www.turner.com

- Turner Broadcasting System, Inc -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 05:12:c9:20:c8:67:4b:e2:e3:f7:22:67:0e:9d:a0:5b was issued on by Sectigo Limited.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Turner Broadcasting System, Inc

Organization: Turner Broadcasting System, Inc
Organization unit: TBS, Inc
Organization unit: Hosted by TURNER BROADCASTING SYSTEM, INC.
Organization unit: Unified Communications
Address: One CNN Center
Postal code: 30303
State / Province: Georgia
Locality: Atlanta
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 05:12:c9:20:c8:67:4b:e2:e3:f7:22:67:0e:9d:a0:5b
Serial Number (int): 6743680684031620390612933049822584923
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c9:4e:94:e2:3a:64:45:ce:70:36:6b:4f:40:30:02:b1:dc:9e:b5:4d
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 94:bc:78:9b:38:c0:44:26:6d:80:68:2f:22:0c:e7:59:6f:f5:d9:7d
Fingerprint (sha256): c6:0b:78:03:2e:56:28:bf:c3:3d:46:e5:24:56:41:b4:c4:da:33:2f:53:1b:58:76:cc:f1:64:01:ec:36:1d:e5

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.turner.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.turner.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.turner.com
*.adultswim.com
*.api.cerebro.cnn.io
*.api.cnn.com
*.api.cnn.io
*.api.platform.cnn.com
*.aspen.ngtv.io
*.aspen.vgtf.net
*.atgamewiz.com
*.bcg.ncaa.com
*.ben10.com
*.bleacherreport.com
*.bleacherreportlive.com
*.br.live
*.brlive.com
*.brlive.io
*.cartoonnetwork.asia
*.cartoonnetwork.com
*.cartoonnetworkasia.com
*.cartoonnetworkpr.com
*.catchsports.com
*.cdn.adultswim.com
*.cdn.cartoonnetwork.com
*.cdn.cnn.com
*.cdn.pga.com
*.cdn.tbs.com
*.cdn.tcm.com
*.cdn.tntdrama.com
*.cdn.trutv.com
*.cdn.turner.com
*.cerebro.api.cnn.com
*.chasingthecurelive.com
*.cnn.com
*.cnn.io
*.cnn.net
*.cnnmoney.ch
*.config.filmstruck.d2c-ott.com
*.content.cnnmoney.ch
*.d-league.com
*.d2c-ott.com
*.dynaimage.cdn.turner.com
*.e-league.com
*.eleague.com
*.filmstruck.com
*.filmstruck.d2c-ott.com
*.greatbig.com
*.greatbigstory.com
*.hlntv.com
*.i.cdn.ti-platform.com
*.iris.d2c-ott.com
*.iris.filmstruck.d2c-ott.com
*.junior.rydercup.com
*.juniorrydercup.com
*.live.bleacherreport.com
*.lp.nba.com
*.mml-desktop.ncaa.com
*.mml-web.ncaa.com
*.mml.ncaa.com
*.money.cnn.com
*.nba.com
*.nba.net
*.ncaa.com
*.ngtv.io
*.nycf.tbs.com
*.ods.ngtv.io
*.penis-map.com
*.pga-events.com
*.pga.com
*.pga.net
*.pgachampionship.com
*.powerpufftheworld.com
*.proxy.filmstruck.com
*.robotunicornattack.com
*.rydercup.com
*.samanthabee.com
*.sambee.com
*.sim.nba.net
*.staging.cartoonnetwork.com
*.stevenuniverseselfesteem.com
*.superstation.com
*.suspensecollection.com
*.t.bleacherreport.com
*.tbs.com
*.tcm.com
*.teamcococdn.com
*.tentpole.nba.com
*.tentpole.nba.net
*.thesuspensecollection.com
*.ti-platform.com
*.tnt.tv
*.tntdrama.com
*.trutv.com
*.turner.com
*.turner.ncaa.com
*.warnermediacdn.com
*.warnermediaupfront.com
*.wnba.com
*.yzzerdd.com

