ssl2.cdngc.net

- CDNetworks Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 04:19:f3:df:82:e9:0e:77:19:44:95:87:3b:37:e9:fe was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

CDNetworks Inc.

Organization: CDNetworks Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:19:f3:df:82:e9:0e:77:19:44:95:87:3b:37:e9:fe
Serial Number (int): 5451665738531761522047910227524184574
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e6:35:71:f5:ec:47:77:c2:99:d3:30:23:f9:66:85:23:64:3c:04:92
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 22:7f:a6:85:55:8c:3f:47:e4:77:5f:a5:7c:0f:35:c6:53:eb:17:3c
Fingerprint (sha256): bc:f7:54:6b:2b:3f:e0:ca:de:98:20:2d:ad:9d:d2:c9:f4:9c:e8:0e:79:b1:30:64:c1:cc:7f:75:fe:e8:63:9c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2011f.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2011f.crl

Check the revocation status for certificate ssl2.cdngc.net

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl2.cdngc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl2.cdngc.net
res-cdn.online338.com
icons.cubics.com
cdn.syndtk.net
images.brightidea.com
admedia.wsod.com
images.alibris.com
static.jigsaw.com
events.canalchat.fr
cache.saurik.com
cache.cydia.saurik.com
cydia.saurik.com
www.binbirmarka.com
secure.media6degrees.com
amos.shop.com
dev-amos.shop.com
merchant-amos.shop.com
staging-admin.shop.com
staging-amos.shop.com
admin-amos.shop.com
www.cataloguecity.co.uk
www.shopespanol.com
www.shop.com
www.shopcompanion.com
cdn.dailybooth.com
images.shaklee.com
content.shaklee.com
edge.shop.com
security-merchants.assaabloy.com
pyro.assaabloy.com
www.bodenimages.com
cdn1.dailybooth.com
cdn2.dailybooth.com
cdn3.dailybooth.com
media.economist.com
distengssl.cdnetworks.net
cdn.markets.ft.com
connect.resmed.com
media.zipcar.com
www.corapicgiyim.com
ad.wsodcdn.com
media.wsodcdn.com
rsvweb.flyasiana.com
us.flyasiana.com
cn.flyasiana.com
jp.flyasiana.com
ea.flyasiana.com
eu.flyasiana.com
au.flyasiana.com
ru.flyasiana.com
chkin.flyasiana.com
www.modaelinizde.com
usdev.isehq.com
jcb.wizwid.com
s.wiggle.co.uk
s2.wiggle.co.uk
cdn.wiggle.co.uk
cdn1.mydays.com
cdn2.mydays.com
cdn3.mydays.com
cdn4.mydays.com
cdn5.mydays.com
cdn6.mydays.com
cdn7.mydays.com
cdn8.mydays.com
cdn9.mydays.com
cdn10.mydays.com
cdn.mydays.de
www.theoutnet.com
tf1-smooth.pad.brainsonic.com
tf1-services.pad.brainsonic.com
tf1-front.pad.brainsonic.com
ssl.kupersztych.com
www.samsungapps.com
tv.samsungapps.com
ba1.midasplayer.com
bling1.midasplayer.com
b1.midasplayer.com
mi1.midasplayer.com
mi3.midasplayer.com
f1.midasplayer.com
f2.midasplayer.com
f3.midasplayer.com
mi2.midasplayer.com
testbook.interpark.com
testbimage.interpark.com
secure.avaaz.org

Other certificates including the domain name cdngc.net

(limited to 100 certificates)
support13.cdnetworks.net
support2.cdnetworks.net
support.cdnetworks.net
ssl2.cdngc.net
ssl2.cdngc.net
support2.cdnetworks.net
support100.cdnetworks.net
krssl.cdngc.net
ssl2.cdngc.net
krssl.cdngc.net
ssl2.cdngc.net
krssl.cdngc.net
support2.cdnetworks.net
support2.cdnetworks.net
ssl2.cdngc.net
support4.cdnetworks.net
support15.cdnetworks.net
support9.cdnetworks.net
support5.cdnetworks.net
support9.cdnetworks.net
support12.cdnetworks.net
jpssl.cdngc.net
support.cdnetworks.net
support12.cdnetworks.net
jpssl.cdngc.net
support4.cdnetworks.net
krssl.cdngc.net
support12.cdnetworks.net
krssl.cdngc.net
support99.cdnetworks.net
support9.cdnetworks.net
ssl2.cdngc.net
krssl.cdngc.net
krssl.cdngc.net
krssl.cdngc.net
support5.cdnetworks.net
ssl.cdngc.net
support12.cdnetworks.net
support12.cdnetworks.net
support18.cdnetworks.net
support5.cdnetworks.net
support.cdnetworks.net
support12.cdnetworks.net
support4.cdnetworks.net
ssl2.cdngc.net
support12.cdnetworks.net
support9.cdnetworks.net
support2.cdnetworks.net
support9.cdnetworks.net
support13.cdnetworks.net
support9.cdnetworks.net
ssl2.cdngc.net
support9.cdnetworks.net
support10.cdnetworks.net
ssl2.cdngc.net
support2.cdnetworks.net
krssl.cdngc.net
support4.cdnetworks.net
support2.cdnetworks.net
support12.cdnetworks.net
support4.cdnetworks.net
support.cdnetworks.net
krssl.cdngc.net
support12.cdnetworks.net
ssl2.cdngc.net
support4.cdnetworks.net
krssl.cdngc.net
ssl2.cdngc.net
ssl.cdngc.net
krssl.cdngc.net
support100.cdnetworks.net
ssl2.cdngc.net
ssl2.cdngc.net
*.sslcs.cdngc.net
ssl2.cdngc.net
ssl2.cdngc.net
support2.cdnetworks.net
support12.cdnetworks.net
ssl2.cdngc.net
support9.cdnetworks.net
support4.cdnetworks.net
support9.cdnetworks.net
ssl2.cdngc.net
krssl.cdngc.net
ssl2.cdngc.net
support9.cdnetworks.net
krssl.cdngc.net
support2.cdnetworks.net
support2.cdnetworks.net
ssl2.cdngc.net
ssl2.cdngc.net
support13.cdnetworks.net
support2.cdnetworks.net
support9.cdnetworks.net
jpssl.cdngc.net
support9.cdnetworks.net
jpssl.cdngc.net
support9.cdnetworks.net
support13.cdnetworks.net
support9.cdnetworks.net

