subscribers.theage.com.au

- FAIRFAX MEDIA MANAGEMENT PTY LIMITED -

Issued by Verizon Akamai SureServer CA G14-SHA2

About this certificate

This digital certificate with serial number 0e:68:eb:25:3e:d4:21:3e:db:c7:4e:21:f6:c9:c8:2e:95:4d:1f:e3 was issued on by Verizon Enterprise Solutions.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

FAIRFAX MEDIA MANAGEMENT PTY LIMITED

Organization: FAIRFAX MEDIA MANAGEMENT PTY LIMITED
Organization unit: Digital InfrastructureZZ
State / Province: NSW
Locality: Pyrmont
Country: AU

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:68:eb:25:3e:d4:21:3e:db:c7:4e:21:f6:c9:c8:2e:95:4d:1f:e3
Serial Number (int): 82265632353336054851024160077657215630557650915
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 84:3d:49:c0:0b:bc:a0:ec:11:63:3f:3f:61:6d:aa:37:00:11:7f:03
AuthorityKeyId: f8:bd:fa:af:73:77:c6:c7:1b:f9:4b:4d:11:a7:d1:33:af:af:72:11

Fingerprint (sha1): 48:d7:8d:71:c3:81:ed:bc:4c:ca:6b:48:33:0a:0d:35:99:84:ec:44
Fingerprint (sha256): 1e:88:60:36:6f:31:91:5a:2f:9a:11:1b:0c:3d:5b:c6:e9:4d:d1:34:f5:7d:4d:2d:4e:c2:7d:4b:b9:34:8f:1a

Issuing Certificate URL: https://cacert.a.omniroot.com/vassg142.crt
Issuing Certificate URL: https://cacert.a.omniroot.com/vassg142.der

Revocation information

OCSP Server: http://vassg142.ocsp.omniroot.com
CRL Distribution Point: http://vassg142.crl.omniroot.com/vassg142.crl

Check the revocation status for certificate subscribers.theage.com.au

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscribers.theage.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscribers.theage.com.au
rsvp.com.au
*.rsvp.com.au
www.rsvp.com.au
*.weatherzone.com.au
secure.rsvp.com
ws.payment.fairfax.com.au
*.watoday.com.au
*.theage.com.au
*.smh.com.au
*.reviewproperty.com.au
resources.theage.com.au
resources.smh.com.au
resources.fairfax.com.au
*.myfairfax.com.au
*.mob.f2.com.au
ipad-bundler.brw.com.au
ipad-bundler.afrsmartinvestor.com.au
*.homepriceguide.com.au
*.fairfaxmedia.co.nz
*.fairfax.com.au
*.f2.com.au
*.domaininsights.com.au
*.domainhomepriceguide.com.au
domain.com.au
*.domain.com.au
*.commercialrealestate.com.au
*.canberratimes.com.au
*.brisbanetimes.com.au
*.apm.com.au
*.agtrader.co.nz
*.agtrader.com.au
*.adonline.com.au

