*.nine.com.au

- NINE ENTERTAINMENT CO. PTY LTD -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 1f:98:2e:7d:7a:cf:aa:06:f9:61:fd:8d:e2:78:7e:92 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NINE ENTERTAINMENT CO. PTY LTD

Organization: NINE ENTERTAINMENT CO. PTY LTD
Organization unit: Infrastructure
State / Province: New South Wales
Locality: Willoughby
Country: AU

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:98:2e:7d:7a:cf:aa:06:f9:61:fd:8d:e2:78:7e:92
Serial Number (int): 41996239924199989893253156756832943762
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 6b:67:1b:1c:59:1a:7f:a2:3b:40:17:3e:68:5f:f5:53:72:be:46:59
Fingerprint (sha256): 03:63:2e:be:a4:01:da:28:ad:92:96:52:09:32:d8:2b:57:c4:66:ee:64:4a:25:25:29:64:f1:35:01:64:1e:53

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.nine.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nine.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nine.com.au
nine.com.au

Other certificates including the domain name nine.com.au

(limited to 100 certificates)
nine.com.au
*.api.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
nine.com.au
int-pixel.nine.com.au
test.perso-data-api.nine.com.au
customer-test.ssl.fastly.net
uat.settings.nine.com.au
entertainment.nine.com.au
www.nine.com.au
*.9pub.io
nine.com.au
*.nine.com.au
f1.nine.com.au
as.adsoniris.com
elsewhere.nine.com.au
www.nine.com.au
*.nine.com.au
*.nine.com.au
pickle.nine.com.au
*.staging.origin.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.nine.com.au
wwos.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.networkservices.ninemsn.com.au
9.nine.com.au
nine.com.au
prev.login.nine.com.au
www.networkservices.ninemsn.com.au
akamaisecure7.qualtrics.com
dns-vetting1-jeffg-noah.map.fastly.net
saleshub.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
staging.fantasticfurniture.nine.com.au
nine.com.au
akamaisecure7.qualtrics.com
nine.com.au
kevincanwait.nine.com.au
somni.nine.com.au
nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
go.nine.com.au
ratings.nine.com.au
magellan.nine.com.au
int-adc.api.nine.com.au
*.api.nine.com.au
intranet.nine.com.au
www.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
www.wwos.nine.com.au
honey.nine.com.au
nine.com.au
nine.com.au
*.nine.com.au
somni.nine.com.au
staging.login.nine.com.au
*.api.nine.com.au
www.nine.com.au
images.passendo.com
9now.com.au
nine.com.au
quizapi.nine.com.au
*.9pub.io
asruns.nine.com.au
nine.com.au
www.nine.com.au
somni.nine.com.au
www.nine.com.au
uat.amp.nine.com.au
customer-test.ssl.fastly.net
somni.nine.com.au
*.9pub.io
akamaisecure7.qualtrics.com
logies.nine.com.au
www.celebrity.nine.com.au
misc.nine.com.au
style.nine.com.au
student.afr.com
rebel.wwos.nine.com.au
*.thefix.nine.com.au
www.networkservices.ninemsn.com.au
*.nine.com.au
*.staging.origin.nine.com.au
*.nine.com.au
www.networkservices.ninemsn.com.au
customer-test.ssl.fastly.net
9now.com.au
akamaisecure7.qualtrics.com
nine.com.au
www.celebrity.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
customer-test.ssl.fastly.net
www.nine.com.au
bookmarktowin.nine.com.au
wwos.nine.com.au
c.msn.com
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for *.nine.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/HLSLBXh5C7u54OZa7z
EMfdD9ZPl2U9zByEW5dfItRQeeLgaXuffWQnIB8gf+AfYYqLMQle6yMMh6Ei6NJj
5/WzBlpcAIRPPeqv+u56bteEKVKg+4J55ZFVVcGezVVfl1P+iflEDrJvcuztK07h
f9yfBSV6ZgKyZvRgQFimnILTo9+afZaZy3JZXUsBZdjwEkBVDe5Ag2UzZIEYtijQ
2/JPaSb33p5TWDF919RM1ZGC3UKy1iTpgMizmrYXi5sEjjQ8uTumJZKUdcdKT+eU
JDJJ0uCMAXhHRv7nsbyMgRzK48RTBs3Iu3Wf5JoLCCcYmJ4kJX+rw4ZLj1IkHxNr
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41996239924199989893253156756832943762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Willoughby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NINE ENTERTAINMENT CO. PTY LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nine.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27765421891254808647249627217139321306930814566330758145722020261978978956293555515642000294395709807290883375156722362306354688214294018721451150375194288466553381631270064595165790141635271544201148780984348560865960831910314952563888470088627864860873527787098933903697875605831948834281916759455321530532911701133104447318394386842216426325326413039179721533378219050238599522178803413454035046983790685406302309866062927495790967581193586586827926469628288794066276630141218960356470504482535281725681143183032970247743978399325223466707518960944688452922109880464687175468959066941979429472863551120295352036273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nine.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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