novica.com
- Novica United Inc. -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 04:ba:a3:48:67:20:f8:d2:a9:29:23:1c:96:0b:90:ff was issued on by DigiCert Inc.
With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Novica United Inc.
Organization:
Novica United Inc.
State / Province:
California
Locality: Santa Monica
Country: US
Locality: Santa Monica
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ba:a3:48:67:20:f8:d2:a9:29:23:1c:96:0b:90:ffSerial Number (int): 6285990967937054350552840530880598271
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0b:ed:23:23:31:17:63:ed:3f:3b:5b:f7:d9:82:c1:de:ce:d8:29:30
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 1a:e9:1d:65:55:6f:fe:b7:6e:36:33:92:e5:ef:fd:7e:1e:d7:97:d1
Fingerprint (sha256): 91:67:9c:e8:78:91:10:41:ed:89:6b:a4:5d:f8:28:f1:0b:bc:13:6f:8a:fd:5c:28:3f:6b:1c:13:64:c2:55:df
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate novica.com
60
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for novica.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
novica.com
artisanday.com
*.artisanday.org
*.artisansday.com
*.artisanday.com
artisansday.org
artisanday.org
artisansday.com
*.artisansday.org
*.worldartisansday.org
worldartisanday.com
worldartisansday.org
worldartisansday.com
handmade.com
*.handmade.com
novica.co.uk
*.novica.co.uk
novica.uk
*.novica.uk
*.es.novica.com
*.novica.es
*.worldartisansday.com
*.worldartisanday.com
worldartisanday.org
*.worldartisanday.org
www.novica.com
novica.ca
www.novica.ca
secure.novica.com
es.novica.com
api.novica.com
portal.novica.com
assets3.novica.net
secure1.novica.com
secure2.novica.com
secure3.novica.com
secure4.novica.com
content.novica.com
dropship.novica.com
www.novicacatalog.com
undiscovered.novica.com
extranet.novica.com
images1.novica.net
images2.novica.net
*.novica.ca
novica.es
novicacatalog.com
dev.novica.com
devtest.novica.com
dev-es.novica.com
glopal.novica.com
dev-glopal.novica.com
market.unicefusa.org
www.market.unicefusa.org
unicefmarket.org
secure.store.kiva.org
store.kiva.org
www.unicefmarket.org
assets1.novica.net
assets2.novica.net
artisanday.com
*.artisanday.org
*.artisansday.com
*.artisanday.com
artisansday.org
artisanday.org
artisansday.com
*.artisansday.org
*.worldartisansday.org
worldartisanday.com
worldartisansday.org
worldartisansday.com
handmade.com
*.handmade.com
novica.co.uk
*.novica.co.uk
novica.uk
*.novica.uk
*.es.novica.com
*.novica.es
*.worldartisansday.com
*.worldartisanday.com
worldartisanday.org
*.worldartisanday.org
www.novica.com
novica.ca
www.novica.ca
secure.novica.com
es.novica.com
api.novica.com
portal.novica.com
assets3.novica.net
secure1.novica.com
secure2.novica.com
secure3.novica.com
secure4.novica.com
content.novica.com
dropship.novica.com
www.novicacatalog.com
undiscovered.novica.com
extranet.novica.com
images1.novica.net
images2.novica.net
*.novica.ca
novica.es
novicacatalog.com
dev.novica.com
devtest.novica.com
dev-es.novica.com
glopal.novica.com
dev-glopal.novica.com
market.unicefusa.org
www.market.unicefusa.org
unicefmarket.org
secure.store.kiva.org
store.kiva.org
www.unicefmarket.org
assets1.novica.net
assets2.novica.net
Other certificates including the domain name novica.com
(limited to 100 certificates)
secure.novica.com
secure.novica.com
secure.novica.com
partners.novica.com
secure.novica.com
login.novica.com
origin.news.novica.com
*.novica.com
extranet.novica.com
login.novica.com
m.novica.com
go.novica.com
secure.novica.com
partners.novica.com
secure.novica.com
secure.novica.com
rs.novica.com
