www.networkservices.ninemsn.com.au

- Nine Digital Pty Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:a7:58:99:0a:5f:be:cc:06:a0:58:dd:fc:95:3b:a7 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nine Digital Pty Limited

Organization: Nine Digital Pty Limited
State / Province: New South Wales
Locality: North Sydney
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:a7:58:99:0a:5f:be:cc:06:a0:58:dd:fc:95:3b:a7
Serial Number (int): 14161190510389060036765478659254729639
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:d5:22:4e:3d:31:72:81:3f:c7:fb:9a:98:57:76:72:cb:43:eb:4f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 41:5d:d3:71:2b:f7:f9:a2:24:68:74:38:1b:0c:c6:02:e2:ca:e0:a4
Fingerprint (sha256): aa:5c:31:0c:7e:26:a6:b4:cc:53:2a:b0:3b:c0:c6:98:19:17:bb:be:5c:56:96:6e:3c:09:b0:fe:dc:2f:c5:d9

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.networkservices.ninemsn.com.au

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.networkservices.ninemsn.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.networkservices.ninemsn.com.au
staging.lifestyles.nine.com.au
staging.login.nine.com.au
staging.networkservices.nine.com.au
staging.nine.com.au
staging.pickle.nine.com.au
staging.ps3.9now.com.au
staging.ps4.9now.com.au
staging.samsung.9now.com.au
staging.samsung.ctv.9now.com.au
staging.settings.nine.com.au
staging.sony.9now.com.au
staging.telstratv.9now.com.au
staging.thefix.nine.com.au
staging.travel.nine.com.au
staging.tv-api.9now.com.au
staging.user-api.9now.com.au
staging.wwos.nine.com.au
staging.wwos.ninemsn.com.au
staging.yourtv.com.au
telstratv.9now.com.au
thefix.nine.com.au
theforceservice.mi9.com.au
travel.nine.com.au
tv-api.9now.com.au
uat.9now.com.au
uat.login.nine.com.au
uat.samsung.9now.com.au
uat.settings.nine.com.au
uat.tv-api.9now.com.au
uat.user-api.9now.com.au
user-api.9now.com.au
vms.mi9cdn.com
wwos.nine.com.au
wwos.ninemsn.com.au
www.9nation.com.au
www.9news.com.au
www.9now.com.au
www.nine.com.au
www.yourtv.com.au
9nation.com.au
amp.9news.com.au
api.sso.nine.com.au
appletv.9now.com.au
chromecast-caf.9now.com.au
chromecast.9now.com.au
coach.nine.com.au
competition.nine.com.au
content.api.ninemsn.com.au
ctv.9now.com.au
elsewhere.nine.com.au
hbbtv.9now.com.au
hisense.ctv.9now.com.au
homes.nine.com.au
honey.nine.com.au
identity.nine.com.au
imageresizer.staging.static9.net.au
imageresizer.static9.net.au
kitchen.nine.com.au
lg.9now.com.au
lg.ctv.9now.com.au
lifestyles.nine.com.au
login.9now.com.au
login.nine.com.au
login.staging.9now.com.au
login.uat.9now.com.au
mi9observatory.mi9cdn.com
networkservices.nine.com.au
networkservices.ninemsn.com.au
news-native-api.nine.com.au
pickle.nine.com.au
ps3.9now.com.au
ps4.9now.com.au
samsung.9now.com.au
samsung.ctv.9now.com.au
settings.nine.com.au
share.9cdn.net
sony.9now.com.au
stag.hbbtv.9now.com.au
staging.9news.com.au
staging.9now.com.au
staging.api.sso.nine.com.au
staging.appletv.9now.com.au
staging.chromecast-caf.9now.com.au
staging.chromecast.9now.com.au
staging.coach.nine.com.au
staging.competition.nine.com.au
staging.continue-watching-api.9now.com.au
staging.ctv.9now.com.au
staging.elsewhere.nine.com.au
staging.hisense.ctv.9now.com.au
staging.homes.nine.com.au
staging.honey.nine.com.au
staging.identity.nine.com.au
staging.imageresizer.static9.net.au
staging.kitchen.nine.com.au
staging.lg.9now.com.au
staging.lg.ctv.9now.com.au

