v2.pixel.nukp.data.newscorp.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number cf:6a:01:65:ad:64:a0:6a:09:ca:dc:94:e6:74:e4:46 was issued on by Google Trust Services LLC.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=v2.pixel.nukp.data.newscorp.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): cf:6a:01:65:ad:64:a0:6a:09:ca:dc:94:e6:74:e4:46Serial Number (int): 275700606932598851827832724571139925062
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 8f:c9:db:17:0b:6e:77:09:01:0b:68:61:8d:36:e2:5f:26:66:11:a0
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 38:82:39:5a:e2:81:0f:32:fd:cf:1a:58:ea:7c:26:6e:eb:98:03:20
Fingerprint (sha256): 25:92:67:32:06:1d:31:73:0b:e4:ba:68:1c:13:a7:8c:bb:05:f2:b7:eb:1f:03:6b:4f:a9:84:39:5f:d0:3a:42
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/AWqH-MXy-vICRL Distribution Point: http://crls.pki.goog/gts1d4/04qrLQWTZ_w.crl
Check the revocation status for certificate v2.pixel.nukp.data.newscorp.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for v2.pixel.nukp.data.newscorp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
v2.pixel.nukp.data.newscorp.com
sac.club950.co.uk
sac.dreamteamfc.com
sac.mytimesplus.co.uk
sac.staging-thesun.co.uk
sac.staging-thetimes.co.uk
sac.staging-thetimes.ie
sac.talksport.com
sac.the-sun.com
sac.the-tls.co.uk
sac.thescottishsun.co.uk
sac.thesun.co.uk
sac.thesun.ie
sac.thetimes.co.uk
sac.thetimes.ie
sac.timesmembership.com
sac.virginradio.co.uk
sac.wireless.radio
sac.news.co.uk
sac.talk.tv
sac.driving.co.uk
sac.newskit.co.uk
sac.sportswomenoftheyear.co.uk
sac.thetimes.com
sac.club950.co.uk
sac.dreamteamfc.com
sac.mytimesplus.co.uk
sac.staging-thesun.co.uk
sac.staging-thetimes.co.uk
sac.staging-thetimes.ie
sac.talksport.com
sac.the-sun.com
sac.the-tls.co.uk
sac.thescottishsun.co.uk
sac.thesun.co.uk
sac.thesun.ie
sac.thetimes.co.uk
sac.thetimes.ie
sac.timesmembership.com
sac.virginradio.co.uk
sac.wireless.radio
sac.news.co.uk
sac.talk.tv
sac.driving.co.uk
sac.newskit.co.uk
sac.sportswomenoftheyear.co.uk
sac.thetimes.com
Other certificates including the domain name newscorp.com
(limited to 100 certificates)
leapfrog-ssl-24.gcs-web.com
compliance.newscorp.com
tls.automattic.com
naifs.newscorp.com
pwm.newscorp.com
*.newscorp.com
naimeeting.newscorp.com
leapfrog-ssl-24.gcs-web.com
rsvp.newscorp.com
leapfrog-ssl-24.gcs-web.com
dscms.newscorp.com
api.content.capi.newscorp.com
lyncweb.newscorp.com
leapfrog-ssl-24.gcs-web.com
v2.pixel.djp.data.newscorp.com
m.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
leapfrog-ssl-24.gcs-web.com
slcwprd1.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange.newscorp.com
hyperion.newscorp.com
naipinchange.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
tanprd.newscorp.com
newscorp.com
pwm.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
newscorp.com
content.capi-nonprod.newscorp.com
naid3.newscorp.com
intranet.newscorp.com
editionscurator-api.newscorp.com
board.newscorp.com
naifs.newscorp.com
v2.pixel.nukp.data.newscorp.com
newscorp.com
content-dr.kapi.newscorp.com
lcspublic.newscorp.com
board.newscorp.com
content.capi.newscorp.com
leapfrog-ssl-24.gcs-web.com
remotevpn.21cf.com
naiftp.newscorp.com
staging.developer.newscorp.com
naichat.newscorp.com
ncusnjvzops1.newscorp.com
leapfrog-ssl-24.gcs-web.com
content-knewz.capi-nonprod.newscorp.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
naimail.newscorp.com
*.api.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
content.kapi.newscorp.com
newscorp.com
conferencecenter.newscorp.com
tcfusnjpgpl1.newscorp.com
tanpre.newscorp.com
ncsubmissions.newscorp.com
gtp.newscorp.com
newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange-test.newscorp.com
*.acs.svc.newscorp.com
rsvp.newscorp.com
content.capi-stage.newscorp.com
leapfrog-ssl-24.gcs-web.com
staging.developer.newscorp.com
*.qa.newscorp.com
developer.newscorp.com
leapfrog-ssl-24.gcs-web.com
hyperion.newscorp.com
tfs2010portal.newscorp.com
web.newscorp.com
lync15pool.newscorp.com
content.capi.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
content.capi-stage.newscorp.com
content.capi.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
naisharepoint.newscorp.com
datacatalog.cyber.newscorp.com
staging.developer.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
equitynet.newscorp.com