secure.novica.com
webserver1.novica.com
mj.novica.com
novica.com
go.novica.com
novica.com
secure.novica.com
secure.novica.com
partners.novica.com
extranet.novica.com
origin.news.novica.com
extranet.novica.com
partners.novica.com
secure.novica.com
dev.blog.novica.com
secure.novica.com
partners.novica.com
go.novica.com
novica.com
novica.ca
novica.com
novica.com
partners.novica.com
secure.novica.com
dev.blog.novica.com
yspxar.novica.com
novica.com
secure.novica.com
secure.novica.com
secure.novica.com
go.novica.com
origin.news.novica.com
go.novica.com
rs.novica.com
novica.com
go.novica.com
origin.news.novica.com
secure.novica.com
secure.novica.com
origin.news.novica.com
secure.novica.com
*.novica.com
secure.novica.com
secure.novica.com
origin-blog.novica.com
dev.blog.novica.com
support.novica.com
dev.blog.novica.com
partners.novica.com
secure.novica.com
secure.novica.com
secure.novica.com
novica.com
rs.novica.com
secure.novica.com
yspxar.novica.com
secure.novica.com
secure.novica.com
origin.news.novica.com
origin-blog.novica.com
extranet.novica.com
data.novica.com
secure.novica.com
rs.novica.com
secure.novica.com
undiscovered.novica.com
secure.novica.com
secure.novica.com
secure.novica.com
pics.novica.com
novica.ca
secure.novica.com
support.novica.com
yspxar.novica.com
secure.novica.com
rs.novica.com
secure.novica.com
go.novica.com
secure.novica.com
pics.novica.com
extranet.novica.com
extranet.novica.com
webserver1.novica.com
secure.novica.com
secure.novica.com
partners.novica.com
secure.novica.com
login.novica.com
origin.news.novica.com
*.novica.com
extranet.novica.com
login.novica.com
m.novica.com
go.novica.com
secure.novica.com
partners.novica.com
secure.novica.com
secure.novica.com
rs.novica.com
secure.novica.com
webserver1.novica.com
mj.novica.com
novica.com
go.novica.com
novica.com
secure.novica.com
secure.novica.com
partners.novica.com
extranet.novica.com
origin.news.novica.com
extranet.novica.com
partners.novica.com
secure.novica.com
dev.blog.novica.com
secure.novica.com
partners.novica.com
go.novica.com
novica.com
novica.ca
novica.com
novica.com
partners.novica.com
secure.novica.com
dev.blog.novica.com
yspxar.novica.com
novica.com
secure.novica.com
secure.novica.com
secure.novica.com
go.novica.com
origin.news.novica.com
go.novica.com
rs.novica.com
novica.com
go.novica.com
origin.news.novica.com
secure.novica.com
secure.novica.com
origin.news.novica.com
secure.novica.com
*.novica.com
secure.novica.com
secure.novica.com
origin-blog.novica.com
dev.blog.novica.com
support.novica.com
dev.blog.novica.com
partners.novica.com
secure.novica.com
secure.novica.com
secure.novica.com
novica.com
rs.novica.com
secure.novica.com
yspxar.novica.com
secure.novica.com
secure.novica.com
origin.news.novica.com
origin-blog.novica.com
extranet.novica.com
data.novica.com
secure.novica.com
rs.novica.com
secure.novica.com
undiscovered.novica.com
secure.novica.com
secure.novica.com
secure.novica.com
pics.novica.com
novica.ca
secure.novica.com
support.novica.com
yspxar.novica.com
secure.novica.com
rs.novica.com
secure.novica.com
go.novica.com
secure.novica.com
pics.novica.com
extranet.novica.com
extranet.novica.com
webserver1.novica.com
Certificate
