www.turner.com

- TURNER BROADCASTING SYSTEM, INC. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 24:a4:37:4e:05:27:7b:27:91:d8:60:3a was issued on by GlobalSign nv-sa.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

TURNER BROADCASTING SYSTEM, INC.

Organization: TURNER BROADCASTING SYSTEM, INC.
State / Province: Georgia
Locality: Atlanta
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 24:a4:37:4e:05:27:7b:27:91:d8:60:3a
Serial Number (int): 11339985357359218142737883194
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 01:30:fc:47:c8:34:fd:02:18:8e:b5:54:3e:a5:98:35:a7:49:ba:4a
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 78:26:ba:52:83:72:da:00:5b:13:01:b4:d9:38:0d:a9:4e:62:d4:a8
Fingerprint (sha256): b5:cc:06:31:ec:51:27:c1:08:40:9e:e4:fc:74:9c:66:36:50:01:d8:c3:69:d8:bf:f4:12:62:44:bf:02:9c:2f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www.turner.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.turner.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.turner.com
celebrityshowoff.com
cnn.com
cnnpolitics.com
tournamentoflaughs.com
*.adultswim.com
*.cdn.adultswim.com
*.atgamewiz.com
*.ben10.com
*.bleacherreport.com
*.live.bleacherreport.com
*.t.bleacherreport.com
*.bleacherreportlive.com
*.brlive.com
*.brlive.io
*.cartoonnetwork.asia
*.cartoonnetwork.com
*.cdn.cartoonnetwork.com
*.staging.cartoonnetwork.com
*.cartoonnetworkasia.com
*.cartoonnetworkpr.com
*.catchsports.com
*.celebrityshowoff.com
*.chasingthecurelive.com
*.cnn.com
*.api.cnn.com
*.cerebro.api.cnn.com
*.cdn.cnn.com
*.go.cnn.com
*.money.cnn.com
*.api.platform.cnn.com
*.cnn.io
*.api.cnn.io
*.api.cerebro.cnn.io
*.cnnpolitics.com
*.d2c-ott.com
*.filmstruck.d2c-ott.com
*.config.filmstruck.d2c-ott.com
*.iris.filmstruck.d2c-ott.com
*.iris.d2c-ott.com
*.dcfandome.com
*.eleague.com
*.filmstruck.com
*.greatbig.com
*.greatbigstory.com
*.nba.com
*.lp.nba.com
*.tentpole.nba.com
*.nba.net
*.sim.nba.net
*.tentpole.nba.net
*.ncaa.com
*.bcg.ncaa.com
*.mml.ncaa.com
*.mml-desktop.ncaa.com
*.mml-web.ncaa.com
*.turner.ncaa.com
*.ngtv.io
*.aspen.ngtv.io
*.ods.ngtv.io
*.powerpufftheworld.com
*.samanthabee.com
*.sambee.com
*.stevenuniverseselfesteem.com
*.superstation.com
*.suspensecollection.com
*.tbs.com
*.cdn.tbs.com
*.nycf.tbs.com
*.tcm.com
*.cdn.tcm.com
*.thesuspensecollection.com
*.ti-platform.com
*.i.cdn.ti-platform.com
*.tnt.tv
*.tntdrama.com
*.cdn.tntdrama.com
*.tournamentoflaughs.com
*.trutv.com
*.cdn.trutv.com
*.turner.com
*.cdn.turner.com
*.dynaimage.cdn.turner.com
*.vgtf.net
*.aspen.vgtf.net
*.warnermediacdn.com
*.warnermediaupfront.com
*.wnba.com
turner.com