compliance.newscorp.com
tls.automattic.com
naifs.newscorp.com
pwm.newscorp.com
*.newscorp.com
naimeeting.newscorp.com
leapfrog-ssl-24.gcs-web.com
rsvp.newscorp.com
leapfrog-ssl-24.gcs-web.com
dscms.newscorp.com
api.content.capi.newscorp.com
lyncweb.newscorp.com
leapfrog-ssl-24.gcs-web.com
v2.pixel.djp.data.newscorp.com
m.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
leapfrog-ssl-24.gcs-web.com
slcwprd1.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange.newscorp.com
hyperion.newscorp.com
naipinchange.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
tanprd.newscorp.com
newscorp.com
pwm.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
newscorp.com
content.capi-nonprod.newscorp.com
naid3.newscorp.com
intranet.newscorp.com
editionscurator-api.newscorp.com
board.newscorp.com
naifs.newscorp.com
v2.pixel.nukp.data.newscorp.com
newscorp.com
content-dr.kapi.newscorp.com
lcspublic.newscorp.com
board.newscorp.com
content.capi.newscorp.com
leapfrog-ssl-24.gcs-web.com
remotevpn.21cf.com
naiftp.newscorp.com
staging.developer.newscorp.com
naichat.newscorp.com
ncusnjvzops1.newscorp.com
leapfrog-ssl-24.gcs-web.com
content-knewz.capi-nonprod.newscorp.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
naimail.newscorp.com
*.api.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
content.kapi.newscorp.com
newscorp.com
conferencecenter.newscorp.com
tcfusnjpgpl1.newscorp.com
tanpre.newscorp.com
ncsubmissions.newscorp.com
gtp.newscorp.com
newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange-test.newscorp.com
*.acs.svc.newscorp.com
rsvp.newscorp.com
content.capi-stage.newscorp.com
leapfrog-ssl-24.gcs-web.com
staging.developer.newscorp.com
*.qa.newscorp.com
developer.newscorp.com
leapfrog-ssl-24.gcs-web.com
hyperion.newscorp.com
tfs2010portal.newscorp.com
web.newscorp.com
lync15pool.newscorp.com
content.capi.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
content.capi-stage.newscorp.com
content.capi.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
naisharepoint.newscorp.com
datacatalog.cyber.newscorp.com
staging.developer.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
equitynet.newscorp.com
Certificate
The complete raw certificate details for v2.pixel.nukp.data.newscorp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHZjCCBk6gAwIBAgIRAM9qAWWtZKBqCcrclOZ05EYwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwMzEyMTEwNTM3WhcNMjQwNjEw MTE1ODA2WjAqMSgwJgYDVQQDEx92Mi5waXhlbC5udWtwLmRhdGEubmV3c2NvcnAu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPN79UwnVYrFP6jl 1lXEjqTCsGEO3Ip474dGssZ2Et3BGv+hoOutZbuK1A1TnnP9c25asobnxyQZxirH sZHT30bwnYQLSyK8RIlpzYrRZR8QoM7Qf6fmbiaTpBaxSWEdV9OR4XBSsds4b9v9 LchH46SzifHy6fuWkV7jZT3u1fXSNavS3a+p/2ALCiD+mZg0eR2dCbRA1HmxtBqj ABuy2HFzkmCH+M6SCxm3W6JGNhxHimMeEJypaoKhFHRRbh7go0oq+kKSzAgvVd9S LJumoP/l62pF3wbbKA01jbed3qXZOYOacykVu/Gi80tE7/A9d9K0TefletIwMRH5 HDpi9QIDAQABo4IEaTCCBGUwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsG AQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI/J2xcLbncJAQtoYY024l8m ZhGgMB8GA1UdIwQYMBaAFCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEB BGwwajA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQv QVdxSC1NWHktdkkwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2Nl cnRzL2d0czFkNC5kZXIwggIMBgNVHREEggIDMIIB/4IfdjIucGl4ZWwubnVrcC5k YXRhLm5ld3Njb3JwLmNvbYIRc2FjLmNsdWI5NTAuY28udWuCE3NhYy5kcmVhbXRl YW1mYy5jb22CFXNhYy5teXRpbWVzcGx1cy5jby51a4IYc2FjLnN0YWdpbmctdGhl c3VuLmNvLnVrghpzYWMuc3RhZ2luZy10aGV0aW1lcy5jby51a4IXc2FjLnN0YWdp bmctdGhldGltZXMuaWWCEXNhYy50YWxrc3BvcnQuY29tgg9zYWMudGhlLXN1bi5j b22CEXNhYy50aGUtdGxzLmNvLnVrghhzYWMudGhlc2NvdHRpc2hzdW4uY28udWuC EHNhYy50aGVzdW4uY28udWuCDXNhYy50aGVzdW4uaWWCEnNhYy50aGV0aW1lcy5j by51a4IPc2FjLnRoZXRpbWVzLmllghdzYWMudGltZXNtZW1iZXJzaGlwLmNvbYIV c2FjLnZpcmdpbnJhZGlvLmNvLnVrghJzYWMud2lyZWxlc3MucmFkaW+CDnNhYy5u ZXdzLmNvLnVrggtzYWMudGFsay50doIRc2FjLmRyaXZpbmcuY28udWuCEXNhYy5u ZXdza2l0LmNvLnVrgh5zYWMuc3BvcnRzd29tZW5vZnRoZXllYXIuY28udWuCEHNh Yy50aGV0aW1lcy5jb20wIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIF AzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQv MDRxckxRV1RaX3cuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAO1N3dT4t uYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGOMo3QewAABAMARzBFAiARz5IQ 5o0tT2kMu/xVx4O0/6DLMd8P7RvoPUc+xFjapQIhAOX/4vDB+tEj3v7gUHtkVcyX