*.news.net.au

- News limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:49:51:13:7f:b4:7f:0d:2d:11:fd:af:2a:4e:95:f8 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

News limited

Organization: News limited
Organization unit: IT
State / Province: New South Wales
Locality: Surry Hills
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:49:51:13:7f:b4:7f:0d:2d:11:fd:af:2a:4e:95:f8
Serial Number (int): 16331418040127819326495275077828777464
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0b:fe:2f:4c:12:c3:23:55:9e:fa:37:e7:aa:c5:b0:77:fe:61:fb:37
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a4:bd:f8:5b:14:55:19:91:d9:f6:55:33:cd:bd:73:f7:ff:ad:44:49
Fingerprint (sha256): 02:97:69:e5:14:a8:7a:05:e1:1b:3e:d4:90:46:80:b9:6c:f3:2e:3b:73:b1:a6:bc:01:5c:63:5f:f2:60:c9:bb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.news.net.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.news.net.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.news.net.au
news.net.au

Other certificates including the domain name news.net.au

(limited to 100 certificates)
app1a-status.outreach.io
app1a-status.outreach.io
*.news.net.au
news.com.au
app1a-status.outreach.io
app1a-status.outreach.io
app1a-status.outreach.io
at4armed.cloudwi.re
news.com.au
news.com.au
readanother.page
appian.app
app1a-status.outreach.io
resources-gcdn.news.net.au
news.com.au
app1a-status.outreach.io
news.com.au
dashboard.news.net.au
*.kurator.kuradev.cp1.news.com.au
app1a-status.outreach.io
news.com.au
swechchha.in
www.orator.app
circulation.news.net.au
app1a-status.outreach.io
beta.verity.news.net.au
owa.news.net.au
resources-gcdn.news.net.au
app1a-status.outreach.io
news.com.au
test-boomirt.news.net.au
news.com.au
www.breydonbrennan.com
app1a-status.outreach.io
news.com.au
ukjdm.co.uk
app1a-status.outreach.io
app1a-status.outreach.io
app1a-status.outreach.io
app1a-status.outreach.io
news.com.au
news.com.au
app1a-status.outreach.io
app1a-status.outreach.io
www.alamkrutha.com
wiki.news.net.au
app1a-status.outreach.io
at4armed.cloudwi.re
app1a-status.outreach.io
addrop.news.net.au
fed3.news.net.au
app1a-status.outreach.io
news.com.au
crv.myet.com
app1a-status.outreach.io
app1a-status.outreach.io
subscriber.news.net.au
app1a-status.outreach.io
wiki-uat.news.com.au
*.news.net.au
dev-resources-gcdn.news.net.au
news.com.au
app1a-status.outreach.io
app1a-status.outreach.io
news.com.au
news.com.au
news.com.au
at4armed.cloudwi.re
verity.news.net.au
34-36-57-135.nip.io
news.com.au
news.com.au
news.com.au
app1a-status.outreach.io
addrop.news.net.au
lcsf.turnosweb.app
fed3.news.net.au
app1a-status.outreach.io
kurator.news.net.au
app1a-status.outreach.io
resources-gcdn.news.net.au
www.alamkrutha.com
radar-demo.anoff.io
35-244-241-239.nip.io
pictures.akily.app
news.com.au
app1a-status.outreach.io
app1a-status.outreach.io
resources-gcdn.news.net.au
*.news.net.au
*.subscriber.news.net.au
app1a-status.outreach.io
*.news.net.au
app1a-status.outreach.io
app1a-status.outreach.io
app1a-status.outreach.io
chosen.bluerunspirits.com
app1a-status.outreach.io
app1a-status.outreach.io
news.com.au

Certificate

The complete raw certificate details for *.news.net.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnkKswqs51q6TN7f1Xom
ZpH5YTb68rurS0AUHVFtsIP1+UCNumcwqvVnGe5mEQtkAJO03q12vAdANGbgs0Iq
R0dZT+gV9IWRD4mcffnk4E8EpXCK8diV9WGiZCsAHTh6jAGQl19VajtFh3P7Cl08
ufh+39h4ZuBSFfnxYaMlFSHDojRJrhAqbhuoDeeMv7XO9wMm2Pzm8LmL90EsI6qK
J7KZnVXSBu1hNuo2HbOtOeg3laIVLFZYfbSnU5Fkh270turQX1qUJDjstGpmVToP
/Ap8c/P+51QcdXdkfRyPdYZYfMOPX26w7nYKWcMZGr0KDgUZTI9+eJjC+Acrni5V
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16331418040127819326495275077828777464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Surry Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'News limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.news.net.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20005340118085008970524673683839220925683019807383484018473051955992843385168669243526057475706458474253085806722869389709645453867119070310125223986735910673872018333045632062291111485213547848306778768871125878974190528539194302629795773680876448858932145196245487294585649158758410474620220392044519498669011390132053710507262634492147207129923168664323601735990855038318910309538256546892355178504636148974196759639081749550962908148594174694092688903052186587819134585564196450297116432453659682437063276786848601807562592672170394981228073881614360765129744947698798401586601565289108692710339299564555149923651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bfe2f4c12c323559efa37e7aac5b077fe61fb37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.net.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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