The complete raw certificate details for novica.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILJTCCCg2gAwIBAgIQBLqjSGcg+NKpKSMclguQ/zANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw NDE0MDAwMDAwWhcNMjQwMzA3MjM1OTU5WjBrMQswCQYDVQQGEwJVUzETMBEGA1UE CBMKQ2FsaWZvcm5pYTEVMBMGA1UEBxMMU2FudGEgTW9uaWNhMRswGQYDVQQKExJO b3ZpY2EgVW5pdGVkIEluYy4xEzARBgNVBAMTCm5vdmljYS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLrXg5PE2m6XRt8uePP64tt0/vfnhxghJ8 7vFRJncznrOVC9uKzmQH/zX2s/46nKT3WMLqVUDzGSIFiLMH5pJDfl8dBLJy4r4L Gz7J5KM2lq/TZn/q7m65N1fFGxQl1g6kcLMyAuq1NKFke7cpSkW5v2ojMA7g1Kfd P2W5bThIUY4uZDc93XV+/nanzx/jjiPH7NBY+s6zUgeqBfhmEhmgmWHZf4/yhhGJ 17TEdJi1+WSiYAiBNUmyC4fBT8hBSrLGeWXPvLDvXjUpPhGPhje2lsJ8fEW6txRI +DpVY39WVUbhmKyTSmRk37lElkVBb4njZ7+37I655bODNsa9Fz85AgMBAAGjggfV MIIH0TAfBgNVHSMEGDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQU C+0jIzEXY+0/O1v32YLB3s7YKTAwggRnBgNVHREEggReMIIEWoIKbm92aWNhLmNv bYIOYXJ0aXNhbmRheS5jb22CECouYXJ0aXNhbmRheS5vcmeCESouYXJ0aXNhbnNk YXkuY29tghAqLmFydGlzYW5kYXkuY29tgg9hcnRpc2Fuc2RheS5vcmeCDmFydGlz YW5kYXkub3Jngg9hcnRpc2Fuc2RheS5jb22CESouYXJ0aXNhbnNkYXkub3JnghYq LndvcmxkYXJ0aXNhbnNkYXkub3JnghN3b3JsZGFydGlzYW5kYXkuY29tghR3b3Js ZGFydGlzYW5zZGF5Lm9yZ4IUd29ybGRhcnRpc2Fuc2RheS5jb22CDGhhbmRtYWRl LmNvbYIOKi5oYW5kbWFkZS5jb22CDG5vdmljYS5jby51a4IOKi5ub3ZpY2EuY28u dWuCCW5vdmljYS51a4ILKi5ub3ZpY2EudWuCDyouZXMubm92aWNhLmNvbYILKi5u b3ZpY2EuZXOCFioud29ybGRhcnRpc2Fuc2RheS5jb22CFSoud29ybGRhcnRpc2Fu ZGF5LmNvbYITd29ybGRhcnRpc2FuZGF5Lm9yZ4IVKi53b3JsZGFydGlzYW5kYXku b3Jngg53d3cubm92aWNhLmNvbYIJbm92aWNhLmNhgg13d3cubm92aWNhLmNhghFz ZWN1cmUubm92aWNhLmNvbYINZXMubm92aWNhLmNvbYIOYXBpLm5vdmljYS5jb22C EXBvcnRhbC5ub3ZpY2EuY29tghJhc3NldHMzLm5vdmljYS5uZXSCEnNlY3VyZTEu bm92aWNhLmNvbYISc2VjdXJlMi5ub3ZpY2EuY29tghJzZWN1cmUzLm5vdmljYS5j b22CEnNlY3VyZTQubm92aWNhLmNvbYISY29udGVudC5ub3ZpY2EuY29tghNkcm9w c2hpcC5ub3ZpY2EuY29tghV3d3cubm92aWNhY2F0YWxvZy5jb22CF3VuZGlzY292 ZXJlZC5ub3ZpY2EuY29tghNleHRyYW5ldC5ub3ZpY2EuY29tghJpbWFnZXMxLm5v dmljYS5uZXSCEmltYWdlczIubm92aWNhLm5ldIILKi5ub3ZpY2EuY2GCCW5vdmlj YS5lc4IRbm92aWNhY2F0YWxvZy5jb22CDmRldi5ub3ZpY2EuY29tghJkZXZ0ZXN0 Lm5vdmljYS5jb22CEWRldi1lcy5ub3ZpY2EuY29tghFnbG9wYWwubm92aWNhLmNv bYIVZGV2LWdsb3BhbC5ub3ZpY2EuY29tghRtYXJrZXQudW5pY2VmdXNhLm9yZ4IY d3d3Lm1hcmtldC51bmljZWZ1c2Eub3JnghB1bmljZWZtYXJrZXQub3JnghVzZWN1 cmUuc3RvcmUua2l2YS5vcmeCDnN0b3JlLmtpdmEub3JnghR3d3cudW5pY2VmbWFy a2V0Lm9yZ4ISYXNzZXRzMS5ub3ZpY2EubmV0ghJhc3NldHMyLm5vdmljYS5uZXQw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCB nwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln aUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0 dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hB MjU2MjAyMENBMS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUF BwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsw eTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUF BzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxH MlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB 1nkCBAIEggFsBIIBaAFmAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEf tZsAAAGHgYIlWwAABAMARzBFAiBTIU+se55qBe8eUNiRrqQs9lVUw7F9NMUZZl+S 43DBAQIhAMbZcAgrNmixUlZ0Syu43bjEr+69sfND3eMTjMndGhvPAHQAc9meiRtM lnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGHgYIlWQAABAMARTBDAiBXCJ31 IBcUEhrj/OCt00lqpf8jcIsT+NTfl7jSm6I+AgIfA/R7LLLmYA4Mdo/92o2u+7uL fGdTRikzzhy0x/EhOwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABh4GCJTEAAAQDAEcwRQIhAKBgRIayQQM1xE31+yJtHiMLH10AeaHuD3zVpYRw u99ZAiAVv7/JTnoyg5PVaJouN9reer7zEFSg+gsyzZ4uBQwXRjANBgkqhkiG9w0B AQsFAAOCAQEAdGo5rJ59rQE6AxwtSWHP4wRRX+enfnyhCqRHmUk2x5WUSZitK+/O Mvz2rTlX8JmZUJGWvqI++16quCzr6V43w/HiwFAYAn/1igAGwB6cqld4AL+Q1eNJ 5scQrRA48cOT/HFNB8OLuTM0OXufBQnJwpTHZ0+yL0snSyZtbho2YjafuO4QIUDI 69BgT+zju8P3UiHli+QQ2srhFiJe8x/lkhKofM2hwf1j9fKaqz0VDL0v/GZ2BwUk lSbJ2+2Q7YCoHI9/77vvYb1P4eWr6lPSLgFH0kGmw8oJalduly4hCuzlmq/yTqDm