Other certificates including the domain name turner.com

(limited to 100 certificates)
sgtxprdresweb01.turner.com
dns-vetting1b.map.fastly.net
mobileapps.turner.com
dns-vetting2.map.fastly.net
tul-dbs003686.turner.com
inews.turner.com
concertservice40test.turner.com
dns-vetting1b.map.fastly.net
www.eventpress.turner.com
meta-permsmgmt-prod.turner.com
lsd-prod-56m.gslb.vgtf.net
epmuat.turner.com
turner.com
cnnc-uccx-pub.turner.com
*.msc.turner.com
fw-mexso.turner.com
nycmail1.turner.com
dns-vetting1b.map.fastly.net
music.turner.com
chef-server-dev1.turner.com
sdc.turner.com
millenniuminternal.turner.com
concert40test.turner.com
aaa-uat.turner.com
harbor-dvps.turner.com
iso-splunkcsh1.iso.turner.com
turner.com
looker.turner.com
edc-splat-tve.cdn.turner.com
metrohk-coreorchsrv-vip.turner.com
l.ssl.fastly.net
tbseuropeonline.turner.com
sslvs06.igloosoftware.com
*.ref.sdvi.csc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
turner-tls.map.fastly.net
dns-vetting1j.map.fastly.net
music.turner.com
elec-useroptions-dev.turner.com
turner-tls.map.fastly.net
sdc.turner.com
dns-vetting2.map.fastly.net
eahapsfinuat.turner.com
affiliateportal.turner.com
janusstsint.turner.com
fw-bogso.turner.com
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
api.hilbert.iso.turner.com
core.ooyala.turner.com
dynaimage-prod-nba.ids.turner.com
polls.turner.com
dns-vetting1b.map.fastly.net
dns-vetting2.map.fastly.net
raext.turner.com
sslvs06.igloosoftware.com
www.turner.com
eahapsfinupuat.turner.com
janusstsmain.turner.com
dev.turner.com
catdv.turner.com
lumberjack-prod.nba.ids.turner.com
dns-vetting1j.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
msc.turner.com
*.cdn.turner.com
eshare.turner.com
bestsqs-vip.turner.com
eahapsporedprd.turner.com
dns-vetting1j.map.fastly.net
www.turner.com
cnnitouch-prod1.turner.com
docs.ids.turner.com
splunk-hec-dev.nonprod.iso.turner.com
sdc.turner.com
atl-expwy-c1.turner.com
deliver.turner.com
splashtop-chl.turner.com
mssdoc.turner.com
dns-vetting1b.map.fastly.net
sslvs01.igloosoftware.com
dns-vetting1b.map.fastly.net
l.ssl.fastly.net
admin.cartoonnetwork.asia
dns-vetting1b.map.fastly.net
detections.iso.turner.com
eahapsporedprdtc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
aspen.turner.com
eahasfadmin-new.turner.com
sslvs06.igloosoftware.com
collabredirects.turner.com
ppsprmse.turner.com
dns-vetting1b.map.fastly.net
cnn-dalton-qa-2.ids.turner.com
guardian.turner.com

Certificate

The complete raw certificate details for www.turner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RrWcQD/6642dgIPQcWG
tb0WXoFlfIF19zS72b32RWMe9C201rGaTQkSeIbmNVhguACrhNbgi6Ksmgzln/XE
+FnMSG3UnaDOis+gQ0E00ccB11GrN1O+cwkVYRkqq/8+CvAffCunxoDHDTXtY738
Yo0J8s8ehzOOfsMtUrlkE1OpoltD6EhkPIy6JFKj+gV3CjZZSDwNhbfMmjdDHMpK
tDmimABR8l3yShGFZoLojvYRIGEWnnsfSTjxkrMzWnO+C9cqYlDl1kmCMnawXwa+
A+2L5conLEtOT2hkOlhYosZdmQrPCcK4KKdpyFrL3i/MtMmHtygvKNEnEokYQXJ6
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11339985357359218142737883194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 16:56:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 16:56:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TURNER BROADCASTING SYSTEM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.turner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30941618860962610603241835081948424157143180032267728411310915482330575502121313838988790005625777840293659357434624165479266735864818838370023497763479599865007238078463369041080327687190863273216222471122570878534212306868448634437563925267918186001868317078124641525112583680242163388764600687817904550817939154642739422683944752018184972900720845341501260039129635074646273772733984653984374178148616254839752808711611170339359252492916769614126441071686638559222092465262556860019686458292454874463544560027998669098908048951425495426769055011728266466291439692902862241143314817028481518614446275696605011278359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrityshowoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tournamentoflaughs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atgamewiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ben10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bleacherreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live.bleacherreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t.bleacherreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bleacherreportlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brlive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetwork.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebrityshowoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasingthecurelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerebro.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cerebro.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmstruck.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.filmstruck.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iris.filmstruck.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iris.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcfandome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmstruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentpole.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sim.nba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentpole.nba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcg.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mml.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mml-desktop.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mml-web.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turner.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ods.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpufftheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samanthabee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sambee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenuniverseselfesteem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suspensecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nycf.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesuspensecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ti-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.ti-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tournamentoflaughs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynaimage.cdn.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vgtf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.vgtf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediacdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediaupfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wnba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turner.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0130fc47c834fd02188eb5543ea59835a749ba4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017589e324050000040300483046022100f6192fc0c1442097a609d0f95913551c0ac5ee09daa8f66e81fb13f7dfe0591a022100c9c55c121c3933e319a4613dba399fee32d6142075d82e3c8848c38e93c0aff9007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017589e326a40000040300473045022100c7b88c13752536391a5330abeb416d936911b6dd71417edf13c8f970e5dc4c020220501276a4b17dc7b9bf106a7d4e906a3420b10b8524f56326568b56c5a3b30d05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007397d3a0d23d690ef75c8d6bfa26832b752d12718722e22d54b2ba422d5ef74ae3011afc03acd18f4645c7a11647bb894dd2d47d813fbc2666de24ab4f4fe6cd422b42ee7c7fdec442b130293ba5513a4c32b65dbc63fbfeb344dd244d61d35d2b069b2df935ee2b179440d6e93195df08f94ebddc63634642adbdb5a64741b1c5eee67447ab40fa4e7bc7042b3925bf1d2251f50accd79b241c552737567e8da2ad3d3bee246c80113ec707fe3c5aebce9cb5162dadd92772a5c9c11a33a4be18ba97f9def21a14e334a7a1286432dd719e242b138e12eda3397f0dd41eeb30c921a59dc221376e768d9e12284b0cc54ab22770459e41e14f526ee6a96a4950