www.networkservices.ninemsn.com.au

- Nine Digital Pty Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:b2:0a:5e:14:71:c3:55:a1:fa:61:e3:5e:1d:0d:6c was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nine Digital Pty Limited

Organization: Nine Digital Pty Limited
State / Province: New South Wales
Locality: Sydney
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:b2:0a:5e:14:71:c3:55:a1:fa:61:e3:5e:1d:0d:6c
Serial Number (int): 15545947072323818032524788606143630700
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 36:39:92:db:eb:59:b2:7f:7f:fb:96:cd:35:9b:1b:65:ed:4e:cf:68
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 22:6b:ae:f8:95:cc:f3:0b:4f:14:73:b8:2e:e4:a8:fe:10:04:c6:3a
Fingerprint (sha256): 1e:a8:5a:1b:eb:4f:42:fa:aa:9a:b0:76:dd:5e:83:4e:8d:0f:27:d6:77:25:90:f5:67:1d:ac:ac:5f:e9:1e:f7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.networkservices.ninemsn.com.au

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.networkservices.ninemsn.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.networkservices.ninemsn.com.au
telstratv.9now.com.au
theforceservice.mi9.com.au
honey.nine.com.au
chromecast.9now.com.au
staging.networkservices.nine.com.au
wwos.ninemsn.com.au
staging.tv-api.9now.com.au
staging.travel.nine.com.au
staging.lg.9now.com.au
www.9nation.com.au
staging.kitchen.nine.com.au
staging.continue-watching-api.9now.com.au
staging.elsewhere.nine.com.au
networkservices.ninemsn.com.au
hbbtv9now.freeviewplus.net.au
lg.ctv.9now.com.au
staging.ps4.9now.com.au
identity.nine.com.au
staging.homes.nine.com.au
www.9now.com.au
ctv.9now.com.au
staging.lg.ctv.9now.com.au
imageresizer.staging.static9.net.au
uat.samsung.9now.com.au
staging.telstratv.9now.com.au
homes.nine.com.au
stag.hbbtv.9now.com.au
tv-api.9now.com.au
competition.nine.com.au
uat.settings.nine.com.au
staging.coach.nine.com.au
ps3.9now.com.au
kitchen.nine.com.au
staging.imageresizer.static9.net.au
staging.ps3.9now.com.au
chromecast-caf.9now.com.au
staging.appletv.9now.com.au
ps4.9now.com.au
staging.user-api.9now.com.au
uat.user-api.9now.com.au
networkservices.nine.com.au
staging.lifestyles.nine.com.au
staging.hisense.ctv.9now.com.au
login.staging.9now.com.au
staging.login.nine.com.au
hisense.ctv.9now.com.au
staging.settings.nine.com.au
staging.identity.nine.com.au
staging.9news.com.au
staging.thefix.nine.com.au
vms.mi9cdn.com
staging.nine.com.au
api.sso.nine.com.au
login.uat.9now.com.au
www.nine.com.au
elsewhere.nine.com.au
staging.pickle.nine.com.au
content.api.ninemsn.com.au
staging.chromecast.9now.com.au
www.yourtv.com.au
wwos.nine.com.au
sony.9now.com.au
user-api.9now.com.au
login.nine.com.au
staging.competition.nine.com.au
imageresizer.static9.net.au
settings.nine.com.au
staging.honey.nine.com.au
staging.9now.com.au
staging.wwos.nine.com.au
staging.ctv.9now.com.au
lifestyles.nine.com.au
staging.samsung.9now.com.au
lg.9now.com.au
www.9news.com.au
travel.nine.com.au
staging.wwos.ninemsn.com.au
uat.login.nine.com.au
coach.nine.com.au
login.9now.com.au
uat.tv-api.9now.com.au
appletv.9now.com.au
amp.9news.com.au
thefix.nine.com.au
9nation.com.au
share.9cdn.net
news-native-api.nine.com.au
staging.api.sso.nine.com.au
hbbtv.9now.com.au
pickle.nine.com.au
staging.sony.9now.com.au
stag.hbbtv9now.freeviewplus.net.au
staging.chromecast-caf.9now.com.au
uat.9now.com.au
mi9observatory.mi9cdn.com
staging.yourtv.com.au
samsung.9now.com.au