j+MbmqWkkXkHRhvxFgRMLqro+7XlTEsOcw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi614OTxNpul0bfLnjz+u LbdP7354cYISfO7xUSZ3M56zlQvbis5kB/819rP+Opyk91jC6lVA8xkiBYizB+aS Q35fHQSycuK+Cxs+yeSjNpav02Z/6u5uuTdXxRsUJdYOpHCzMgLqtTShZHu3KUpF ub9qIzAO4NSn3T9luW04SFGOLmQ3Pd11fv52p88f444jx+zQWPrOs1IHqgX4ZhIZ oJlh2X+P8oYRide0xHSYtflkomAIgTVJsguHwU/IQUqyxnllz7yw7141KT4Rj4Y3 tpbCfHxFurcUSPg6VWN/VlVG4Zisk0pkZN+5RJZFQW+J42e/t+yOueWzgzbGvRc/ OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6285990967937054350552840530880598271 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Monica' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novica United Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novica.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17632665449712678666507838207271879514727512092266509534764563423804790302227904793095784114841819090272638847288276684159964621042931574374941642882981940569943187828570702437159211689867562591932860713219787059879145914140854981390587337251153619516863540011783802364180112142037664395982046716593595036850673442282095516109112218468966836507529613508629732889478693838364400231764797571972484600003121857067206355954238895377464395832097404638443058148890402259404929153283387135947614227006304047356428479147650115610888628611903203808988670087912807996737326964121149990601642831467319906322319864854670076231481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0bed2323311763ed3f3b5bf7d982c1deced82930 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisansday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handmade.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.es.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisansday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisanday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldartisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldartisanday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novica.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets3.novica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure1.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure3.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure4.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropship.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novicacatalog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undiscovered.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images1.novica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images2.novica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novica.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novica.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novicacatalog.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devtest.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-es.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glopal.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-glopal.novica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.unicefusa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.market.unicefusa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicefmarket.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.store.kiva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kiva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unicefmarket.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets1.novica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.novica.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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