www.colonytv.com

- NBCUniversal Media, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:dc:11:e1:c2:e4:65:6a:4e:d6:bf:a3:a2:53:10:6e was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New Jersey
Locality: Englewood Cliffs
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:11:e1:c2:e4:65:6a:4e:d6:bf:a3:a2:53:10:6e
Serial Number (int): 5130351983848443397124955145248116846
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 88:4c:bb:4b:81:08:71:c1:68:0d:cd:f5:d9:b2:16:ec:fc:9a:cb:f7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 55:50:74:a2:d0:d2:82:33:a7:99:05:d2:db:a7:7c:68:8f:18:82:dd
Fingerprint (sha256): e8:d7:8d:b1:e6:57:e8:6b:5f:c5:13:ce:b8:58:1e:66:a1:ea:78:d3:41:49:2a:2e:49:4c:00:87:71:45:d8:23

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.colonytv.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colonytv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colonytv.com
colonytv.com
ssl-secure-vpn.com
www.ma-lefilm.ch
www.notimetodie-film.ch
www.mamimozi.hu
proxy.cyprusnationalbank.com
stage.universaltalentdevelopment.com
www.dolittlefilmi.com.tr
edit.nbcumv.com
apps.cnb.sh
www.thesecretlifeofmypet.com
www.ma-lefilm.be
www.trollswereldtour.nl
www.lastchristmas-film.ch
www.lomax-looneylaw.com
stage.surf.nbcuni.com
dev.tvecms.universalkids.nbcuni.com
fsociety00.dat.sh
www.trolls-ofilme.pt
directory.theparmenides.com
www.ramsdalebookgroup.com
www.notimetodie-lefilm.ch
stage.tvecms.universalkids.nbcuni.com
www.purgatorysd.com
www.depurgesouthholdings.com
www.camsecpro.com
www.mafilm.ch
www.u1rbr0uz.net
www.littlefilm.nl
www.howtotrainyourdragon.com
www.quarkltd.com
www.elanplcsystems.com
dev.tvecms.usa.nbcuni.com
stage.temptationislandpickuplines.com
qa.tvecms.usa.nbcuni.com
www.dolittle.com.ar
www.ssl-secure-vpn.com
lt.tvecms.universalkids.nbcuni.com
www.wackyholidaywallpaperz.com
safety.cyprusnationalbank.com
erasethehate.org
www.wackywallpaperz.com
stage.erasethehate.org
www.refss0fstvk.net
www.cyprusnationalbank.com
accessonline.com
www.theparmenides.com
account.cyprusnationalbank.com
www.kraftwerks3d.com
ela.nplcsystems.com
www.dolittle-lefilm.ch
stage.tvecms.usa.nbcuni.com
www.aseheinrich.com
www.temptationislandpickuplines.com
uat.tvecms.usa.nbcuni.com
static-stage.accessonline.com
www.lastchristmas-lefilm.ch
www.nbcuniversal.com
uat.tvecms.universalkids.nbcuni.com
mail.cyprusnationalbank.com
www.z2beeow.bxjyb2jvda.net
prod.tvecms.universalkids.nbcuni.com
www.universaldigitaluniverse.com
www.1917-lefilm.ch
stage.sproutonline.com
www.paramusestates.com
www.dolittle-ofilme.pt
www.securloq.com
www.chiralcorp.com
www.ma-film.at
www.dolittle.hu
lt.tvecms.usa.nbcuni.com
static-prod.accessonline.com
stage.u1rbr0uz.net
stage.universalkids.com
thesecretlifeofmypet.com
www.surf.nbcuni.com
www.refstevorq.net
www.ma-movie.be
www.mazzkaufreichenbach.com
www.e-coin.com
www.crimsonclupeidae.com
stage.accessonline.com
www.dolittle-film.ch
www.erasethehate.org
z2beeow.bxjyb2jvda.net
static.accessonline.com
sdk.brand-mps.nbcuni.com
www.happydeathday.com
www.1917-film.ch
www.accessonline.com
v1.colonytv.com
www.allrisenow.com

Other certificates including the domain name colonytv.com

(limited to 100 certificates)
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
login.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com
www.colonytv.com

Certificate

The complete raw certificate details for www.colonytv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPGTCCDgGgAwIBAgIQA9wR4cLkZWpO1r+jolMQbjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkxMDIxMDAwMDAwWhcN
MjAwNjAxMTIwMDAwWjB6MQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNl
eTEZMBcGA1UEBxMQRW5nbGV3b29kIENsaWZmczEgMB4GA1UEChMXTkJDVW5pdmVy
c2FsIE1lZGlhLCBMTEMxGTAXBgNVBAMTEHd3dy5jb2xvbnl0di5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32nJiWZwSHYl+GCmou99dyKYjsRKT
FvlWZGYubLAktm0I0rPuX9XKBGGxq03XZL3XzL3muGo4p1OyK1FKdIrZGxNLqDRa
B08dz+h7ulJpbvabLGZtLFMrtXNm9pBHApl3hgbgkjTuEtTIu7Tpljy20ZGxMebU
YQ/vuwTwKVAUbC+hlrQ1T/fuzLX5JOXf7w5Ux6Lk0E5ifMvuqLHqZ0ks9viXAUzv
lNLI6Z1Mdk9rreLYjfrbfFKaibd5CwwxckbVX+YGgwI6L7hfxXTOQ7TZbnzywzwe
/s7Wo8GOVohJcG39RpSNLaNzuAJl0r2iXxky54gwrcrrflBuSaiLt3/TAgMBAAGj
ggvGMIILwjAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4E
FgQUiEy7S4EIccFoDc312bIW7Pyay/cwggkDBgNVHREEggj6MIII9oIQd3d3LmNv
bG9ueXR2LmNvbYIMY29sb255dHYuY29tghJzc2wtc2VjdXJlLXZwbi5jb22CEHd3
dy5tYS1sZWZpbG0uY2iCF3d3dy5ub3RpbWV0b2RpZS1maWxtLmNogg93d3cubWFt
aW1vemkuaHWCHHByb3h5LmN5cHJ1c25hdGlvbmFsYmFuay5jb22CJHN0YWdlLnVu
aXZlcnNhbHRhbGVudGRldmVsb3BtZW50LmNvbYIYd3d3LmRvbGl0dGxlZmlsbWku
Y29tLnRygg9lZGl0Lm5iY3Vtdi5jb22CC2FwcHMuY25iLnNoghx3d3cudGhlc2Vj
cmV0bGlmZW9mbXlwZXQuY29tghB3d3cubWEtbGVmaWxtLmJlghd3d3cudHJvbGxz
d2VyZWxkdG91ci5ubIIZd3d3Lmxhc3RjaHJpc3RtYXMtZmlsbS5jaIIXd3d3Lmxv
bWF4LWxvb25leWxhdy5jb22CFXN0YWdlLnN1cmYubmJjdW5pLmNvbYIjZGV2LnR2
ZWNtcy51bml2ZXJzYWxraWRzLm5iY3VuaS5jb22CEWZzb2NpZXR5MDAuZGF0LnNo
ghR3d3cudHJvbGxzLW9maWxtZS5wdIIbZGlyZWN0b3J5LnRoZXBhcm1lbmlkZXMu
Y29tghl3d3cucmFtc2RhbGVib29rZ3JvdXAuY29tghl3d3cubm90aW1ldG9kaWUt
bGVmaWxtLmNogiVzdGFnZS50dmVjbXMudW5pdmVyc2Fsa2lkcy5uYmN1bmkuY29t
ghN3d3cucHVyZ2F0b3J5c2QuY29tghx3d3cuZGVwdXJnZXNvdXRoaG9sZGluZ3Mu
Y29tghF3d3cuY2Ftc2VjcHJvLmNvbYINd3d3Lm1hZmlsbS5jaIIQd3d3LnUxcmJy
MHV6Lm5ldIIRd3d3LmxpdHRsZWZpbG0ubmyCHHd3dy5ob3d0b3RyYWlueW91cmRy
YWdvbi5jb22CEHd3dy5xdWFya2x0ZC5jb22CFnd3dy5lbGFucGxjc3lzdGVtcy5j
b22CGWRldi50dmVjbXMudXNhLm5iY3VuaS5jb22CJXN0YWdlLnRlbXB0YXRpb25p
c2xhbmRwaWNrdXBsaW5lcy5jb22CGHFhLnR2ZWNtcy51c2EubmJjdW5pLmNvbYIT
d3d3LmRvbGl0dGxlLmNvbS5hcoIWd3d3LnNzbC1zZWN1cmUtdnBuLmNvbYIibHQu
dHZlY21zLnVuaXZlcnNhbGtpZHMubmJjdW5pLmNvbYIed3d3LndhY2t5aG9saWRh
eXdhbGxwYXBlcnouY29tgh1zYWZldHkuY3lwcnVzbmF0aW9uYWxiYW5rLmNvbYIQ
ZXJhc2V0aGVoYXRlLm9yZ4IXd3d3LndhY2t5d2FsbHBhcGVyei5jb22CFnN0YWdl
LmVyYXNldGhlaGF0ZS5vcmeCE3d3dy5yZWZzczBmc3R2ay5uZXSCGnd3dy5jeXBy
dXNuYXRpb25hbGJhbmsuY29tghBhY2Nlc3NvbmxpbmUuY29tghV3d3cudGhlcGFy
bWVuaWRlcy5jb22CHmFjY291bnQuY3lwcnVzbmF0aW9uYWxiYW5rLmNvbYIUd3d3
LmtyYWZ0d2Vya3MzZC5jb22CE2VsYS5ucGxjc3lzdGVtcy5jb22CFnd3dy5kb2xp
dHRsZS1sZWZpbG0uY2iCG3N0YWdlLnR2ZWNtcy51c2EubmJjdW5pLmNvbYITd3d3
LmFzZWhlaW5yaWNoLmNvbYIjd3d3LnRlbXB0YXRpb25pc2xhbmRwaWNrdXBsaW5l
cy5jb22CGXVhdC50dmVjbXMudXNhLm5iY3VuaS5jb22CHXN0YXRpYy1zdGFnZS5h
Y2Nlc3NvbmxpbmUuY29tght3d3cubGFzdGNocmlzdG1hcy1sZWZpbG0uY2iCFHd3
dy5uYmN1bml2ZXJzYWwuY29tgiN1YXQudHZlY21zLnVuaXZlcnNhbGtpZHMubmJj
dW5pLmNvbYIbbWFpbC5jeXBydXNuYXRpb25hbGJhbmsuY29tghp3d3cuejJiZWVv
dy5ieGp5YjJqdmRhLm5ldIIkcHJvZC50dmVjbXMudW5pdmVyc2Fsa2lkcy5uYmN1
bmkuY29tgiB3d3cudW5pdmVyc2FsZGlnaXRhbHVuaXZlcnNlLmNvbYISd3d3LjE5
MTctbGVmaWxtLmNoghZzdGFnZS5zcHJvdXRvbmxpbmUuY29tghZ3d3cucGFyYW11
c2VzdGF0ZXMuY29tghZ3d3cuZG9saXR0bGUtb2ZpbG1lLnB0ghB3d3cuc2VjdXJs
b3EuY29tghJ3d3cuY2hpcmFsY29ycC5jb22CDnd3dy5tYS1maWxtLmF0gg93d3cu
ZG9saXR0bGUuaHWCGGx0LnR2ZWNtcy51c2EubmJjdW5pLmNvbYIcc3RhdGljLXBy
b2QuYWNjZXNzb25saW5lLmNvbYISc3RhZ2UudTFyYnIwdXoubmV0ghdzdGFnZS51
bml2ZXJzYWxraWRzLmNvbYIYdGhlc2VjcmV0bGlmZW9mbXlwZXQuY29tghN3d3cu
c3VyZi5uYmN1bmkuY29tghJ3d3cucmVmc3Rldm9ycS5uZXSCD3d3dy5tYS1tb3Zp
ZS5iZYIbd3d3Lm1henprYXVmcmVpY2hlbmJhY2guY29tgg53d3cuZS1jb2luLmNv