QaVmvFvpc/P0JPErBGpIAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa OnQAAAGOMo3QlwAABAMARjBEAiATRa56GXaaHun0PcodpjBnhBas8NU2mgw9RHSA T1r6/wIgNiMFWKSePZzOblbqnf6tkJGjNLIud4s7LXwp4wg5j+swDQYJKoZIhvcN AQELBQADggEBAFThHY7dia3VUMJPCCvQaHXkpRkLvNwctWRgBytxstTbC6x2brXS jBQGZOzpqSDF1P0LxsiHI2OsaXShYMbAkXp/UiMgfz+JSY+D3AWgpRDZ5LKLaK7E X4psP29Hf9Y73uk7aQymeCg6s/3LQtJGNKB8xZGu/We8PjXwhxMBrwKDysw2L43N 29aKrSchpEoaRd2mYiNcDRc9GMq5ViTF94MWXEZ6Z+HgwrSzmldhG+1KNq/K4jos hsrtPaeX8NQYSBVYxZqfyUu4C5ztN1/YMki5leb+nSImx9Ya83XaET5ZyZW4Yrl5 836zN23MisSmYishvX0TxZ39X0YEOQT7Bts= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPN79UwnVYrFP6jl1lXE jqTCsGEO3Ip474dGssZ2Et3BGv+hoOutZbuK1A1TnnP9c25asobnxyQZxirHsZHT 30bwnYQLSyK8RIlpzYrRZR8QoM7Qf6fmbiaTpBaxSWEdV9OR4XBSsds4b9v9LchH 46SzifHy6fuWkV7jZT3u1fXSNavS3a+p/2ALCiD+mZg0eR2dCbRA1HmxtBqjABuy 2HFzkmCH+M6SCxm3W6JGNhxHimMeEJypaoKhFHRRbh7go0oq+kKSzAgvVd9SLJum oP/l62pF3wbbKA01jbed3qXZOYOacykVu/Gi80tE7/A9d9K0TefletIwMRH5HDpi 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275700606932598851827832724571139925062 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 11:05:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 11:58:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'v2.pixel.nukp.data.newscorp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19813242114431901111471600893942714376040161711519236544539541733822385544520596146515713985009222955466148063049903934583200979842012992745926485887069226207927689449175381530046039331468740720845637373537538597633443739648129447933189478179780473384990214170765718989409658267075544020972544569854376930729006298453789412222609866800903795183359360929297381565387681863728294046758799796523340558446683668069558457916019720340250890638811103442009895008011471387585040248014076271600736316979678498841866750993759005669311647110728448234497773215246195061941354757775852451632705404194760628878452349690910724481781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fc9db170b6e7709010b68618d36e25f266611a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/AWqH-MXy-vI' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (515 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.pixel.nukp.data.newscorp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.club950.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.dreamteamfc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.mytimesplus.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.staging-thesun.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.staging-thetimes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.staging-thetimes.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.talksport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.the-sun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.the-tls.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thescottishsun.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thesun.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thesun.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thetimes.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thetimes.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.timesmembership.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.virginradio.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.wireless.radio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.news.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.talk.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.driving.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.newskit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.sportswomenoftheyear.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thetimes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/04qrLQWTZ_w.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e328dd07b0000040300473045022011cf9210e68d2d4f690cbbfc55c783b4ffa0cb31df0fed1be83d473ec458daa5022100e5ffe2f0c1fad123defee0507b6455cc9741a566bc5be973f3f424f12b046a4800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e328dd097000004030046304402201345ae7a19769a1ee9f43dca1da630678416acf0d5369a0c3d4474804f5afaff022036230558a49e3d9cce6e56ea9dfead9091a334b22e778b3b2d7c29e308398feb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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