travelandleisure.fairfax.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:fd:9d:45:ba:c3:24:0f:e5:7f:e4:d8:07:b6:c5:d4:32:2c was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=travelandleisure.fairfax.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fd:9d:45:ba:c3:24:0f:e5:7f:e4:d8:07:b6:c5:d4:32:2c
Serial Number (int): 347637347478088480538771998840414664929836
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:fc:7f:6f:c2:79:6e:83:1a:15:cf:5b:02:d2:80:00:58:07:8b:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:62:d5:0e:83:21:98:70:22:6b:34:d3:e7:8d:bc:73:34:59:01:f7
Fingerprint (sha256): 07:30:29:24:e6:6c:74:d9:b7:1b:2c:2f:37:aa:4a:aa:bf:88:5f:3f:7b:c8:7d:3c:71:3c:d4:c5:ab:1a:23:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate travelandleisure.fairfax.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for travelandleisure.fairfax.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

travelandleisure.fairfax.com.au

Other certificates including the domain name fairfax.com.au

(limited to 100 certificates)
membership.fairfax.com.au
subscribers.theage.com.au
nine.com.au
nine.com.au
travelandleisure.fairfax.com.au
vpn.fairfax.com.au
fairfax.com.au
www.fairfaxmedia.com.au
nine.com.au
fairfaxmedia.com.au
promotions.fairfax.com.au
surveys.fairfax.com.au
subscriptions.fairfax.com.au
competitions.fairfax.com.au
nine.com.au
www.stuff.co.nz
*.kubernetes-production.f2.com.au
afr.com
www.fairfaxmedia.com.au
nine.com.au
subscribers.theage.com.au
subscribers.theage.com.au
entities.fairfax.com.au
fairfaxmedia.com.au
swagger-ui.fairfax.com.au
*.fairfaxmedia.com.au
newsstore.fairfax.com.au
connect.fairfax.com.au
newsstore.fairfax.com.au
subscribers.theage.com.au
nine.com.au
www.fairfaxmedia.com.au
austcommunitymedia.com.au
austereo.fairfax.com.au
fairfaxmedia.com.au
agtrader.com.au
nine.com.au
subscribers.theage.com.au
adonline.com.au
nine.com.au
austereo.fairfax.com.au
int.ws.payment.fairfax.com.au
afr.com
austcommunitymedia.com.au
fairfax.com.au
api-gateway.fairfax.com.au
securedrop.fairfax.com.au
fairfax.com.au
*.fairfaxmedia.com.au
www.connect.fairfax.com.au
subscriptions.fairfax.com.au
api-gateway.fairfax.com.au
www.fairfaxmedia.com.au
nine.com.au
fairfax.com.au
fairfaxmedia.com.au
subscribers.theage.com.au
fairfax.com.au
fairfax.com.au
selfservice.classifieds.fairfax.com.au
fairfaxmedia.com.au
competitions.fairfax.com.au
*.fairfaxmedia.com.au
competitions.fairfax.com.au
newsstore.fairfax.com.au
fairfax.com.au
*.fairfaxmedia.com.au
fairfaxmedia.com.au
afr.com
ws.payment.fairfax.com.au
*.fairfaxmedia.com.au
fairfax.com.au
subscribe.fairfax.com.au
afr.com
ws.payment.fairfax.com.au
austcommunitymedia.com.au
swagger-ui.fairfax.com.au
*.fairfaxmedia.com.au
agtrader.com.au
adonline.com.au
fairfax.com.au
fairfax.com.au
fairfax.com.au
*.fairfax.com.au
afr.com
www.stuff.co.nz
fairfaxmedia.com.au
competitions.fairfax.com.au
gf-capi-middleman.fairfax.com.au
*.fairfaxmedia.com.au
fairfax.com.au
www.fairfax.com.au
*.fairfaxmedia.com.au
subscribers.theage.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
ads.fairfax.com.au
capi-publish-queries-save.fairfax.com.au
subscribers.theage.com.au
api-gateway.fairfax.com.au

