ultimate-footy.smh.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:75:ba:4c:df:9c:07:e2:b4:9f:7d:9e:ae:ea:b5:35 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ultimate-footy.smh.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:75:ba:4c:df:9c:07:e2:b4:9f:7d:9e:ae:ea:b5:35
Serial Number (int): 17891241296382898331640703943615100213
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:e1:91:58:b2:69:c1:62:f8:58:c0:83:66:84:60:38:84:32:c6:2a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a9:24:05:4a:55:e0:4c:61:93:c2:d8:42:77:6e:18:ed:fc:7f:a6:20
Fingerprint (sha256): 02:d0:d8:c4:c1:8f:92:20:63:71:4a:d7:57:52:ed:1c:fd:df:22:6a:56:21:38:82:34:fd:f8:e3:25:b1:b3:8a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ultimate-footy.smh.com.au

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ultimate-footy.smh.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ultimate-footy.smh.com.au
ultimate-footy.theage.com.au
ultimate-footy.canberratimes.com.au
ultimate-footy.watoday.com.au
ultimate-footy.brisbanetimes.com.au

Other certificates including the domain name smh.com.au

(limited to 100 certificates)
5691726094139392-fe2.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
b2.shared.global.fastly.net
subscribers.theage.com.au
5699942098141184-fe2.pantheonsite.io
b2.shared.global.fastly.net
*.9pub.io
nine.com.au
5741384237580288-fe1.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
b2.shared.global.fastly.net
5665054615666688-fe4.pantheonsite.io
b2.shared.global.fastly.net
2021convention.ncte.org
ultimate-footy.smh.com.au
academic.gsm.cornell.edu
5665054615666688-fe4.pantheonsite.io
support.fairfaxmedia.com.au
nine.com.au
5696068708728832-fe4.pantheonsite.io
5691726094139392-fe2.pantheonsite.io
academic.gsm.cornell.edu
5661601461960704-fe3.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
tertiary-choices-2017-stage.smh.com.au
5694015311708160-fe1.pantheonsite.io
akamaisecure7.qualtrics.com
b2.shared.global.fastly.net
5680534013345792-fe1.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
akamaisecure7.qualtrics.com
5758401703313408-fe2.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
5758401703313408-fe2.pantheonsite.io
b2.shared.global.fastly.net
5712536552865792-fe3.pantheonsite.io
tertiary-choices-2017-stage.smh.com.au
5661133578960896-fe3.pantheonsite.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
5758401703313408-fe2.pantheonsite.io
communityadvancementfirm.com
5694015311708160-fe1.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
5665054615666688-fe4.pantheonsite.io
5694015311708160-fe1.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
5719378301550592-fe3.pantheonsite.io
www.fairfaxmedia.com.au
markets.smh.com.au
b2.shared.global.fastly.net
5691726094139392-fe2.pantheonsite.io
nine.com.au
5661133578960896-fe3.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
fairfaxmedia.com.au
5699942098141184-fe2.pantheonsite.io
5758401703313408-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
*.9pub.io
news.smh.com.au
5719378301550592-fe3.pantheonsite.io
5691726094139392-fe2.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
b2.shared.global.fastly.net
*.9pub.io
akamaisecure7.qualtrics.com
5699942098141184-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5699942098141184-fe2.pantheonsite.io
5699942098141184-fe2.pantheonsite.io
5719378301550592-fe3.pantheonsite.io
student.afr.com
5699942098141184-fe2.pantheonsite.io
b2.shared.global.fastly.net
5758401703313408-fe2.pantheonsite.io
5680534013345792-fe1.pantheonsite.io
5699942098141184-fe2.pantheonsite.io
5661133578960896-fe3.pantheonsite.io
insurance.smh.com.au
b2.shared.global.fastly.net
5680534013345792-fe1.pantheonsite.io
ctl.upenn.dnsrakuda.com
staging.wizardofodds.com.au
5665054615666688-fe4.pantheonsite.io
akamaisecure7.qualtrics.com
nine.com.au
academic.gsm.cornell.edu
5696068708728832-fe4.pantheonsite.io
5691726094139392-fe2.pantheonsite.io
asikmpo.discoverlosangeles.com
5741384237580288-fe1.pantheonsite.io

Certificate

The complete raw certificate details for ultimate-footy.smh.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiyCWzbuTUuLMn7A/P8f
xgwMxhlPQtKyrhfo4V7At3rLNXTomP5b9GClj5rWPZzL3YCvlHGrTdkYrueynBwv
j3FeT+vddPE2QaV3VPEoTmX/KVM83fRl0qcQh+Kb5tsX3FMkth8vvHv46Z9JvHxm
Os4F7iRHbtKXndOHoCfIkubCUTbBoCQ12inycFhK0rbYne1b46xK+S2Wiw9d2qhw
O2JIt7SQ9wVzNeRHHhccuDsfFPGYW9FY2hCd7fXCAGb0mBaTm7L2nM2UXZSB7W3v
TBql7KVULWE3mMbeQl2yuQYA96aiq9E2qM9bsrr26KUIC2voTQ6cyRtI2oUa2TmB
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17891241296382898331640703943615100213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultimate-footy.smh.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25522085909820568610089005581420564514527737851949821995224871204475410491103910807867186482089088071344860710951230933157792452195705131522437176975587941190696249502763923278991759736160083759455486700605970006914438018956124413781949950091028270795601691953873634950060195714250863165914385998301953208242248230132050673205044330104683590785090564800369014836944767021702520487387471874102685896454218331869916877880918336007257489543387757632560621277095168935977884999965369759289285941447871666719141240226200468795317154911104328018864868340161487822639759084454726218307895379050763439649898890722354975572347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51e19158b269c162f858c083668460388432c62a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimate-footy.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimate-footy.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimate-footy.canberratimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimate-footy.watoday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimate-footy.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048c04b3622b0e141e6cd41ec56616f7dae461ae86bb70f1d0eda1fbde4ac041adebb008bdc93f6279911734ed7f44a49b2cec6ba355935d9cb85dcb0d4e8ab38813d5a280e3d247b0053733e7eeb92850bb71983d4fdb2ecf6405349047288c7d3be0466a4d4784562d7cc8998be627e6e8f0998aa15e55fb1aa50d5505f8da4c330a26a7368bc6d26f8f9c2812187a43dd215d8f7a70a035f44bb2bd0f1be832d48add4dfd34513e73181e87629fe4e867d0e41f4281eb3fbae3d2c21ad15753bbf4db84c5c823cc46e124c83bbd436b4e8e5acaf3bb18349d7fb3a2005564a7ca8d64fc7e9b1c0b7106486d7c5a06d8a9727f23124a33a05ab88c5a8756881