*.novamedia.com
- Novamedia B.V. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0d:7a:b9:12:23:6b:d9:fb:7b:30:08:33:3d:78:b1:4a was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Certificate had 3 embedded SCTs from distinct log IDs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)
Novamedia B.V.
Organization:
Novamedia B.V.
Organization unit: Novamedia B.V.
Organization unit: Novamedia B.V.
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:7a:b9:12:23:6b:d9:fb:7b:30:08:33:3d:78:b1:4aSerial Number (int): 17917177844791115933198711083972997450
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0a:12:e4:d8:12:36:ab:f3:0d:c8:01:0d:bc:30:1f:f2:2b:29:5c:61
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): f2:17:2e:c1:f3:20:46:03:a0:8d:57:c4:2d:3f:ed:73:ee:f8:cd:a0
Fingerprint (sha256): 9a:db:99:4d:e5:f0:aa:2e:15:92:72:9e:18:db:08:8a:07:16:ac:97:3d:c5:3d:3d:1d:bc:3a:a3:ed:20:3b:ac
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.novamedia.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.novamedia.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.novamedia.com
novamedia.com
novamedia.com
Other certificates including the domain name novamedia.com
(limited to 100 certificates)
fs.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com
Certificate
The complete raw certificate details for *.novamedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHoDCCBoigAwIBAgIQDXq5EiNr2ft7MAgzPXixSjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTAxMDIwMDAwMDBaFw0yMTA0MDIxMjAwMDBaMIGFMQswCQYDVQQGEwJOTDEW MBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFtMRcwFQYD VQQKEw5Ob3ZhbWVkaWEgQi5WLjEXMBUGA1UECxMOTm92YW1lZGlhIEIuVi4xGDAW BgNVBAMMDyoubm92YW1lZGlhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAPu41G7CECosAeTnbg0f92Yv8tkhTuokbtNQcTqvcCkq9PvFycKWaVff 1QwCafugH0r9M/dBv/cQkL2eRK3N1sqioaSw+z0n5ozh+D43FYmD82W/c2vSVWl1 OjjCLhz5vxsfXGZZgh9K+G4g9oiGTUgEE0pqKEqDL4r6yeZSW+rR+TF10NBVdCYD 8QkSP+K7TXdGCt/7xHu4peztAr5VcIIgh+5MSvQxd9XHnYtkBUut7LoVURJEGxrp 9x5CoFWlHla6j+igPXBsC2FjzYK3gSh2bkr9ke4HnCQb+Du+u9bBbW4YiYhZq/zp kjCJL55xvo/DC6nmQCDTyW6m+MY2SxPq9yDzx0s5NFvPNHMyj+LQuXeKUGJV6K3f /lPCe1vxh5PBoweOOo/M7dPbP9UBFFSNn/LCdVnZrcqILZZjevp4QE38966HbT99 rrwYFOLbGQWmlWC+edoARMl2IIPNjM4DEkqZ0b/74vfNreWaJl1tWL07YABCFPaK Woe3zBEX5z8vReXyjKGNTmCHtxgihWsI6ckpAnzKp2MUvFI0f/XB2P6On4cvC7lt trO+oUZloIDAclUv/q0LMegyOrU8m3q42NF8b/wZB3W6NKuIR6GhrHK1QqQzsjiM jcoOUBE9Fa3ZWm0mbwPyQhtumFXGRxuuPE3X02wHHWOccsw0EIkRAgMBAAGjggMw MIIDLDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU ChLk2BI2q/MNyAENvDAf8ispXGEwKQYDVR0RBCIwIIIPKi5ub3ZhbWVkaWEuY29t gg1ub3ZhbWVkaWEuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90 cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZI AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDov L3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRz Lmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCC AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5 G9+443fNDsgN3BAAAAFoDjdIAQAABAMARzBFAiAH+Vj1MIHDCZCGOQQrGd6v/Hf5 chPyp8VHvv/1c2kk/wIhAPgub2K6FH5px3NwTAXkhZk1QGAhatQqZvggi4rktcZs AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFoDjdI5AAABAMA