turner.com
*.msc.turner.com
fw-mexso.turner.com
nycmail1.turner.com
dns-vetting1b.map.fastly.net
music.turner.com
chef-server-dev1.turner.com
sdc.turner.com
millenniuminternal.turner.com
concert40test.turner.com
aaa-uat.turner.com
harbor-dvps.turner.com
iso-splunkcsh1.iso.turner.com
turner.com
looker.turner.com
edc-splat-tve.cdn.turner.com
metrohk-coreorchsrv-vip.turner.com
l.ssl.fastly.net
tbseuropeonline.turner.com
sslvs06.igloosoftware.com
*.ref.sdvi.csc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
turner-tls.map.fastly.net
dns-vetting1j.map.fastly.net
music.turner.com
elec-useroptions-dev.turner.com
turner-tls.map.fastly.net
sdc.turner.com
dns-vetting2.map.fastly.net
eahapsfinuat.turner.com
affiliateportal.turner.com
janusstsint.turner.com
fw-bogso.turner.com
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
api.hilbert.iso.turner.com
core.ooyala.turner.com
dynaimage-prod-nba.ids.turner.com
polls.turner.com
dns-vetting1b.map.fastly.net
dns-vetting2.map.fastly.net
raext.turner.com
sslvs06.igloosoftware.com
www.turner.com
eahapsfinupuat.turner.com
janusstsmain.turner.com
dev.turner.com
catdv.turner.com
lumberjack-prod.nba.ids.turner.com
dns-vetting1j.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
msc.turner.com
*.cdn.turner.com
eshare.turner.com
bestsqs-vip.turner.com
eahapsporedprd.turner.com
dns-vetting1j.map.fastly.net
www.turner.com
cnnitouch-prod1.turner.com
docs.ids.turner.com
splunk-hec-dev.nonprod.iso.turner.com
sdc.turner.com
atl-expwy-c1.turner.com
deliver.turner.com
splashtop-chl.turner.com
mssdoc.turner.com
dns-vetting1b.map.fastly.net
sslvs01.igloosoftware.com
dns-vetting1b.map.fastly.net
l.ssl.fastly.net
admin.cartoonnetwork.asia
dns-vetting1b.map.fastly.net
detections.iso.turner.com
eahapsporedprdtc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
aspen.turner.com
eahasfadmin-new.turner.com
sslvs06.igloosoftware.com
collabredirects.turner.com
ppsprmse.turner.com
dns-vetting1b.map.fastly.net
cnn-dalton-qa-2.ids.turner.com
guardian.turner.com

Certificate

The complete raw certificate details for turner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL5zCCCs+gAwIBAgIMSNYpFmxvDq0b3REoMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMTAzMzAxNjExMDNaFw0y
MjA1MDExNjExMDNaMHExCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdHZW9yZ2lhMRAw
DgYDVQQHEwdBdGxhbnRhMSkwJwYDVQQKEyBUVVJORVIgQlJPQURDQVNUSU5HIFNZ
U1RFTSwgSU5DLjETMBEGA1UEAxMKdHVybmVyLmNvbTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMW4Zpgn1yp1liVNFOQ1pxt64g/C3hpa07FhL+OodqPg
hm296ZV+TxLCrxlolDq/osHxEuD+rtKgJeota96nA/+N9q+W5eT13Z8l9f1TSJJ9
+bjq4O0QqQn4T7W0EhiZAiNSkj+1CaW9uGsuDBlHMjGVvXo6Hfav5TDiF+bJkmp8
WfdsTJ3t10z/qccRWn1enRykYmbzBhw+knVp9Zn/iGRQBtBI3r3Ku6K6x72+J6os
/Fk1dFB70m1B3EXEfof8WfFHkYcIPCf9B6UA86TWCs52qLyK2sWnaKgb9ZvP8Xkb
0PDACeb0YTGPXbZ5pgql43dbwdWgsXIVTXsOfwiT2tECAwEAAaOCCJ4wggiaMA4G
A1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4aHR0
cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNhMjAx
OC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2dz
cnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEF
BQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYG
Z4EMAQICMAkGA1UdEwQCMAAwggceBgNVHREEggcVMIIHEYIKdHVybmVyLmNvbYIX
YWRhbXJ1aW5zZXZlcnl0aGluZy5jb22CGSouYWRhbXJ1aW5zZXZlcnl0aGluZy5j
b22CDWFkdWx0c3dpbS5jb22CFyouYWR1bHRzd2ltZmVzdGl2YWwuY29tghMqLmFk
dmVudHVyZXRpbWUuY29tgg1hZXdhd2FyZHMuY29tgg8qLmFld2F3YXJkcy5jb22C
FGFld2R5bmFtaXRlYXJlbmEuY29tghYqLmFld2R5bmFtaXRlYXJlbmEuY29tghZ3
d3cuYmxvY2tsZXRlZ2FtZXMuY29tghJjYXJ0b29ubmV0d29yay5jb22CF2NhcnRv
b25uZXR3b3JraG90ZWwuY29tghkqLmNhcnRvb25uZXR3b3JraG90ZWwuY29tggwq
LmNkcHN2Yy5jb22CFmNoYXNpbmd0aGVjdXJlbGl2ZS5jb22CDSouY2luZW1heC5j
b22CFXN0YXRpYy5hcmFiaWMuY25uLmNvbYITKi5kY2tpZHNmYW5kb21lLmNvbYIZ
Ki5leHBsb3JlcGFydHN1bmtub3duLmNvbYIOZmlsbXN0cnVjay5jb22CFGdldG1l
dG9ob2xseXdvb2QuY29tghYqLmdldG1ldG9ob2xseXdvb2QuY29tggkqLmhiby5j
