*.nl.novamedia.com

- Novamedia B.V. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:fe:5f:db:42:cd:15:e4:2f:50:3c:93:69:83:54:18 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Novamedia B.V.

Organization: Novamedia B.V.
Organization unit: Novamedia B.V.
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:fe:5f:db:42:cd:15:e4:2f:50:3c:93:69:83:54:18
Serial Number (int): 15942295556255802172361685812428100632
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 57:58:47:45:c4:5c:c6:cf:be:a8:04:63:5c:3b:2c:f5:58:6e:78:c4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 77:34:da:2f:53:91:b3:52:07:46:c4:ad:ed:e0:68:ca:d3:3e:98:cd
Fingerprint (sha256): 0a:41:58:c1:3a:bc:21:9b:2a:f3:0e:aa:da:53:f5:af:bc:11:0a:d0:e9:e5:07:b2:f3:bb:20:06:4b:84:06:a8

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.nl.novamedia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nl.novamedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nl.novamedia.com

Other certificates including the domain name novamedia.com

(limited to 100 certificates)
fs.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com

Certificate

The complete raw certificate details for *.nl.novamedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15942295556255802172361685812428100632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nl.novamedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851192953380187955192615799244449298557644670073785235350252054440201639851768125314602369469127252826654712598401087730791271384581246063421314802454821456482564233604835737559959206795252288749719001898116645119089130209233407396738266395574857356598652965578928803937529378339111897868137058360245292198708210991799842227005168610266863591360231237468632508621778502315102896981327864928037972857731723886343719009709344815186882468472424681503168854766108805835294538151081101087938019110821397644659731362333106650882223433901852400994008784669178670681582635852622365932948663834559265125694240236838854886358052192972880834835670611647807262304101870914910489251808735386684153622878050188523470770184517625171663618167245196920038392565766091099592068545404423155435199469012259074077190777996435156099090032364723288306775581442249288029473726181011559524471400861056905402855309639077427989408931401526216632118953453199447243881331465491045888175839735662125275493514518337219646503077921698530756300191915876853862332596523212479683678292580516237386705397965646409261237403379035310763183023322955022332859867645810290405917533683354557456499938478130327136644268274964740134265218975700138396579847842485587545892675241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57584745c45cc6cfbea804635c3b2cf5586e78c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nl.novamedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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