www.networkservices.ninemsn.com.au

- Nine Digital Pty Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:dd:38:f0:f8:cc:cc:8a:1e:a6:de:17:22:7a:a3:52 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nine Digital Pty Limited

Organization: Nine Digital Pty Limited
State / Province: New South Wales
Locality: Sydney
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:dd:38:f0:f8:cc:cc:8a:1e:a6:de:17:22:7a:a3:52
Serial Number (int): 2477880508217789909310656078801445714
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 32:4e:13:07:26:b1:85:71:bc:27:01:33:53:3c:8c:bd:c2:2f:48:3b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a8:50:a6:6e:32:e7:ce:79:96:7c:83:3c:fa:70:fe:37:36:e0:be:6b
Fingerprint (sha256): 04:e8:4b:a6:56:57:d1:54:60:0a:6c:dd:75:52:c5:83:62:c6:a5:60:21:e7:d7:22:fc:fc:63:0e:f1:32:cd:8d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.networkservices.ninemsn.com.au

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.networkservices.ninemsn.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.networkservices.ninemsn.com.au
ps4.9now.com.au
staging.pickle.nine.com.au
pickle.nine.com.au
staging.ps4.9now.com.au
staging.lg.9now.com.au
tv-api.9now.com.au
staging.ps3.9now.com.au
9nation.com.au
staging.9now.com.au
chromecast.9now.com.au
staging.travel.nine.com.au
uat.samsung.9now.com.au
staging.identity.nine.com.au
stag.hbbtv9now.freeviewplus.net.au
staging.tv-api.9now.com.au
www.9now.com.au
share.9cdn.net
networkservices.ninemsn.com.au
coach.nine.com.au
wwos.nine.com.au
uat.settings.nine.com.au
uat.login.nine.com.au
staging.api.sso.nine.com.au
hbbtv9now.freeviewplus.net.au
uat.user-api.9now.com.au
staging.honey.nine.com.au
kitchen.nine.com.au
wwos.ninemsn.com.au
staging.kitchen.nine.com.au
honey.nine.com.au
samsung.9now.com.au
imageresizer.staging.static9.net.au
www.9nation.com.au
staging.homes.nine.com.au
staging.appletv.9now.com.au
uat.9now.com.au
uat.tv-api.9now.com.au
www.nine.com.au
news-native-api.nine.com.au
staging.chromecast.9now.com.au
telstratv.9now.com.au
staging.sony.9now.com.au
staging.nine.com.au
login.nine.com.au
identity.nine.com.au
staging.wwos.nine.com.au
amp.9news.com.au
staging.chromecast-caf.9now.com.au
mi9observatory.mi9cdn.com
content.api.ninemsn.com.au
networkservices.nine.com.au
chromecast-caf.9now.com.au
vms.mi9cdn.com
travel.nine.com.au
staging.yourtv.com.au
sony.9now.com.au
api.sso.nine.com.au
staging.thefix.nine.com.au
hbbtv.9now.com.au
staging.wwos.ninemsn.com.au
staging.9news.com.au
stag.hbbtv.9now.com.au
user-api.9now.com.au
staging.lifestyles.nine.com.au
staging.competition.nine.com.au
homes.nine.com.au
staging.user-api.9now.com.au
staging.coach.nine.com.au
ps3.9now.com.au
staging.login.nine.com.au
imageresizer.static9.net.au
elsewhere.nine.com.au
thefix.nine.com.au
staging.networkservices.nine.com.au
www.yourtv.com.au
www.9news.com.au
staging.telstratv.9now.com.au
staging.elsewhere.nine.com.au
lifestyles.nine.com.au
lg.9now.com.au
competition.nine.com.au
theforceservice.mi9.com.au
staging.samsung.9now.com.au
staging.imageresizer.static9.net.au
appletv.9now.com.au
staging.settings.nine.com.au
settings.nine.com.au