bYIYd3d3LmNyaW1zb25jbHVwZWlkYWUuY29tghZzdGFnZS5hY2Nlc3NvbmxpbmUu
Y29tghR3d3cuZG9saXR0bGUtZmlsbS5jaIIUd3d3LmVyYXNldGhlaGF0ZS5vcmeC
FnoyYmVlb3cuYnhqeWIyanZkYS5uZXSCF3N0YXRpYy5hY2Nlc3NvbmxpbmUuY29t
ghhzZGsuYnJhbmQtbXBzLm5iY3VuaS5jb22CFXd3dy5oYXBweWRlYXRoZGF5LmNv
bYIQd3d3LjE5MTctZmlsbS5jaIIUd3d3LmFjY2Vzc29ubGluZS5jb22CD3YxLmNv
bG9ueXR2LmNvbYISd3d3LmFsbHJpc2Vub3cuY29tMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4Yp
aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuG
KWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1Ud
IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVy
Q0EuY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC72d+8
H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAW3v0OrHAAAEAwBHMEUCIHyz
hRVLsQUM+0Ru9GeRMaW9rjU+qj59QdJVqDpvFUAiAiEA3KWQm6TVPElOjua3vv3G
2R6vBY3Szv5gdldHjw1jyhEAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWW
gXFFWAAAAW3v0OrBAAAEAwBHMEUCIAipM09Ci+Szmiz2eUMin1xAOTmMffOyIHNN
zB5YFFX9AiEAsaHaDM8GJir5yuKsjBwgevX8Vgeh+9GEtHwn7Q5Ew2IwDQYJKoZI
hvcNAQELBQADggEBABJEOCAuGR8NPHdP6gBC9AE70BZRGro86muJOyW0tCBRKhlk
D2pZ0X+c0XMlxkvdjb1mftOvGy7w7D5FG6mWOnatRZBbYP9g3R4eNG51y/Hl7+Ln
tvOYtd+MhY9TuN5zylq3rrDoQQSqIwKt9aOY8w/yqsDIOahFmq5IAakiEe8yXfj4
fYB12SJZr8Vs0qdtSssWbh4ahtxtspSm5gZ5AaWpSoL+/KXqE7123IvwRy/JFpAy
W5J/DfGNqce4sgFbtYIhPFkX5woVn4sO87MR1wn1HtD2AjdvZ4uuNFM6VCLRxIgu
TAAGCOiiQKKpBjbYhbaMOQ7PH8BoOUsftkzCr80=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9pyYlmcEh2JfhgpqLvf
XcimI7ESkxb5VmRmLmywJLZtCNKz7l/VygRhsatN12S918y95rhqOKdTsitRSnSK
2RsTS6g0WgdPHc/oe7pSaW72myxmbSxTK7VzZvaQRwKZd4YG4JI07hLUyLu06ZY8
ttGRsTHm1GEP77sE8ClQFGwvoZa0NU/37sy1+STl3+8OVMei5NBOYnzL7qix6mdJ
LPb4lwFM75TSyOmdTHZPa63i2I3623xSmom3eQsMMXJG1V/mBoMCOi+4X8V0zkO0
2W588sM8Hv7O1qPBjlaISXBt/UaUjS2jc7gCZdK9ol8ZMueIMK3K635Qbkmoi7d/
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5130351983848443397124955145248116846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood Cliffs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colonytv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23209329947163408564342205051575813188778338959834840150168859220896603416482888170168063692292023371572205356058095955154946085360531962291335319933876943116610849522124703866069077614400227813888454925938813804992639532861687874308400059602734855049944806423077355838392141722467277202732729978899583544500273607139005652580991199539974110973605316920857949718967084986739221507764249333938893289462609845893201385523691652945516408289492203147429977581029480126134473814273476340206067953512666819123298884377047019370312341451160209440226469496173063390791760130303583359082916623411786892510510487758646080405459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							884cbb4b810871c1680dcdf5d9b216ecfc9acbf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamimozi.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universaltalentdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittlefilmi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.nbcumv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.cnb.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-lefilm.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trollswereldtour.