RzBFAiEA21t/zlMhCxR475ZapQmnhZ7uP9CwYazKKT5qp9wi1s0CIFYnlaQk9cIi vnHBjKoC2VApzWYiDgdL2mHMKQ2AsxwcAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC wQApBo2yCJo32RMAAAFoDjdJaAAABAMARzBFAiEAtGGLkUbn2mMNN2IGNR7rAHnC uS2Kw2Ml2JSzu3rmazUCIA3ir0ZjxBu2ndwjLF/EisLcIS6mdA2g3II45GrYuRPl MA0GCSqGSIb3DQEBCwUAA4IBAQCVoHNH5pwG75vV0zeW5GM0qnzfVrT2suLTftdx GJwtNm+FBlmag4cZFZi8gCFbWgSU4+GQm7XzIK3kD/z1Y7FgP0KsuFndyDH1kt4d D1zC9zxrhsdB4lXm4s5C60pRKMajB1sPV8pMWeP+pp9Wg09t5AKa4pN2pHKJG/AX 3KF0DomLt//hS3aTdJ6ylkPfKlgGNGGZjXUtjca54fMVxQLK2fQ/y4nDhoLFfAmK sihTgZrMilg8eHi7Y4jRf/U5ojDCUk33CxduK5byLKKyVG3jqcRWcUpaPelnOzkg aJbZWFTI4B4eYs5llrvetlLr1PvAfPbOXy5Xl6DIKc5K6Bnm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+7jUbsIQKiwB5OduDR/3 Zi/y2SFO6iRu01BxOq9wKSr0+8XJwpZpV9/VDAJp+6AfSv0z90G/9xCQvZ5Erc3W yqKhpLD7PSfmjOH4PjcViYPzZb9za9JVaXU6OMIuHPm/Gx9cZlmCH0r4biD2iIZN SAQTSmooSoMvivrJ5lJb6tH5MXXQ0FV0JgPxCRI/4rtNd0YK3/vEe7il7O0CvlVw giCH7kxK9DF31cedi2QFS63suhVREkQbGun3HkKgVaUeVrqP6KA9cGwLYWPNgreB KHZuSv2R7gecJBv4O7671sFtbhiJiFmr/OmSMIkvnnG+j8MLqeZAINPJbqb4xjZL E+r3IPPHSzk0W880czKP4tC5d4pQYlXord/+U8J7W/GHk8GjB446j8zt09s/1QEU VI2f8sJ1WdmtyogtlmN6+nhATfz3rodtP32uvBgU4tsZBaaVYL552gBEyXYgg82M zgMSSpnRv/vi982t5ZomXW1YvTtgAEIU9opah7fMERfnPy9F5fKMoY1OYIe3GCKF awjpySkCfMqnYxS8UjR/9cHY/o6fhy8LuW22s76hRmWggMByVS/+rQsx6DI6tTyb erjY0Xxv/BkHdbo0q4hHoaGscrVCpDOyOIyNyg5QET0VrdlabSZvA/JCG26YVcZH G648TdfTbAcdY5xyzDQQiRECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17917177844791115933198711083972997450 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.novamedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1026936129270302460816377252133783618233652833397941462875332321446561014084027543341294367171843464292321770364984492052100388626150134381580887236869264552706629795021914171142473074253802781480469186231819778926193801114513258826434006343285352857875911508823361951747809939180157832347965806980597211598322272206001218363900548295799459304358233299590826754730384764463816883424495596216960984297976480176791731264448312951931314887902925200077669746338615269869225706864221716102509217642401727316950217856310445777080988377640737966908762580714586949071562086124772177721427631771604297976632537521660720120662601347194112805839285427754539658161992414127281442640246137477361382816217005136096708622743675944498389898663389089037496898841947519975470848728769438405631045475632709019350408004394039275028501739703624708659007127179218450671178331689456136520482181527189795900062132524444983269607311915111946489937243098203362236495571978160398052282708589989146063864984267203763190408342720066300076432547271843852428880548871647495359333711487437827149257487317008500008817060625952278062488856150349906380821862227690862584391797667629508399241905807357200907171572393191800173509588162347511901758415071504365748629834001 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:10|false] ENUMERATED asn1: structure error: integer too large 0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamedia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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