c.nine.com.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:59:31:da:c0:37:49:a5:09:19:a3:f2:7e:61:63:bf was issued on by DigiCert, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=c.nine.com.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:59:31:da:c0:37:49:a5:09:19:a3:f2:7e:61:63:bf
Serial Number (int): 19072317530696389503967696753719862207
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1f:e6:0c:5f:66:5a:ce:1d:fd:66:2d:0a:76:bc:6f:0e:23:1a:32:5d
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 65:86:76:50:ca:48:be:a3:e7:f3:0c:d7:bf:df:aa:a6:dc:71:46:f5
Fingerprint (sha256): 2f:36:f7:f8:71:60:bd:33:79:54:4e:4b:b3:c2:07:f7:f4:f2:0a:f8:9f:08:7e:3b:a4:c9:b4:f0:76:84:f4:4f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate c.nine.com.au

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c.nine.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c.nine.com.au
c.9now.com.au
c.9news.com.au

Other certificates including the domain name nine.com.au

(limited to 100 certificates)
nine.com.au
*.api.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
nine.com.au
int-pixel.nine.com.au
test.perso-data-api.nine.com.au
customer-test.ssl.fastly.net
uat.settings.nine.com.au
entertainment.nine.com.au
www.nine.com.au
*.9pub.io
nine.com.au
*.nine.com.au
f1.nine.com.au
as.adsoniris.com
elsewhere.nine.com.au
www.nine.com.au
*.nine.com.au
*.nine.com.au
pickle.nine.com.au
*.staging.origin.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.nine.com.au
wwos.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.networkservices.ninemsn.com.au
9.nine.com.au
nine.com.au
prev.login.nine.com.au
www.networkservices.ninemsn.com.au
akamaisecure7.qualtrics.com
dns-vetting1-jeffg-noah.map.fastly.net
saleshub.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
staging.fantasticfurniture.nine.com.au
nine.com.au
akamaisecure7.qualtrics.com
nine.com.au
kevincanwait.nine.com.au
somni.nine.com.au
nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
go.nine.com.au
ratings.nine.com.au
magellan.nine.com.au
int-adc.api.nine.com.au
*.api.nine.com.au
intranet.nine.com.au
www.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
www.wwos.nine.com.au
honey.nine.com.au
nine.com.au
nine.com.au
*.nine.com.au
somni.nine.com.au
staging.login.nine.com.au
*.api.nine.com.au
www.nine.com.au
images.passendo.com
9now.com.au
nine.com.au
quizapi.nine.com.au
*.9pub.io
asruns.nine.com.au
nine.com.au
www.nine.com.au
somni.nine.com.au
www.nine.com.au
uat.amp.nine.com.au
customer-test.ssl.fastly.net
somni.nine.com.au
*.9pub.io
akamaisecure7.qualtrics.com
logies.nine.com.au
www.celebrity.nine.com.au
misc.nine.com.au
style.nine.com.au
student.afr.com
rebel.wwos.nine.com.au
*.thefix.nine.com.au
www.networkservices.ninemsn.com.au
*.nine.com.au
*.staging.origin.nine.com.au
*.nine.com.au
www.networkservices.ninemsn.com.au
customer-test.ssl.fastly.net
9now.com.au
akamaisecure7.qualtrics.com
nine.com.au
www.celebrity.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
customer-test.ssl.fastly.net
www.nine.com.au
bookmarktowin.nine.com.au
wwos.nine.com.au
c.msn.com
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for c.nine.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpjCCBY6gAwIBAgIQDlkx2sA3SaUJGaPyfmFjvzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjIxMjE1MDAwMDAwWhcNMjQwMTE1MjM1OTU5WjAYMRYwFAYDVQQDEw1jLm5pbmUu
Y29tLmF1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAgWMjAONHNI
V0BZimbt+jXlB4VnerljKS6d5wWp0kPdHGYFzaeqCljcs2f+pDCpG12O5ZIABnOy
+E1TLWTh30otW3ZKP24AFvTjKH6eHCk9Y/qUJ9b8NAy7KChm1XX2mN7bkbLQMO59