Certificate

The complete raw certificate details for travelandleisure.fairfax.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISA/2dRbrDJA/lf+TYB7bF1DIsMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MTkyMDUwMjFaFw0yNDA3MTgyMDUwMjBaMCoxKDAmBgNVBAMT
H3RyYXZlbGFuZGxlaXN1cmUuZmFpcmZheC5jb20uYXUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC9olEGLEdUrB/DsetmKH44pNEZnCDtYYQx7rllA1fu
o2k6bzyxd7+G8LQwFAsCr2FCw28oWtvPHm0GWWqRcohwqIWsgGFNtmjZlzKF3oDz
4gvjSEXjvfA87bsILLfeaX/VtbECJxp49oLiPpUznmUzN9YvNHCzBwuiJ02YWO6G
hYGy5EsWncCsFEsCjaM4AEAyfecOxDswArqewDfsWQv/COGu8aoVOFJ3A/UycKNY
cHRnDUGsMtOgLIhPxRq8GRfX7xYfHY3c/HTegDW3VraFPk0S4kgdHrzHcXJlqBUD
EBk4dVMMkgZkTWOaL7BG14WtHt/Hg41ywTqzojXR3isHAgMBAAGjggIhMIICHTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFHL8f2/CeW6DGhXPWwLSgABYB4urMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMCoGA1UdEQQjMCGCH3RyYXZlbGFuZGxlaXN1cmUu
ZmFpcmZheC5jb20uYXUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAA
AY74VsrzAAAEAwBHMEUCIFP8W/X4jU+yQCTsPMgQvTmzVW+Xgg/5cuE3bstnMO18
AiEAwFNzQg1mBz1UAIgFGlBN/UBqaoFjk2ZDE8JFp7iL9QgAdgDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAY74VsrHAAAEAwBHMEUCIBnzNZKy8CcL
JLGjbe3L2vS6PPt9ixJeZo0jNoAk/0WJAiEA5pChPN7X9NmVFiMVAHhSEbJm2GTM
CGHWxbxipYO1M1QwDQYJKoZIhvcNAQELBQADggEBAEAi8wCqLgZQdluqhfWVEDuI
QLwybLcvDrcUIsYxQP9pNS2NH7fkVYQEgXQ1yKF4f5fMSMNCV/pEF5a5k6qkc+pe
g3+kPlKwIHS1Z/hKxfNzEs2rl0mT+4O5K068IY4b9wuWbEv5/kK/xWntSAkEtN1T
4XseUlSX7oa5SYFeYrgezwQ4BDZ3T2LuUZEjNCGflv2Bj9tDmi8S6zsXseD+fnzf
61rvsfcIXRPnSJn5Lf1IZVBsYc1WvXAo6c+5EDP548dO+oxfZPOpzdXHZmgy5wA6
hGtFwgCBs4YYshYJoWBkdB3NcG84Vf7NvACJ0hd8azwV4CHNEXCVUhuPzCx7uw4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaJRBixHVKwfw7HrZih+
OKTRGZwg7WGEMe65ZQNX7qNpOm88sXe/hvC0MBQLAq9hQsNvKFrbzx5tBllqkXKI
cKiFrIBhTbZo2Zcyhd6A8+IL40hF473wPO27CCy33ml/1bWxAicaePaC4j6VM55l
MzfWLzRwswcLoidNmFjuhoWBsuRLFp3ArBRLAo2jOABAMn3nDsQ7MAK6nsA37FkL
/wjhrvGqFThSdwP1MnCjWHB0Zw1BrDLToCyIT8UavBkX1+8WHx2N3Px03oA1t1a2
hT5NEuJIHR68x3FyZagVAxAZOHVTDJIGZE1jmi+wRteFrR7fx4ONcsE6s6I10d4r
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347637347478088480538771998840414664929836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 20:50:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 20:50:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'travelandleisure.fairfax.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23939080888131227501022569259288218184310082354878302734254537412013862460003415595557512740104634085119369305695083618566977690767086211075683017694072764488825582790495565094251278034166938494523203622294538695680747182564347057276767000993941448904135641466520269439607596562928754846046404820533632122627912862362590134499593154566734868255896661873186500828213387879990198096794134663103632841828360418038470235246986979350279619993993344984127356098320323434441427498834164355478662748979805697377698633314565239496385443929675963365938928776669988483569146726153553883539156736113497782299596785459575954221831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72fc7f6fc2796e831a15cf5b02d2800058078bab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelandleisure.fairfax.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef856caf30000040300473045022053fc5bf5f88d4fb24024ec3cc810bd39b3556f97820ff972e1376ecb6730ed7c022100c05373420d66073d540088051a504dfd406a6a816393664313c245a7b88bf508007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ef856cac70000040300473045022019f33592b2f0270b24b1a36dedcbdaf4ba3cfb7d8b125e668d23368024ff4589022100e690a13cded7f4d99516231500785211b266d864cc0861d6c5bc62a583b53354
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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