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomax-looneylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsociety00.dat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trolls-ofilme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsdalebookgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notimetodie-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purgatorysd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depurgesouthholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camsecpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mafilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlefilm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtotrainyourdragon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quarkltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elanplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssl-secure-vpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackyholidaywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wackywallpaperz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refss0fstvk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theparmenides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kraftwerks3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ela.nplcsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aseheinrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temptationislandpickuplines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lastchristmas-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcuniversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cyprusnationalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.tvecms.universalkids.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaldigitaluniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-lefilm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.sproutonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramusestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-ofilme.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securloq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiralcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-film.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.tvecms.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-prod.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.u1rbr0uz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.universalkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretlifeofmypet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surf.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refstevorq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ma-movie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazzkaufreichenbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-coin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimsonclupeidae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolittle-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z2beeow.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdk.brand-mps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happydeathday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1917-film.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.colonytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allrisenow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016defd0eac7000004030047304502207cb385154bb1050cfb446ef4679131a5bdae353eaa3e7d41d255a83a6f154022022100dca5909ba4d53c494e8ee6b7befdc6d91eaf058dd2cefe607657478f0d63ca110076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016defd0eac10000040300473045022008a9334f428be4b39a2cf67943229f5c4039398c7df3b220734dcc1e581455fd022100b1a1da0ccf06262af9cae2ac8c1c207af5fc5607a1fbd184b47c27ed0e44c362
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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