Rmicp7yuVdyLwIJKfudkpWDD+3dZria5G7TjI9+6ol/aNlumd34x9SdtNsaHqUc0
r/foL0mDyRgxIyiBRlFRbz1q3NiXgd5VtqVU6E9eTmIqZgVcay0mlowh3EfJA4OK
cIuERd2ns9qHtnIby6Die2PzggqwYeqHP1mKNwvUF0y3a8xYRrtzTs/4J87id7Mi
ue3nnYE5zQIDAQABo4IDpjCCA6IwHwYDVR0jBBgwFoAUpbTW6zbE52um38RkCwEq
IAS4ZiMwHQYDVR0OBBYEFB/mDF9mWs4d/WYtCna8bw4jGjJdMDcGA1UdEQQwMC6C
DWMubmluZS5jb20uYXWCDWMuOW5vdy5jb20uYXWCDmMuOW5ld3MuY29tLmF1MA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8G
A1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1Ry
dXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRw
Oi8vY3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hB
MjU2MjAyMkNBMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkw
JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcw
AoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExT
UlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5
AgQCBIIBbwSCAWsBaQB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb
AAABhRf/VNQAAAQDAEcwRQIgBv4lIQTxPxEPYbJInCwBWp5fH8YMjNUILBjOvVEY
Ne0CIQDbplfM38VKsh/r+gF8ppOtwt/thqNQ2rDsdyiMzaXehgB2AHPZnokbTJZ4
oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhRf/VSUAAAQDAEcwRQIgP+OPQlku
UCSM1Vx53mlbJ6saYbX8YWio25wbKEYrC+0CIQCwRyB4aef4TX4FFNDZrdTOMFxJ
w7iwRoSGbCZs20W+iQB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABhRf/VOYAAAQDAEgwRgIhAPqFye9BskbxIEVNCxPibUh8glE90OLaQgQt7yhT
N9iHAiEAw6u098TR5BAiK/CUOwrpgzv7WoLvaCjFha1KVA3S7zkwDQYJKoZIhvcN
AQELBQADggIBAJg7bAuX0a37DvhN7TqYvRKVdDQPCAJosOtkJukC0wRVt6s9f8Oo
ZryXYCG/wgkeRLZxaBIPZ1bl7PBlMWcNlXIf5ltJ1zxX5ZkOwmnD34uteW+rqwQT
AbKrBRKEBXHZWpSHnJg4YZuSErrWbwLeEy/ua2lauq3wrHRDz2A5t5eCH/3xLys6
X0TEZ80RAdX9Tjsxnci/06o8yAOJGsYFE4GxknRrTEwkFWWM8FPX+hKIcEBa7sfq
wx/sWjv+9nISwA/lPtvPxUDpX0kwi3aSiOZifdqeSQmYFW8PA3hDxEr4PuCPHFXP
n0HpcgSrjddpF1cfF/W/luUAaXZL84W6ZVC0U9vy9UPnSHmx81npUc/ds4YU065E
jdJ1UEWCmYLR/p2Lra/dy1q0yFjuyWVNe4CnF4yxFI50DJ6zyFzfwjJvdVR5a80X
kciK2iadwZ2C0C1GiXBcF2wKDRwv0p88azU2TUzMbJZq8l6n1ADrtWG9cWlpSzKI
4E7Jk78Kw/L2FBPklS+/SpUK5Gn88VBNxghhgpNLSLpouxRybFUpbZqYkT6QUG8/
f30nYbrW7+TDQiBmDwzomqcV4nNANDqp3WaLQkU/8WoO5AHZZ7iY7ta44+Z0p9NW
aXU5U3Ton7CkIazrxnEEOEDi6uTRF6Y3K3J5m0eWoCyPKg44HzFdQEZ9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAgWMjAONHNIV0BZimbt
+jXlB4VnerljKS6d5wWp0kPdHGYFzaeqCljcs2f+pDCpG12O5ZIABnOy+E1TLWTh
30otW3ZKP24AFvTjKH6eHCk9Y/qUJ9b8NAy7KChm1XX2mN7bkbLQMO59Rmicp7yu
VdyLwIJKfudkpWDD+3dZria5G7TjI9+6ol/aNlumd34x9SdtNsaHqUc0r/foL0mD
yRgxIyiBRlFRbz1q3NiXgd5VtqVU6E9eTmIqZgVcay0mlowh3EfJA4OKcIuERd2n
s9qHtnIby6Die2PzggqwYeqHP1mKNwvUF0y3a8xYRrtzTs/4J87id7Miue3nnYE5
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19072317530696389503967696753719862207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c.nine.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24241742255506040801609689947395972708642617483923312019997893743326005962231517979085233881852333918082059105304076842743414956001927499823363184219848224352693075938503218431166789477658788686057616677579645018154753875703182667454328644237447512269407888478371528747716507173364066873944820482551703222462387238898348257341475633060384528384748668832936037919355877083285341816211490684813484770567939433367920322280189750739515252688373622819911281902807486383806966664388094503690940026966657002473462631930524517951436086672211374413377285341925868755585137512040516834398845273930254011228984534994901752953293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fe60c5f665ace1dfd662d0a76bc6f0e231a325d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.9news.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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