subscriptions.news.com.au

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:a6:fd:ec:26:44:f3:d1:d5:33:7d:7e:93:fa:16:b3 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscriptions.news.com.au

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a6:fd:ec:26:44:f3:d1:d5:33:7d:7e:93:fa:16:b3
Serial Number (int): 20805491374610385453626615886801147571
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c5:9b:ed:d9:d1:d8:ec:75:b9:26:a6:a8:af:d3:30:e2:98:d7:31:24
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 50:e1:5c:0e:06:e9:e5:e7:3f:22:94:ef:d3:f1:79:cf:6b:97:38:59
Fingerprint (sha256): 07:77:2a:14:6a:48:b9:43:2d:99:86:70:64:51:f1:01:ec:3a:5d:d5:2c:7b:e6:ae:66:29:a6:ea:f0:b5:0c:87

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate subscriptions.news.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscriptions.news.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscriptions.news.com.au
*.subscriptions.news.com.au

Other certificates including the domain name news.com.au

(limited to 100 certificates)
sit.sopsapi.news.com.au
*.talk.kuraprod.cp1.news.com.au
www.stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
www.stacksocial.com
idpdev3.news.com.au
stacksocial.com
sslcam.newsdev.com.au
nlm.uatproxy.news.com.au
news.com.au
stacksocial.com
sslcam.newsdev.com.au
news.com.au
akamai-san174.exacttarget.com
stacksocial.com
stacksocial.com
stacksocial.com
news.com.au
stacksocial.com
www.stacksocial.com
uat.subscriptions.news.com.au
news.com.au
chrome-dot-gng.news.com.au
news.com.au
news.com.au
api.edtech.news.com.au
www.stacksocial.com
stacksocial.com
traktr.news.com.au
news.com.au
sslcam.newsdev.com.au
subscriptions.news.com.au
support.news.com.au
sit.commerceapi.news.com.au
stacksocial.com
news.com.au
*.dcs.news.com.au
amp.news.com.au
stacksocial.com
news.com.au
subscriptions.news.com.au
stacksocial.com
auth-connect.news.com.au
newsletters.news.com.au
news.com.au
ausbots.fbbot.news.com.au
news.com.au
news.com.au
www.stacksocial.com
stacksocial.com
*.news.com.au
www.stacksocial.com
newsletters.news.com.au
news.com.au
stacksocial.com
*.kurator.kuradev.cp1.news.com.au
stacksocial.com
uat.commerceapi.news.com.au
chrome-dot-gng.news.com.au
stacksocial.com
news.com.au
stacksocial.com
stacksocial.com
news.com.au
newsdev.com.au
newsdev.com.au
uatproxy.news.com.au
amp.news.com.au
gng.news.com.au
news.com.au
markets.news.com.au
sslcam.newsdev.com.au
stacksocial.com
stacksocial.com
www.stacksocial.com
stacksocial.com
newsdev.com.au
newsdev.com.au
news.com.au
*.talk.kuradev.cp1.news.com.au
sit.graphql.news.com.au
uatproxy.news.com.au
news.com.au
newsdev.com.au
stacksocial.com
stacksocial.com
chartbeast.news.com.au
metrics.news.com.au
stacksocial.com
sslcam.newsdev.com.au
stacksocial.com
www.stacksocial.com
myprofile.news.com.au
news.com.au
news.com.au
newsletters.news.com.au
weather.news.com.au
news.com.au

Certificate

The complete raw certificate details for subscriptions.news.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v1TQHGVmOrjtIatGwjX
CeNo7tK2aXUZGw60FwQfD651DG5NwQTuCFo3iOYOVs7+fP8LsujcQDoP/fd0YtZo
7zuq8HyAyIS8SCZstGPxu5XGX2idFyCtL5eDe9tmtR1GZ4DICg08hLPv4s8/joET
AKweesye1F9aTlnX8u/tHb7Twq+xqxtsBmaYp1JJFuT7uo1I6jzaQA4BDKUUGOuu
AkRrf6zOdTUb2anbynOOtDqAJxfT3l4ShU1e/0JSBJT48cV8HlbD8GWAC4igAOrU
SFoCWfvz/cW9fyRlYyItonu4+7DYM0oCrW7xahFNX6lS1CFnxrZMTbdCM5200jai
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20805491374610385453626615886801147571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscriptions.news.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27644869795554290277559585790860720335204937691340268427387956646172443757937877463943248795364755909888942792072103203749892958041838972209076634282211498307228624066359891744549222389354853607645656869835741638616102256365598977343078212736149542265016353813018575316247513461821323470531519756709404468267960061269377957449809315391317013610459105824260652844574194937799591606122371746552687782070411663427783009400937957454043011146418748179210620041006441737677020370911341020648384288935051379538917299011415946105522949738352545129734775183591300418706669771153272388739861279757967788334029884402937686827541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c59bedd9d1d8ec75b926a6a8afd330e298d73124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriptions.news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subscriptions.news.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187a1625eb50000040300463044022041d8b2fe1ce139753ff368ae412e3141b6d16208b78a6e543e1fe7de7b0b9f1b022055eac0472ccef05f4fefd5582a95992ac7a087820345aea4970b2744d3a2a76d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000187a1625eaa0000040300473045022100a7e5e9280533343943113d31a80fa40ab707a3486e80ccbb23e4b13ef366595502206168b2e732f2be877b0bba20f29034b5d3fc4833abe23c7f0c5c92d3a6942b1f007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000187a1625e630000040300473045022100aef964a00c824062d334da28726de5af3c93d0a2b1809230be498e91202b7abe0220661a7e4fd2dda29211cf23c3e3a0f535ac158859753ddcc6612a4d64624ae3f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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