www.colonytv.com
- NBCUniversal Media, LLC -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 06:e1:43:59:9f:1c:c4:11:ac:97:b6:62:38:b0:9e:d1 was issued on by DigiCert Inc.
With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NBCUniversal Media, LLC
Organization:
NBCUniversal Media, LLC
State / Province:
New Jersey
Locality: Englewood Cliffs
Country: US
Locality: Englewood Cliffs
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:e1:43:59:9f:1c:c4:11:ac:97:b6:62:38:b0:9e:d1Serial Number (int): 9145000789872632279691631003641618129
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c7:da:5e:6a:e3:cd:99:11:8f:22:50:34:67:ec:b5:ae:2f:e2:a2:0a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 9e:16:75:9b:c3:00:5a:77:97:a9:c2:6f:69:ec:23:b2:18:92:52:56
Fingerprint (sha256): b7:71:a1:5e:63:49:6e:e7:b4:5a:30:28:7a:68:e3:ab:f5:68:21:69:3d:88:80:52:a9:7d:4c:f0:c8:e3:75:44
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate www.colonytv.com
41
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.colonytv.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.colonytv.com
colonytv.com
www.purgatorysd.com
v1.colonytv.com
qa.tvecms.usa.nbcuni.com
www.ma-lefilm.be
uat.tvecms.usa.nbcuni.com
dev.tvecms.universalkids.nbcuni.com
stage.surf.nbcuni.com
www.universaldigitaluniverse.com
www.erasethehate.org
www.littlefilm.nl
lt.tvecms.universalkids.nbcuni.com
dev.tvecms.usa.nbcuni.com
fsociety00.dat.sh
www.e-coin.com
uat.tvecms.universalkids.nbcuni.com
stage.universalkids.com
stage.sproutonline.com
www.mafilm.ch
www.mamimozi.hu
stage.tvecms.universalkids.nbcuni.com
www.surf.nbcuni.com
www.ma-lefilm.ch
accessonline.com
stage.erasethehate.org
www.ma-film.at
www.happydeathday.com
sdk.brand-mps.nbcuni.com
www.ma-movie.be
www.accessonline.com
edit.nbcumv.com
stage.tvecms.usa.nbcuni.com
www.allrisenow.com
stage.accessonline.com
static-stage.accessonline.com
prod.tvecms.universalkids.nbcuni.com
www.nbcuniversal.com
static.accessonline.com
lt.tvecms.usa.nbcuni.com
erasethehate.org
colonytv.com
www.purgatorysd.com
v1.colonytv.com
qa.tvecms.usa.nbcuni.com
www.ma-lefilm.be
uat.tvecms.usa.nbcuni.com
dev.tvecms.universalkids.nbcuni.com
stage.surf.nbcuni.com
www.universaldigitaluniverse.com
www.erasethehate.org
www.littlefilm.nl
lt.tvecms.universalkids.nbcuni.com
dev.tvecms.usa.nbcuni.com
fsociety00.dat.sh
www.e-coin.com
uat.tvecms.universalkids.nbcuni.com
stage.universalkids.com
stage.sproutonline.com
www.mafilm.ch
www.mamimozi.hu
stage.tvecms.universalkids.nbcuni.com
www.surf.nbcuni.com
www.ma-lefilm.ch
accessonline.com
stage.erasethehate.org
www.ma-film.at
www.happydeathday.com
sdk.brand-mps.nbcuni.com
www.ma-movie.be
www.accessonline.com
edit.nbcumv.com
stage.tvecms.usa.nbcuni.com
www.allrisenow.com
stage.accessonline.com
static-stage.accessonline.com
prod.tvecms.universalkids.nbcuni.com
www.nbcuniversal.com
static.accessonline.com
lt.tvecms.usa.nbcuni.com
erasethehate.org
Other certificates including the domain name colonytv.com
(limited to 100 certificates)
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
Certificate
