support.fairfaxmedia.com.au

- FAIRFAX MEDIA LIMITED -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 4f:a1:67:e6:79:65:24:b3:89:f8:f2:73:d1:54:f9:e9 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FAIRFAX MEDIA LIMITED

Organization: FAIRFAX MEDIA LIMITED
Organization unit: JOHN FAIRFAX HOLDINGS LIMITED
State / Province: New South Wales
Locality: Pyrmont
Country: AU

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:a1:67:e6:79:65:24:b3:89:f8:f2:73:d1:54:f9:e9
Serial Number (int): 105847078809468976623711846873391495657
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 48:2b:87:55:2a:73:ea:c7:a0:ba:f9:04:df:0e:a6:27:58:6d:7d:ba
Fingerprint (sha256): 02:24:f3:cc:17:9c:6b:5e:cb:f5:ef:c8:c0:1a:d8:87:cb:bb:76:dd:cb:4d:dc:8d:33:95:a7:b4:64:ce:f5:3c

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate support.fairfaxmedia.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.fairfaxmedia.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.fairfaxmedia.com.au

Other certificates including the domain name fairfaxmedia.com.au

(limited to 100 certificates)
5748809699164160-fe2.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5724822843686912-fe1.pantheonsite.io
engineering.fairfaxmedia.com.au
5748809699164160-fe2.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
nine.com.au
pxpool.meet.fairfaxmedia.com.au
support.fairfaxmedia.com.au
as.adsoniris.com
akamai-san8.exacttarget.com
support.fairfaxmedia.com.au
nine.com.au
5748809699164160-fe2.pantheonsite.io
5667039158992896-fe3.pantheonsite.io
www.fairfaxmedia.com.au
5748809699164160-fe2.pantheonsite.io
5724822843686912-fe1.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5724822843686912-fe1.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
vpn2.fairfaxmedia.com.au
fairfaxmediacareers.com
www.fairfaxmedia.com.au
5723088213770240-fe3.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
fairfaxmedia.com.au
5748809699164160-fe2.pantheonsite.io
sip.nexonhosted.com.au
5724822843686912-fe1.pantheonsite.io
www.fairfaxmedia.com.au
5724822843686912-fe1.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
nine.com.au
akamai-san8.exacttarget.com
fairfaxmedia.com.au
images.passendo.com
5724822843686912-fe1.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
fairfaxmedia.com.au
fairfaxmediacareers.com
5724822843686912-fe1.pantheonsite.io
sip.nexonhosted.com.au
5724822843686912-fe1.pantheonsite.io
sip.nexonhosted.com.au
engineering.fairfaxmedia.com.au
5723088213770240-fe3.pantheonsite.io
alerts.services.fairfaxmedia.com.au
5724822843686912-fe1.pantheonsite.io
*.thestore.com.au
advertise.fairfaxmedia.com.au
nine.com.au
5748809699164160-fe2.pantheonsite.io
akamai-san8.exacttarget.com
5748809699164160-fe2.pantheonsite.io
support.fairfaxmedia.com.au
5748809699164160-fe2.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
sip.nexonhosted.com.au
5724822843686912-fe1.pantheonsite.io
b2bapiadvertiserspongrass.fairfaxmedia.com.au
*.kubernetes-production.f2.com.au
images.passendo.com
5724822843686912-fe1.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
afr.com
images.passendo.com
sip.nexonhosted.com.au
engineering.fairfaxmedia.com.au
www.fairfaxmedia.com.au
sip.nexonhosted.com.au
5667039158992896-fe3.pantheonsite.io
sip.nexonhosted.com.au
nine.com.au
5724822843686912-fe1.pantheonsite.io
5724822843686912-fe1.pantheonsite.io
5748809699164160-fe2.pantheonsite.io
alerts.services.fairfaxmedia.com.au
www.fairfaxmedia.com.au
5748809699164160-fe2.pantheonsite.io
fairfaxmedia.com.au
*.thestore.com.au
*.fairfaxmedia.com.au
images.passendo.com
www.fairfaxmedia.com.au
5748809699164160-fe2.pantheonsite.io
*.fairfaxmedia.com.au
sip.nexonhosted.com.au
*.fairfaxmedia.com.au
sip.nexonhosted.com.au
www.fairfaxmedia.com.au
5723088213770240-fe3.pantheonsite.io
5667039158992896-fe3.pantheonsite.io
5724822843686912-fe1.pantheonsite.io
sip.nexonhosted.com.au
5748809699164160-fe2.pantheonsite.io
nine.com.au

Certificate

The complete raw certificate details for support.fairfaxmedia.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105847078809468976623711846873391495657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Pyrmont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'FAIRFAX MEDIA LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'JOHN FAIRFAX HOLDINGS  LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'support.fairfaxmedia.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834315662234805604731072660177352362119461354602408987069168557750929933673711087242788394024253891818697389005260186834592214114515397483805329006069673485752884383370761883213365244502277870309482064669470856924317169560431481616347792960488956297720118374769759150722352131523137135736881735050809387848246192616562571357200506919417939821072571451198689168775943783117689861919785207802189719940620528315649122102571453135182756095684067031729066989243824986964547176039423865274203590047748300495665644863981703889711995477330459532885011348385299003966536510916867515806983332255612167786080706253803302818919231251797688153626977636247863900443271949918311254935748833356267592002337565269623551548882846592672848534951996472839889082829972146535542621422501333255475567111649118021341173601944155834379718648145646004656244620663429385285419131935427712413428282740264787939561880506866608839259705303988596759245601426443479598272244998132866397451101193124875001588282986856731856938777865002912261987431406228122710704689230198863249443857459504769667198736354497729138810269903328750917502638144943689968519570050915483621956863451768762509522686003234331347209900665692777915110982257238312976400853381744001915926699833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fairfaxmedia.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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