Other certificates including the domain name ninemsn.com.au

(limited to 100 certificates)
networkservices.origin.ninemsn.com.au
showpony.news.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.wideworldofsports.ninemsn.com.au
www.networkservices.ninemsn.com.au
ninemsn.com.au
9now.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
sharepoint.ninemsn.com.au
webmail.ninemsn.com.au
favouritethings.news.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
lyncweb.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
adc.api.ninemsn.com.au
*.ninemsn.com.au
nine.com.au
newsalerts.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.carpoint.ninemsn.com.au
ultimateislandescape.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
godo.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.ninemsn.com.au
*.carpoint.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
miamiswim.ninemsn.com.au
sip.ninemsn.com.au
nowornever.ninemsn.com.au
alerts.news.ninemsn.com.au
godo.ninemsn.com.au
lyncweb.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
*.ninemsn.com.au
9now.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
webmail.ninemsn.com.au
www.networkservices.ninemsn.com.au
entertainmentalerts.news.ninemsn.com.au
nine.com.au
sip.ninemsn.com.au
nine.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
nine.com.au
*.ninemsn.com.au
*.sbkprod.ninemsn.com.au
www.networkservices.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
lsaccess.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
newsalerts.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.carpoint.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
9now.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
motoring.ninemsn.com.au

Certificate

The complete raw certificate details for www.networkservices.ninemsn.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CB8iarbfCg/G8Y4JwLn
lil5PGnQ9UTngbs/tkACYnh39z0OIZu9QWOFQhBgso5f36jpYZJpN3i9+IBSZIe+
EHBWqRdKZTSjTDFa8sAYXtC46aAuS+WCNKJO4JMhV5rRQQ7b8bmbjIpMVFiI7/q/
OI1qQ8z9UXZLplKsXh4fcdl8rRjE/Ow3KbJOMqRexmjipZitleKc1wNbX4X8upnE
AXik0f5rq3de/y2Qol9SmTVdEiyz+i89QAYOY/NuwRdmteMMppL66XHzq9Rwq/7o
UDUq/3eunmyNo/YDHm7s9Bopxrm54fFD+vW/OVb5ryqubEZV3xDkS5ZxmrDInbt9
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2477880508217789909310656078801445714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nine Digital Pty Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.networkservices.ninemsn.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30313212870052747161321796687859761718990433267980115700340108969068744958743992049087143152116279696870550704087790392002582154804192513254454585775586616974735185841636945443152770917901611130297429770413558489315924683487890532792043311337788578110193100703598653999010418874732444349488160797678485020475642244858410484289814449967561703014915635885732128842538638488115469580992977057464257934243159023913775807979473479080871680348704179953040521795118870171378706418432782768516623052848231453770399518118751568080548066128824546736670119789466514996092051635646446734671284988330621804721876405244685241253297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							324e130726b18571bc270133533c8cbdc22f483b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2184 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.networkservices.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps4.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pickle.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickle.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ps4.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lg.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ps3.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9nation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.travel.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.identity.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hbbtv9now.freeviewplus.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.9cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkservices.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwos.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.sso.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbtv9now.freeviewplus.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.honey.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwos.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kitchen.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honey.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageresizer.staging.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9nation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.homes.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.appletv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-native-api.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chromecast.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstratv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sony.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wwos.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chromecast-caf.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi9observatory.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.api.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkservices.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast-caf.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sso.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thefix.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbtv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wwos.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hbbtv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lifestyles.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.competition.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homes.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.coach.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps3.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageresizer.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsewhere.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefix.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.networkservices.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.telstratv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.elsewhere.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestyles.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competition.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theforceservice.mi9.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.imageresizer.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appletv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings.nine.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016488265ad70000040300483046022100eadae46d2fcd29487d5ce9e7fb137e46905e8f893270911a5d733d924b86c353022100f1afd3fbdd810d8edb88d604022bdb33f69b42d907228d9de6976d4df7a3d9ca0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016488265af20000040300483046022100ddf8b45e7222b523615d801baa74490853e2018395308fc651de46094b46c267022100bde77f5b9f0bc51b50b4fc4010b6cbe8f4cef6c5289e11a7aee23d47116433a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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