Other certificates including the domain name ninemsn.com.au

(limited to 100 certificates)
networkservices.origin.ninemsn.com.au
showpony.news.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.wideworldofsports.ninemsn.com.au
www.networkservices.ninemsn.com.au
ninemsn.com.au
9now.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
sharepoint.ninemsn.com.au
webmail.ninemsn.com.au
favouritethings.news.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
lyncweb.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
adc.api.ninemsn.com.au
*.ninemsn.com.au
nine.com.au
newsalerts.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.carpoint.ninemsn.com.au
ultimateislandescape.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
godo.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.ninemsn.com.au
*.carpoint.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
miamiswim.ninemsn.com.au
sip.ninemsn.com.au
nowornever.ninemsn.com.au
alerts.news.ninemsn.com.au
godo.ninemsn.com.au
lyncweb.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
*.ninemsn.com.au
9now.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
webmail.ninemsn.com.au
www.networkservices.ninemsn.com.au
entertainmentalerts.news.ninemsn.com.au
nine.com.au
sip.ninemsn.com.au
nine.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
nine.com.au
*.ninemsn.com.au
*.sbkprod.ninemsn.com.au
www.networkservices.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
lsaccess.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
newsalerts.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.carpoint.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
9now.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
motoring.ninemsn.com.au

Certificate

The complete raw certificate details for www.networkservices.ninemsn.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZk2MRRySS4+7hJ/Bwvo
2YnQy+ySPs1tQJLunJC4Ge9jx9emGtHZva/ySHWL7h0hd+gbiUKDMC86sNXlLRfs
wqvk3ymqKqnksWoUW5hlHrP7AyL+9fCkWEdI6XL09f3Aq2IZSI2V2LkNLopzRbsc
W1R90kZzbyG5zno5x6IEx/VwfAVMOwio9zxcc4YXNm5wIpVWXVRln3dJuXSlcHzZ
U8rEfcSB0871IotTNO9GVWK5lzYOWlWpr1MFH/6EsehYh29RRgpndQcHyTC3oY8Y
pAZTnoO6yb+3H3afp2fsVsX/f9yBTM7npoQ9Z+I9gM3QyMI4zeTMFA+VrPi3bbV9
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15545947072323818032524788606143630700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nine Digital Pty Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.networkservices.ninemsn.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21409825037670342036611292775493815073176917765548388115820093812156507038630221741612303724063068948290995417044348816364742852891869173517432711399931998248608012875189246863412810656899455326021370175219292145625524659188852994671948298725055461392459390525558728275983773340572576623972751654036446700247432580743369426076637935284867737714513197009528666430205490524937808707094516917112830414276880820912898112694934152983898839966070214283095727450997778694632269722287178263496381126732451635371535387957764308257231168428104921854483307436113445407380265709988333263558626447687429855288148724301442070183359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							363992dbeb59b27f7ffb96cd359b1b65ed4ecf68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2444 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.networkservices.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstratv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theforceservice.mi9.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honey.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.networkservices.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwos.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.travel.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lg.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9nation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kitchen.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.continue-watching-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.elsewhere.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkservices.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbtv9now.freeviewplus.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ps4.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.homes.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lg.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageresizer.staging.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.telstratv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homes.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hbbtv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competition.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.coach.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps3.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.imageresizer.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ps3.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast-caf.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.appletv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps4.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkservices.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lifestyles.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hisense.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisense.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.identity.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thefix.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sso.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.uat.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsewhere.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pickle.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.api.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chromecast.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwos.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.competition.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageresizer.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.honey.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wwos.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestyles.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wwos.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appletv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefix.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9nation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.9cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-native-api.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.sso.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbtv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickle.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sony.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hbbtv9now.freeviewplus.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chromecast-caf.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi9observatory.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung.9now.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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