*.9pub.io

Issued by Amazon

About this certificate

This digital certificate with serial number 05:14:e0:93:f1:f9:63:45:99:96:bd:fd:39:69:80:fb was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.9pub.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:14:e0:93:f1:f9:63:45:99:96:bd:fd:39:69:80:fb
Serial Number (int): 6754540897273762182324827100841345275
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a0:ea:5e:c5:8f:95:97:c0:f6:2e:a2:65:fe:be:1c:30:f5:90:1e:f3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7d:27:ed:24:92:de:21:5f:c7:b6:2b:a4:64:79:d2:5f:75:3d:0f:a0
Fingerprint (sha256): 0c:a6:ea:71:f8:7b:ea:94:13:d2:b2:54:e8:19:e1:78:86:43:fa:e4:da:06:97:a1:92:1d:58:0f:60:d6:b5:38

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.9pub.io

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.9pub.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9pub.io
*.dev.platform.ink
section79.ink
*.ffxblue.com.au
*.staging.platform.ink
*.platform.ink
*.staging.nine.com.au
*.9news.com.au
*.brisbanetimes.com.au
*.api.ffx.io
*.ninepub.ink
*.afr.com
*.test.platform.ink
*.smh.com.au
*.lock-up.platform.ink
*.ffx.io
*.theage.com.au
*.uat.nine.com.au

Other certificates including the domain name 9pub.io

(limited to 100 certificates)
*.9pub.io
nine.com.au
nine.com.au
nine.com.au
*.9pub.io
*.9pub.io
nine.com.au
nine.com.au
nine.com.au
*.9pub.io
*.ffxblue.com.au
*.9pub.io
nine.com.au
*.9pub.io
nine.com.au
*.9pub.io
*.ffxblue.com.au
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
nine.com.au
*.9pub.io
*.pe-observability-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
nine.com.au
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.dev-test-01a.apse2.k8s.ninetech.dev
*.dev-test-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.ffxblue.com.au
*.prod-codeintel-01a.apse2.k8s.ninetech.dev
*.dev-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.prod-01a.apse2.k8s.ninetech.dev
*.ffxblue.com.au
*.prod-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
*.ffxblue.com.au
*.codeintel-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
*.pe-observability-01a.apse2.k8s.ninetech.dev
nine.com.au
nine.com.au
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.dev-test-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
*.9pub.io
nine.com.au
nine.com.au
*.dev-test-01a.apse2.k8s.ninetech.dev

Certificate

The complete raw certificate details for *.9pub.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CNpRvvOM1xrYCBMZWwH
lBJtSBAiOLJJa8g7Maz8bJ+1N+PsH15d9qw0LeKpEIT5W5/noqCmXAv+Xoi0UKYw
53LRRT/E5mee/GA4cwdViiN2rtS5hvspjt/rUouGSQanq49wRSes06/8Oh3fUb1K
DYza9O4UYKXp+bZ6GKUM4bP7yTAf8yO8pGJ3hgQmsGIdlEJByTnXMpIxi39KqR4D
ai3wFSkxuBYTksCA6SPevTVyzz+4rkvW/nOXbZBXY31T4y7A7WTQeMZdPwj+oA2B
1F78uHDEgIIh8dlea02xZ0g4xLnkwVEe1hByp+UelJZ/9T3sm5OwYdL10QMNrddG
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6754540897273762182324827100841345275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.9pub.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28294842245347609443194685858374226381817020234679463871056032666768431605009851396010030151447206861734430873417882998024039245525106537552603702453370044583734574034034851427217378318023671564149776509283826417823917926475847052211582528301357004525499574961083080891829312956759535840994557601737070501878839371819741496361083257927900318566534602959524553021730091967405797718814492965526214809687167637441163993315450763434333299341839580710138273433254709251159608009000691778587992972506115668009687504157247443046881914332658208583357622051315928998582165232307898899588940275977514973496886666028026177210097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0ea5ec58f9597c0f62ea265febe1c30f5901ef3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9pub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section79.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffxblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninepub.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lock-up.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.nine.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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