Other certificates including the domain name theage.com.au

(limited to 100 certificates)
5767253387640832-fe2.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
b2.shared.global.fastly.net
subscribers.theage.com.au
5699942098141184-fe2.pantheonsite.io
b2.shared.global.fastly.net
*.9pub.io
nine.com.au
5741384237580288-fe1.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
5756292874371072-fe1.pantheonsite.io
ultimate-footy.smh.com.au
support.fairfaxmedia.com.au
nine.com.au
5661601461960704-fe3.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
akamaisecure7.qualtrics.com
b2.shared.global.fastly.net
5680534013345792-fe1.pantheonsite.io
markets.theage.com.au
5680534013345792-fe1.pantheonsite.io
akamaisecure7.qualtrics.com
5758401703313408-fe2.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
5758401703313408-fe2.pantheonsite.io
b2.shared.global.fastly.net
5712536552865792-fe3.pantheonsite.io
5661133578960896-fe3.pantheonsite.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
5758401703313408-fe2.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
5694015311708160-fe1.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
www.fairfaxmedia.com.au
b2.shared.global.fastly.net
nine.com.au
5661133578960896-fe3.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
fairfaxmedia.com.au
5699942098141184-fe2.pantheonsite.io
5758401703313408-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
*.9pub.io
5741384237580288-fe1.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
b2.shared.global.fastly.net
*.9pub.io
akamaisecure7.qualtrics.com
5699942098141184-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5699942098141184-fe2.pantheonsite.io
5699942098141184-fe2.pantheonsite.io
student.afr.com
5699942098141184-fe2.pantheonsite.io
b2.shared.global.fastly.net
5758401703313408-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5699942098141184-fe2.pantheonsite.io
theage.com.au
5661133578960896-fe3.pantheonsite.io
b2.shared.global.fastly.net
5680534013345792-fe1.pantheonsite.io
ctl.upenn.dnsrakuda.com
staging.wizardofodds.com.au
insurance.theage.com.au
akamaisecure7.qualtrics.com
nine.com.au
5748291350298624-fe3.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
5661133578960896-fe3.pantheonsite.io
subscribers.theage.com.au
5699942098141184-fe2.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
akamaisecure7.qualtrics.com
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
5758401703313408-fe2.pantheonsite.io
5748291350298624-fe3.pantheonsite.io
auth.theage.com.au
5702167830724608-fe4.pantheonsite.io
b2.shared.global.fastly.net
5758401703313408-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
ultimate-footy.theage.com.au
5661133578960896-fe3.pantheonsite.io
5756292874371072-fe1.pantheonsite.io

Certificate

The complete raw certificate details for subscribers.theage.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/+gr9pvj7kIkkCPNgx
2rb1tYNBhD84f52voNYEmon/7KqyFaB2p/MdwPqkNHdWJ3N/EPy0V5EwRoX7OyVy
5A4lm5w+UHiiycsLs2CaKCJsT2yUqHMcB66ohuXSlbgMjx4zF3cIZwWNZfCdfZDR
3oW4jt9Svw2sRaMi9gsJnMd9PxHrEa/sPhP81biwJvKxtpHjZA7PKl5A/As8TrN4
QGEki67BddEHQBIQiT4Slszdjm7ectkCs35UKyM4zOMrOlP8IpqV4YhedSwKqkpW
6jQoheWl6QQG5QwFChPgLdTLfVP2Fps0KH2rPcRWIG5AGziMOyrAc1DoRqDQ/AgH
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82265632353336054851024160077657215630557650915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Akamai SureServer CA G14-SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-29 20:41:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-29 20:41:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pyrmont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FAIRFAX MEDIA MANAGEMENT PTY LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital InfrastructureZZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribers.theage.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19819411010980522261206091375083581709533618516718629093297805506891257898264098824938205467656767113341098869735438536749225275226330617758619122914053103408331707399053801571322867974486165927225886247273189415852960157907796574140390291169128290775863913485445469399451431613433082870439708858451989204890396923626021126559877941850516386511966141093488371773463126430293188518125862187842015370411425482602803175942243247415477508927206223142229802038310265377975938792710049229524654125880142326939487203392887437862563299463450409992683576001730521352364341725010842049903956314262977557485134417519948677515031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg142.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg142.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg142.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribers.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsvp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsvp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rsvp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weatherzone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rsvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.payment.fairfax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watoday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviewproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.fairfax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfairfax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mob.f2.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipad-bundler.brw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipad-bundler.afrsmartinvestor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homepriceguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfaxmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairfax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f2.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domaininsights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainhomepriceguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domain.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canberratimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agtrader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agtrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adonline.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8bdfaaf7377c6c71bf94b4d11a7d133afaf7211
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg142.crl.omniroot.com/vassg142.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							843d49c00bbca0ec11633f3f616daa3700117f03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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