The complete raw certificate details for www.colonytv.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJ6TCCCNGgAwIBAgIQBuFDWZ8cxBGsl7ZiOLCe0TANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwMzI4MDAwMDAwWhcN MjAwNjAxMTIwMDAwWjB6MQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNl eTEZMBcGA1UEBxMQRW5nbGV3b29kIENsaWZmczEgMB4GA1UEChMXTkJDVW5pdmVy c2FsIE1lZGlhLCBMTEMxGTAXBgNVBAMTEHd3dy5jb2xvbnl0di5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNeBQqpvQJ9jnuSMHzmY7Wx7Iot5v pJPKTt8zVKBDETuYzXY60ZlzAGZf7fHgXLhAgHfyYkCt+tGjvuJWUmnF5F7aegS0 GeixrbG08ZFhFUzIr1oacYGQrpp2ym2X8+fCoz6cfm8P2l0pCJb41ZDSPNdQcT3Z Ly3/tOZT/qYyRqHC2jBB6FhQsTiN58BH8TTWaIBHy3GPSiLlwnOsP09ohKZR2MRO 430njmCk4WQHZQQSljqFo2Pw5kbr+LzJ4xrYjtCJnB56rCCZLOiemnmvgiHJdYkx FrE3skT9+f5yF9L4diVPij2mGa49WyhQTmPQjEnMl/iul0yMAs0oFZ4pAgMBAAGj ggaWMIIGkjAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4E FgQUx9peauPNmRGPIlA0Z+y1ri/iogowggPTBgNVHREEggPKMIIDxoIQd3d3LmNv bG9ueXR2LmNvbYIMY29sb255dHYuY29tghN3d3cucHVyZ2F0b3J5c2QuY29tgg92 MS5jb2xvbnl0di5jb22CGHFhLnR2ZWNtcy51c2EubmJjdW5pLmNvbYIQd3d3Lm1h LWxlZmlsbS5iZYIZdWF0LnR2ZWNtcy51c2EubmJjdW5pLmNvbYIjZGV2LnR2ZWNt cy51bml2ZXJzYWxraWRzLm5iY3VuaS5jb22CFXN0YWdlLnN1cmYubmJjdW5pLmNv bYIgd3d3LnVuaXZlcnNhbGRpZ2l0YWx1bml2ZXJzZS5jb22CFHd3dy5lcmFzZXRo ZWhhdGUub3JnghF3d3cubGl0dGxlZmlsbS5ubIIibHQudHZlY21zLnVuaXZlcnNh bGtpZHMubmJjdW5pLmNvbYIZZGV2LnR2ZWNtcy51c2EubmJjdW5pLmNvbYIRZnNv Y2lldHkwMC5kYXQuc2iCDnd3dy5lLWNvaW4uY29tgiN1YXQudHZlY21zLnVuaXZl cnNhbGtpZHMubmJjdW5pLmNvbYIXc3RhZ2UudW5pdmVyc2Fsa2lkcy5jb22CFnN0 YWdlLnNwcm91dG9ubGluZS5jb22CDXd3dy5tYWZpbG0uY2iCD3d3dy5tYW1pbW96 aS5odYIlc3RhZ2UudHZlY21zLnVuaXZlcnNhbGtpZHMubmJjdW5pLmNvbYITd3d3 LnN1cmYubmJjdW5pLmNvbYIQd3d3Lm1hLWxlZmlsbS5jaIIQYWNjZXNzb25saW5l LmNvbYIWc3RhZ2UuZXJhc2V0aGVoYXRlLm9yZ4IOd3d3Lm1hLWZpbG0uYXSCFXd3 dy5oYXBweWRlYXRoZGF5LmNvbYIYc2RrLmJyYW5kLW1wcy5uYmN1bmkuY29tgg93 d3cubWEtbW92aWUuYmWCFHd3dy5hY2Nlc3NvbmxpbmUuY29tgg9lZGl0Lm5iY3Vt di5jb22CG3N0YWdlLnR2ZWNtcy51c2EubmJjdW5pLmNvbYISd3d3LmFsbHJpc2Vu b3cuY29tghZzdGFnZS5hY2Nlc3NvbmxpbmUuY29tgh1zdGF0aWMtc3RhZ2UuYWNj ZXNzb25saW5lLmNvbYIkcHJvZC50dmVjbXMudW5pdmVyc2Fsa2lkcy5uYmN1bmku Y29tghR3d3cubmJjdW5pdmVyc2FsLmNvbYIXc3RhdGljLmFjY2Vzc29ubGluZS5j b22CGGx0LnR2ZWNtcy51c2EubmJjdW5pLmNvbYIQZXJhc2V0aGVoYXRlLm9yZzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsG A1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNo YTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1z aGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEF BQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBG BggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0 U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFp xN0VSAAABAMARzBFAiEAu0Q6DO51uW4C8pFjxwmyH2PGDFxrppIFy0WEx7WhrPYC IFzuq58R0JW69ewYZyg82MaV0zB68hLRjVHG7+9Us1X/AHYAh3W/51l8+IxDmV+9 827/Vo1HVjb/SrVgwbTq/16ggw8AAAFpxN0WVAAABAMARzBFAiEAywZMmlR2pCeX ewvW+QCkPZdzOyXgeHlCyIvj6y9hLOECIA4CjKNdtJgJz7cJNzS26Xb9vl+pPk/5 YI2UiYdLcPH4MA0GCSqGSIb3DQEBCwUAA4IBAQCeSb385i7x9ejwCwf9nfJvz+PY P2QyDiRRNP1YGtCgEZ5GRC9oeENAgI7TXP3Ej3mHNqLJEWdY6VQHwL3olt1xlyXe xgpRc87A5z16U9URcEwlqC30ut4V0NQFomgGHHIqHI1KF0BFaMCxO8xnD0hh62to c4XgpkUjs5rZ7TJ69ZY+YxVKzGzLF5wmXfF6vvI6WR+C3kV2gEFEfjCW0t3yl7Tt DB+R6OQpgUYBh3zHH4to5IBPLMAJsWHvKRbvad68uRFnRCjo/Q+k3lKXLJcbxqqG VfYE56vxYNbZA/osDzyJQPlB1dWyZkC/gt8hl7mn5mIXxURN3iq8+cA2VY/U -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTXgUKqb0CfY57kjB85m O1seyKLeb6STyk7fM1SgQxE7mM12OtGZcwBmX+3x4Fy4QIB38mJArfrRo77iVlJp xeRe2noEtBnosa2xtPGRYRVMyK9aGnGBkK6adsptl/PnwqM+nH5vD9pdKQiW+NWQ 0jzXUHE92S8t/7TmU/6mMkahwtowQehYULE4jefAR/E01miAR8txj0oi5cJzrD9P aISmUdjETuN9J45gpOFkB2UEEpY6haNj8OZG6/i8yeMa2I7QiZweeqwgmSzonpp5 r4IhyXWJMRaxN7JE/fn+chfS+HYlT4o9phmuPVsoUE5j0IxJzJf4rpdMjALNKBWe KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9145000789872632279691631003641618129 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood Cliffs' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colonytv.