Certificate

The complete raw certificate details for ssl2.cdngc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu+3M3a38aM1P/rrNeDN
d+NzRQKy62xJ7l7GT6fBfMZcfWML7V42sKzNg99+PdM2wzUdMvj91bpz6lY1i8lf
22FHMaejLgGqwJEd8vU38+1st3CXUrHkHqm+HWtVdwGYNbrAV0+Qtd5PZQUdLk+d
eoTWbRnEpKT5KYdVRQ+YklAnH8tsZPQ73B1HvDI0VGOOfDvuWD8srdjz6TkTBaTB
RX0KpQiHHQCKqXsYswGq02jKU5aSrkaXTXDvtJWceMlaoj5IW0mLUeIKa9oa0i9E
0y8kOqTEH6YQShbRoVOxInXXe5El8g8o7LRKxpz72VzdVPcemXE0oxDC4o6gf5tt
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5451665738531761522047910227524184574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDNetworks Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl2.cdngc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23093579686173899952584441748215025458072805287665913996326513179540971851687689289008704159025851322978978309283465535553184281313259337459556631009735790280795873492504325885148748899721325580643204304127612424400395123343975669780353234338461811450917809823720507786213290391796418391723114022269926210437138348556889856736087691068353058640616359153202236374223815186836731906730012377027962842798299019069383415232474751153820313180118543784458486041038630352823588184262670307313053654832262190297341779267455811929286177982931628058302522804437865522371099745679133154957821398009150113870076856669830238661981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e63571f5ec4777c299d33023f9668523643c0492
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1763 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl2.cdngc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res-cdn.online338.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icons.cubics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.syndtk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.brightidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admedia.wsod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.alibris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.jigsaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.canalchat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.saurik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cache.cydia.saurik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cydia.saurik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.binbirmarka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.media6degrees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amos.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-amos.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchant-amos.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-admin.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-amos.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-amos.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cataloguecity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dailybooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.shaklee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.shaklee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-merchants.assaabloy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyro.assaabloy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodenimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.dailybooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.dailybooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.dailybooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.economist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distengssl.cdnetworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.markets.ft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.zipcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corapicgiyim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.wsodcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wsodcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsvweb.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chkin.flyasiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.modaelinizde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdev.isehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcb.wizwid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.wiggle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.wiggle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wiggle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn5.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn6.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn7.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn8.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn9.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn10.mydays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.mydays.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoutnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf1-smooth.pad.brainsonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf1-services.pad.brainsonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf1-front.pad.brainsonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.kupersztych.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsungapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.samsungapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ba1.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bling1.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b1.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi1.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi3.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f1.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f2.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f3.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi2.midasplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbook.interpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testbimage.interpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.avaaz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2011f.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2011f.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003d161fafe8315f912a671496f33b51989bb6875cbe525b14cebe7fb78b9478f7540c14efa423cb5eb1d3fd866d5e7b7926657e2af836e6ca3d276b95de31fce315b88d0a3cea82deb4c5cd6b6272f34355ef1415bf8f025543f1355f264209a7c0e1ee259ffae497712971c7f520116135a6f8bdb4fd6f49d30b121dc778e28dc0acecaf7d1c0c0addf387a50882c37b427bb6a6ea9472a49053f555a366b7e7f6e7828ca92fda26115df337485edb759d3e6727bcf0de5f40e806334728d3d2ea6518a83f62d26ff8d06758964873b68fb3e52e0535fdd2843b2d81ba95e6ceab3701f575c3ae3f4c6255b2e6a356099f7157502eb94437924b50eb10b40d7