b22CDiouZGF0YS5oYm8uY29tghQqLnZhcnlzLmRhdGEuaGJvLmNvbYIMKi5oYm9t
YXguY29tgg1oZWF2ZW5pbmMuY29tghF3d3cuaGVhdmVuaW5jLmNvbYIPaWFtdGhl
bmlnaHQuY29tghEqLmlhbXRoZW5pZ2h0LmNvbYIVaW1wcmFjdGljYWxqb2tlcnMu
Y29tghcqLmltcHJhY3RpY2Fsam9rZXJzLmNvbYIaaW1wcmFjdGljYWxqb2tlcnNt
b3ZpZS5jb22CHCouaW1wcmFjdGljYWxqb2tlcnNtb3ZpZS5jb22CHWltcHJhY3Rp
Y2Fsam9rZXJzdGhlbW92aWUuY29tgh8qLmltcHJhY3RpY2Fsam9rZXJzdGhlbW92
aWUuY29tgg9qb2tlcnNtb3ZpZS5jb22CESouam9rZXJzbW92aWUuY29tgghuY2Fh
LmNvbYIbKi5icmFja2V0Y2hhbGxlbmdlLm5jYWEuY29tghIqLmJsYWNrb3V0Lm5n
dHYuaW+CDSouZ2VvLm5ndHYuaW+CDyoudG9rZW4ubmd0di5pb4IUKi5wb3dlcnB1
ZmZnaXJscy5jb22CFyoucG93ZXJwdWZmeW91cnNlbGYuY29tghIqLnJpY2thbmRt
b3J0eS5jb22CD3NhbWFudGhhYmVlLmNvbYIKc2FtYmVlLmNvbYINc2hhcXRvb25z
LmNvbYIPKi5zaGFxdG9vbnMuY29tghwqLnN0ZXZlbnVuaXZlcnNldGhlbW92aWUu
Y29tghYqLnN1bW1lcmNhbXBpc2xhbmQuY29tghBzdXBlcnN0YXRpb24uY29tggd0
YnMuY29tghJ0YnNoYmN1Y2FzaG91dC5jb22CFCoudGJzaGJjdWNhc2hvdXQuY29t
ggd0Y20uY29tghAqLnRjbWJhY2tsb3QuY29tgg8qLnRjbWNydWlzZS5jb22CESou
dGNtd2luZWNsdWIuY29tgg90aGVhbGllbmlzdC5jb22CESoudGhlYWxpZW5pc3Qu
Y29tggd0bXouY29tggkqLnRtei5jb22CBnRudC50doIMdG50ZHJhbWEuY29tggp0
b29mYWIuY29tggwqLnRvb2ZhYi5jb22CCXRydXR2LmNvbYIPKi5jZG4udHJ1dHYu
Y29tghUqLmltZ2ZiLmNkbi50cnV0di5jb22CFiouc3RhdGljLmNkbi50cnV0di5j
b22CFSoudmlkZW8uY2RuLnRydXR2LmNvbYIOKi5xYS50cnV0di5jb22CEiouYXNw
ZW4udHVybmVyLmNvbYIQKi5ub3cudHVybmVyLmNvbYIPd2FybmVybWVkaWEuY29t
ghEqLndhcm5lcm1lZGlhLmNvbYIaKi53YXJuZXJtZWRpYWZpdG5hdGlvbi5jb22C
Fioud2FybmVybWVkaWFncm91cC5jb22CFioud2FybmVybWVkaWFyZWFkeS5jb22C
Iioud2FybmVybWVkaWFzdXBwbGllcmRpdmVyc2l0eS5jb22CCyoud2J0dmQuY29t
ghEqLmNlcnRzLndidHZkLmNvbYIRKi53ZWJhcmViZWFycy5jb22CFyoud2lsZm9y
ZGluZHVzdHJpZXMuY29tghJ3aXBlb3V0YnJhY2tldC5jb22CFCoud2lwZW91dGJy
YWNrZXQuY29tggoqLndtY2RwLmlvghQqLnJlZi5wcmlzbS53bWNkcC5pb4IWKi5w
cmlzbWNvbmZpZy53bWNkcC5pbzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFLcd
jhmAjgrtPCP7HC2CHX80mHFMMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBo0tOAlm3GyXFanGhMLvcJiErwgwh/QEjYMP7Wvt+d5KFkGXYJ
9qRIAlvrKvXMffirCCx37br6Evtk9+VBC15cJWMKVFZs/f3AKnF+36GYJl/Tp+OR
wxrKtPSTF9uq8N29oYCSmCp+SJqlKUo84/zSAqQvuxvtpWxyVjwn9N9Xvg8xCRNV
AJNQv1uoOx5GNUQRAo+DOICjDWbrZI4tcxpDbAgpNQadudTldSXeMA68jNDtmTi9
3uCFxh0pJh4fDcQ9CJ6ekELCDvuERObVRKrYVGiIMKGm7WXnHroe2S0M0tq7ABVZ
1/CX0gFi35ZVf70sgJWEGTvI4a//WL9F/nkw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbhmmCfXKnWWJU0U5DWn
G3riD8LeGlrTsWEv46h2o+CGbb3plX5PEsKvGWiUOr+iwfES4P6u0qAl6i1r3qcD
/432r5bl5PXdnyX1/VNIkn35uOrg7RCpCfhPtbQSGJkCI1KSP7UJpb24ay4MGUcy
MZW9ejod9q/lMOIX5smSanxZ92xMne3XTP+pxxFafV6dHKRiZvMGHD6SdWn1mf+I
ZFAG0Ejevcq7orrHvb4nqiz8WTV0UHvSbUHcRcR+h/xZ8UeRhwg8J/0HpQDzpNYK
znaovIraxadoqBv1m8/xeRvQ8MAJ5vRhMY9dtnmmCqXjd1vB1aCxchVNew5/CJPa
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22541824863202022883805958440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-30 16:11:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-01 16:11:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TURNER BROADCASTING SYSTEM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24959877481740120724509166558689114214076247003261027967399303635819808953412115112201465171757912491436849354840775297934442834716689954103968545465313785325861194732796009388001305880036700795827509245062217020051805029519647475580823915048631104362459956439824659573816942106470387238129731621385930376839683049583965133868399901207360254875750404878071615103671528548598151156679235394101772757681311720136564476434732316890347359846229838458823409551279832218920542973908683148878215457560636289729488090966755366527794636796595303776024186862425640824132861131025096584783220063611933422062458710527142683466449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1813 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamruinseverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamruinseverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultswimfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventuretime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aewawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aewawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aewdynamitearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aewdynamitearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockletegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetworkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdpsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasingthecurelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.arabic.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dckidsfandome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explorepartsunknown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmstruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmetohollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmetohollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varys.data.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbomax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heaveninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heaveninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamthenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamthenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impracticaljokersthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impracticaljokersthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokersmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracketchallenge.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackout.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.token.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpuffgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpuffyourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rickandmorty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samanthabee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaqtoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaqtoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenuniversethemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summercampisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbshbcucashout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbshbcucashout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmbacklot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmcruise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcmwineclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealienist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thealienist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toofab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toofab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgfb.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.now.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediafitnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediaready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediasupplierdiversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbtvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certs.wbtvd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webarebears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilfordindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wipeoutbracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wipeoutbracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmcdp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ref.prism.wmcdp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prismconfig.wmcdp.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b71d8e19808e0aed3c23fb1c2d821d7f3498714c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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