Other certificates including the domain name turner.com

(limited to 100 certificates)
sgtxprdresweb01.turner.com
dns-vetting1b.map.fastly.net
mobileapps.turner.com
dns-vetting2.map.fastly.net
tul-dbs003686.turner.com
inews.turner.com
concertservice40test.turner.com
dns-vetting1b.map.fastly.net
www.eventpress.turner.com
meta-permsmgmt-prod.turner.com
lsd-prod-56m.gslb.vgtf.net
epmuat.turner.com
turner.com
cnnc-uccx-pub.turner.com
*.msc.turner.com
fw-mexso.turner.com
nycmail1.turner.com
dns-vetting1b.map.fastly.net
music.turner.com
chef-server-dev1.turner.com
sdc.turner.com
millenniuminternal.turner.com
concert40test.turner.com
aaa-uat.turner.com
harbor-dvps.turner.com
iso-splunkcsh1.iso.turner.com
turner.com
looker.turner.com
edc-splat-tve.cdn.turner.com
metrohk-coreorchsrv-vip.turner.com
l.ssl.fastly.net
tbseuropeonline.turner.com
sslvs06.igloosoftware.com
*.ref.sdvi.csc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
turner-tls.map.fastly.net
dns-vetting1j.map.fastly.net
music.turner.com
elec-useroptions-dev.turner.com
turner-tls.map.fastly.net
sdc.turner.com
dns-vetting2.map.fastly.net
eahapsfinuat.turner.com
affiliateportal.turner.com
janusstsint.turner.com
fw-bogso.turner.com
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
api.hilbert.iso.turner.com
core.ooyala.turner.com
dynaimage-prod-nba.ids.turner.com
polls.turner.com
dns-vetting1b.map.fastly.net
dns-vetting2.map.fastly.net
raext.turner.com
sslvs06.igloosoftware.com
www.turner.com
eahapsfinupuat.turner.com
janusstsmain.turner.com
dev.turner.com
catdv.turner.com
lumberjack-prod.nba.ids.turner.com
dns-vetting1j.map.fastly.net
dns-vetting2.map.fastly.net
l.ssl.fastly.net
msc.turner.com
*.cdn.turner.com
eshare.turner.com
bestsqs-vip.turner.com
eahapsporedprd.turner.com
dns-vetting1j.map.fastly.net
www.turner.com
cnnitouch-prod1.turner.com
docs.ids.turner.com
splunk-hec-dev.nonprod.iso.turner.com
sdc.turner.com
atl-expwy-c1.turner.com
deliver.turner.com
splashtop-chl.turner.com
mssdoc.turner.com
dns-vetting1b.map.fastly.net
sslvs01.igloosoftware.com
dns-vetting1b.map.fastly.net
l.ssl.fastly.net
admin.cartoonnetwork.asia
dns-vetting1b.map.fastly.net
detections.iso.turner.com
eahapsporedprdtc.turner.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
aspen.turner.com
eahasfadmin-new.turner.com
sslvs06.igloosoftware.com
collabredirects.turner.com
ppsprmse.turner.com
dns-vetting1b.map.fastly.net
cnn-dalton-qa-2.ids.turner.com
guardian.turner.com

Certificate

The complete raw certificate details for www.turner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1tkoD6HQdC4u1+XmjfW
lIPsI8txZzqkjz1WDa3feJD7GjOkt1T/jirmgkDcGXI0lRCgIp+g+9DcTcy9pvAS
p2n2rO1B4mzGR94ApfcaPLHsSLurTmWjkvmrb0ynMxzRiytNweG5lCVG6xfosN8J
KdueMk1Id9qniSwYRp84ONLtBCrwyvD2dml0rcBh8AkGWeq4wtM6WkOlpJV8gZPg
zPFUL4hOJcvbSyTbuhdwRce/Y974RM3ZgfCFYvftyO6fcIlLruOY/60h+8fVxOyR
5IFC3zFIzhIEcdAgLISXRVZcOh59kv+hnVK/fhokit/xLbi+/lqPTHNBBXVTb+38
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6743680684031620390612933049822584923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '30303'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'One CNN Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Turner Broadcasting System, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by TURNER BROADCASTING SYSTEM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.turner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25671443510685146684086434853527708710692870654519219670915167475116494745759838164700149552989736630432274365310044426004559795491485413304189214285546298284804842179931839878773118884368162762950445643368119963439453787957045459598997112466418985064937147351653183778710002984119660025018600326642543818760408005716214881838275518236417324770622357277455546358829628979154399579264862071124012578206265060912815824553670925545223512408964845124293954958146704597010053959302023780946188820166594457077003654208901301485839399481882819692293569645566315386461009607737197498229629363635727805724315511308563707198589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c94e94e23a6445ce70366b4f403002b1dc9eb54d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1833 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cerebro.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.platform.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspen.vgtf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atgamewiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcg.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ben10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bleacherreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bleacherreportlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.br.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brlive.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetwork.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catchsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.adultswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.pga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerebro.api.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasingthecurelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.config.filmstruck.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.cnnmoney.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-league.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynaimage.cdn.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-league.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmstruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmstruck.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbigstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.cdn.ti-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iris.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iris.filmstruck.d2c-ott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junior.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juniorrydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live.bleacherreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mml-desktop.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mml-web.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mml.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.money.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nycf.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ods.ngtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penis-map.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pga-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pga.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pgachampionship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerpufftheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxy.filmstruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robotunicornattack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rydercup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samanthabee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sambee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sim.nba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.cartoonnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevenuniverseselfesteem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suspensecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t.bleacherreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamcococdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentpole.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tentpole.nba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesuspensecollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ti-platform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tntdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trutv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turner.ncaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediacdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediaupfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wnba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yzzerdd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ae52141070000040300483046022100bf1ba78c4bca5599eab4a8783fa2d338f38ca7ba8f401de4117102a8dc5b158e022100b222e1551d80d157876116be78b92588a4ad3d1a204117391cbd2eeb500067370076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ae521412a0000040300473045022043b9a0a831e3440de43d5e77beff947a485754941bd951259f4fbf06c2ee2be5022100eb28e5f23fd2dcd2a02ec9db52bd244d4897337418438de35174530cf6a548270076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ae52141250000040300473045022079b2e0b87d5560ca6690ce59ceab2332ea00d5752df02eba5e4d4a631450ea3f022100fa383b7353e7a108187ab6c1af72694aaf308afa6d23ea39f3bd55e9ca8f417e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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