*.novamedia.com

- Novamedia B.V. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:7a:b9:12:23:6b:d9:fb:7b:30:08:33:3d:78:b1:4a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Certificate had 3 embedded SCTs from distinct log IDs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Novamedia B.V.

Organization: Novamedia B.V.
Organization unit: Novamedia B.V.
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:7a:b9:12:23:6b:d9:fb:7b:30:08:33:3d:78:b1:4a
Serial Number (int): 17917177844791115933198711083972997450
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:12:e4:d8:12:36:ab:f3:0d:c8:01:0d:bc:30:1f:f2:2b:29:5c:61
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f2:17:2e:c1:f3:20:46:03:a0:8d:57:c4:2d:3f:ed:73:ee:f8:cd:a0
Fingerprint (sha256): 9a:db:99:4d:e5:f0:aa:2e:15:92:72:9e:18:db:08:8a:07:16:ac:97:3d:c5:3d:3d:1d:bc:3a:a3:ed:20:3b:ac

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.novamedia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.novamedia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.novamedia.com
novamedia.com

Other certificates including the domain name novamedia.com

(limited to 100 certificates)
fs.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com

Certificate

The complete raw certificate details for *.novamedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHoDCCBoigAwIBAgIQDXq5EiNr2ft7MAgzPXixSjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTAxMDIwMDAwMDBaFw0yMTA0MDIxMjAwMDBaMIGFMQswCQYDVQQGEwJOTDEW
MBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJQW1zdGVyZGFtMRcwFQYD
VQQKEw5Ob3ZhbWVkaWEgQi5WLjEXMBUGA1UECxMOTm92YW1lZGlhIEIuVi4xGDAW
BgNVBAMMDyoubm92YW1lZGlhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAPu41G7CECosAeTnbg0f92Yv8tkhTuokbtNQcTqvcCkq9PvFycKWaVff
1QwCafugH0r9M/dBv/cQkL2eRK3N1sqioaSw+z0n5ozh+D43FYmD82W/c2vSVWl1
OjjCLhz5vxsfXGZZgh9K+G4g9oiGTUgEE0pqKEqDL4r6yeZSW+rR+TF10NBVdCYD
8QkSP+K7TXdGCt/7xHu4peztAr5VcIIgh+5MSvQxd9XHnYtkBUut7LoVURJEGxrp
9x5CoFWlHla6j+igPXBsC2FjzYK3gSh2bkr9ke4HnCQb+Du+u9bBbW4YiYhZq/zp
kjCJL55xvo/DC6nmQCDTyW6m+MY2SxPq9yDzx0s5NFvPNHMyj+LQuXeKUGJV6K3f
/lPCe1vxh5PBoweOOo/M7dPbP9UBFFSNn/LCdVnZrcqILZZjevp4QE38966HbT99
rrwYFOLbGQWmlWC+edoARMl2IIPNjM4DEkqZ0b/74vfNreWaJl1tWL07YABCFPaK
Woe3zBEX5z8vReXyjKGNTmCHtxgihWsI6ckpAnzKp2MUvFI0f/XB2P6On4cvC7lt
trO+oUZloIDAclUv/q0LMegyOrU8m3q42NF8b/wZB3W6NKuIR6GhrHK1QqQzsjiM
jcoOUBE9Fa3ZWm0mbwPyQhtumFXGRxuuPE3X02wHHWOccsw0EIkRAgMBAAGjggMw
MIIDLDAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQU
ChLk2BI2q/MNyAENvDAf8ispXGEwKQYDVR0RBCIwIIIPKi5ub3ZhbWVkaWEuY29t
gg1ub3ZhbWVkaWEuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90
cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZI
AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDov
L3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRz
Lmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCC
AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFoDjdIAQAABAMARzBFAiAH+Vj1MIHDCZCGOQQrGd6v/Hf5
chPyp8VHvv/1c2kk/wIhAPgub2K6FH5px3NwTAXkhZk1QGAhatQqZvggi4rktcZs
AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFoDjdI5AAABAMA
RzBFAiEA21t/zlMhCxR475ZapQmnhZ7uP9CwYazKKT5qp9wi1s0CIFYnlaQk9cIi
vnHBjKoC2VApzWYiDgdL2mHMKQ2AsxwcAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFoDjdJaAAABAMARzBFAiEAtGGLkUbn2mMNN2IGNR7rAHnC
uS2Kw2Ml2JSzu3rmazUCIA3ir0ZjxBu2ndwjLF/EisLcIS6mdA2g3II45GrYuRPl
MA0GCSqGSIb3DQEBCwUAA4IBAQCVoHNH5pwG75vV0zeW5GM0qnzfVrT2suLTftdx
GJwtNm+FBlmag4cZFZi8gCFbWgSU4+GQm7XzIK3kD/z1Y7FgP0KsuFndyDH1kt4d
D1zC9zxrhsdB4lXm4s5C60pRKMajB1sPV8pMWeP+pp9Wg09t5AKa4pN2pHKJG/AX
3KF0DomLt//hS3aTdJ6ylkPfKlgGNGGZjXUtjca54fMVxQLK2fQ/y4nDhoLFfAmK
sihTgZrMilg8eHi7Y4jRf/U5ojDCUk33CxduK5byLKKyVG3jqcRWcUpaPelnOzkg
aJbZWFTI4B4eYs5llrvetlLr1PvAfPbOXy5Xl6DIKc5K6Bnm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17917177844791115933198711083972997450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novamedia B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.novamedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1026936129270302460816377252133783618233652833397941462875332321446561014084027543341294367171843464292321770364984492052100388626150134381580887236869264552706629795021914171142473074253802781480469186231819778926193801114513258826434006343285352857875911508823361951747809939180157832347965806980597211598322272206001218363900548295799459304358233299590826754730384764463816883424495596216960984297976480176791731264448312951931314887902925200077669746338615269869225706864221716102509217642401727316950217856310445777080988377640737966908762580714586949071562086124772177721427631771604297976632537521660720120662601347194112805839285427754539658161992414127281442640246137477361382816217005136096708622743675944498389898663389089037496898841947519975470848728769438405631045475632709019350408004394039275028501739703624708659007127179218450671178331689456136520482181527189795900062132524444983269607311915111946489937243098203362236495571978160398052282708589989146063864984267203763190408342720066300076432547271843852428880548871647495359333711487437827149257487317008500008817060625952278062488856150349906380821862227690862584391797667629508399241905807357200907171572393191800173509588162347511901758415071504365748629834001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:10|false] ENUMERATED asn1: structure error: integer too large
0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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