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25400466657799914489261453498825122047975556352695847325243228466340251279713563548619061688820444564946092013308936988727488351181008998830468409164576701516927841623877978932336989581155106921333526399094648552801429823046431832842551030366198287910385453230369674903351147909772433844934368171884669036018991359345904277715487188506843581074317729218333349008515133236161468023336348899040422329189405971618259208184123989620047799879769252264913406296105432762650934608611860026877596130021608693760366233802667080994047355967918829240293129982250113817745960820282543425996062792670623717474461299191693180247593 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c7da5e6ae3cd99118f22503467ecb5ae2fe2a20a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (970 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colonytv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonytv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purgatorysd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.colonytv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tvecms.usa.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.usa.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.universalkids.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surf.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaldigitaluniverse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlefilm.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.universalkids.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.usa.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsociety00.dat.sh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-coin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.universalkids.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalkids.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sproutonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamimozi.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.universalkids.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surf.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.erasethehate.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-film.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happydeathday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.brand-mps.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-movie.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.nbcumv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.usa.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allrisenow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accessonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-stage.accessonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tvecms.universalkids.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcuniversal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accessonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.usa.nbcuni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasethehate.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000169c4dd15480000040300473045022100bb443a0cee75b96e02f29163c709b21f63c60c5c6ba69205cb4584c7b5a1acf602205ceeab9f11d095baf5ec1867283cd8c695d3307af212d18d51c6efef54b355ff0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169c4dd16540000040300473045022100cb064c9a5476a427977b0bd6f900a43d97733b25e0787942c88be3eb2f612ce102200e028ca35db49809cfb7093734b6e976fdbe5fa93e4ff9608d9489874b70f1f8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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