Other certificates including the domain name ninemsn.com.au

(limited to 100 certificates)
networkservices.origin.ninemsn.com.au
showpony.news.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.wideworldofsports.ninemsn.com.au
www.networkservices.ninemsn.com.au
ninemsn.com.au
9now.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
sharepoint.ninemsn.com.au
webmail.ninemsn.com.au
favouritethings.news.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
lyncweb.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
adc.api.ninemsn.com.au
*.ninemsn.com.au
nine.com.au
newsalerts.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.carpoint.ninemsn.com.au
ultimateislandescape.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
godo.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.ninemsn.com.au
*.carpoint.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
miamiswim.ninemsn.com.au
sip.ninemsn.com.au
nowornever.ninemsn.com.au
alerts.news.ninemsn.com.au
godo.ninemsn.com.au
lyncweb.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
*.ninemsn.com.au
9now.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
webmail.ninemsn.com.au
www.networkservices.ninemsn.com.au
entertainmentalerts.news.ninemsn.com.au
nine.com.au
sip.ninemsn.com.au
nine.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
nine.com.au
*.ninemsn.com.au
*.sbkprod.ninemsn.com.au
www.networkservices.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
lsaccess.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
newsalerts.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.carpoint.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
9now.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
motoring.ninemsn.com.au

Certificate

The complete raw certificate details for www.networkservices.ninemsn.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nN36hIMz50tf3d3hkgL
FzHXafnKwz8dmOEy0pGeG/oBX+Ginp8wiqYo21q5d7tORVc19NOMohkxI/eR1ypE
B3h9hjC3XJhvrBjKkVYzcszBfZki4qqLYHPO5aUj0/XK6ZOVSDz4wMWTRTT6IOBA
ZPNeVvjAt+VhOkAG2anhAltObKMrefSaGjJm/+Z0ZL6h2leZYCssj6kEsdxfH0Bj
gstMhEdGHZSO0zKoud8fPVe+qeEzS+k2kaPSZReKrLujpHj/V8u8ZgfImurW6WBo
zOOPIn+qh+rJFdkoV62l/21soX4QZ2ZuiL/GhjtHgpttwWXfy4+ErkEo2hbTwTcm
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14161190510389060036765478659254729639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nine Digital Pty Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.networkservices.ninemsn.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26566983640665296832880843597526932855499381766411713384576438545025503631711625342485723524206668992602047741187300414151315181567666521701969218798400218498855857828908618935121072467700225931032021133735521361711817828745631291396520498912463141243701246250213681796650454748008730447777019035850379611986922105982388694690278243020052243968096686953319528959649580332915767557776625369880797411452262266178129480951083995475432159790612304535025860865752146478492639374114465312058817200621603820595301922280856572315010350378755796183230344498666654411758906685173162138441849936478782187058942439167795842721333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7d5224e3d3172813fc7fb9a98577672cb43eb4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.networkservices.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lifestyles.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.networkservices.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pickle.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ps3.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ps4.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.samsung.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sony.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.telstratv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.thefix.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.travel.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wwos.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wwos.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstratv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefix.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theforceservice.mi9.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.tv-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwos.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwos.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9nation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9nation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sso.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appletv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast-caf.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competition.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.api.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsewhere.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbtv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisense.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homes.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honey.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageresizer.staging.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageresizer.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestyles.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.staging.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.uat.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi9observatory.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkservices.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkservices.ninemsn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-native-api.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickle.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps3.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps4.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settings.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.9cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sony.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hbbtv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.sso.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.appletv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chromecast-caf.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.chromecast.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.coach.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.competition.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.continue-watching-api.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.elsewhere.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.hisense.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.homes.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.honey.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.identity.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.imageresizer.static9.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.kitchen.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lg.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lg.ctv.9now.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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