nine.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:8c:fd:c6:42:d4:68:d1:f5:9c:95:50:2a:d4:a9:7a was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nine.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:8c:fd:c6:42:d4:68:d1:f5:9c:95:50:2a:d4:a9:7a
Serial Number (int): 15353576671317650088041239901931612538
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0b:7c:10:85:63:2e:24:19:ae:92:82:da:57:f7:5a:ec:f9:35:c2:b7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 36:21:14:ca:02:7d:be:b1:50:08:1f:75:ac:f8:e4:86:2b:7d:ea:05
Fingerprint (sha256): 22:18:d1:21:f9:9b:f3:66:25:3c:57:17:2b:ba:ca:a8:ac:5e:f7:5f:70:52:ee:25:00:bf:5c:73:f5:90:ac:9b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate nine.com.au

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nine.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nine.com.au
int-adc.9news.com.au
int-adc.yourtv.com.au
int-adc.api.nine.com.au
int-adc.nine.com.au
int-adc.9now.com.au
int-adc.nineentertainmentco.com.au

Other certificates including the domain name nine.com.au

(limited to 100 certificates)
nine.com.au
*.api.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
nine.com.au
int-pixel.nine.com.au
test.perso-data-api.nine.com.au
customer-test.ssl.fastly.net
uat.settings.nine.com.au
entertainment.nine.com.au
www.nine.com.au
*.9pub.io
nine.com.au
*.nine.com.au
f1.nine.com.au
as.adsoniris.com
elsewhere.nine.com.au
www.nine.com.au
*.nine.com.au
*.nine.com.au
pickle.nine.com.au
*.staging.origin.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.nine.com.au
wwos.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.networkservices.ninemsn.com.au
9.nine.com.au
nine.com.au
prev.login.nine.com.au
www.networkservices.ninemsn.com.au
akamaisecure7.qualtrics.com
dns-vetting1-jeffg-noah.map.fastly.net
saleshub.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
staging.fantasticfurniture.nine.com.au
nine.com.au
akamaisecure7.qualtrics.com
nine.com.au
kevincanwait.nine.com.au
somni.nine.com.au
nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
go.nine.com.au
ratings.nine.com.au
magellan.nine.com.au
int-adc.api.nine.com.au
*.api.nine.com.au
intranet.nine.com.au
www.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
www.wwos.nine.com.au
honey.nine.com.au
nine.com.au
nine.com.au
*.nine.com.au
somni.nine.com.au
staging.login.nine.com.au
*.api.nine.com.au
www.nine.com.au
images.passendo.com
9now.com.au
nine.com.au
quizapi.nine.com.au
*.9pub.io
asruns.nine.com.au
nine.com.au
www.nine.com.au
somni.nine.com.au
www.nine.com.au
uat.amp.nine.com.au
customer-test.ssl.fastly.net
somni.nine.com.au
*.9pub.io
akamaisecure7.qualtrics.com
logies.nine.com.au
www.celebrity.nine.com.au
misc.nine.com.au
style.nine.com.au
student.afr.com
rebel.wwos.nine.com.au
*.thefix.nine.com.au
www.networkservices.ninemsn.com.au
*.nine.com.au
*.staging.origin.nine.com.au
*.nine.com.au
www.networkservices.ninemsn.com.au
customer-test.ssl.fastly.net
9now.com.au
akamaisecure7.qualtrics.com
nine.com.au
www.celebrity.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
customer-test.ssl.fastly.net
www.nine.com.au
bookmarktowin.nine.com.au
wwos.nine.com.au
c.msn.com
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for nine.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t+acxcI9AxATepYjIio
4pnhi/F/stxrv6z5l2pPuXa6/PvlqUbByYdDeVBdKko1EiGMF+lCh0L/LC3Ox1s0
OKkJnkneVu+BoqeXD9XEOhJqDiXtcYj3Oa4lOvmL5a6DEtQABGPgvGycwSI9YdC1
oJfI43NJq572InBXcNiCqmxyLR/oHIcjPCQ1toXy0lLa6y8slbP0Zt6fs7gvohub
xop65cxN4cx1bmp52YWJgHOWnxE0e0DOD5hMPNxJDamgFRAjkPBSoa3vWJlCyvhF
qzO7fZsUI3u9VMRyghsCe4YASfOAcx+gxhZuW+eRmuBq1lwg9tYfE5yvBnrFhpYw
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15353576671317650088041239901931612538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nine.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27630213388573857950035795158334997777918355845886620497216350469854295206668508514829132553537997758917858794391467193414014238121749235118764572942939610723120969166978609381651941396994693958330013005058589634146410535801620843612714247814457634372893352740606761963221779496950651009598764022567908001733907388054190458798020782083044910694604403279458540436713287394391185654898275298627209288829385753537006414031648711493646542577288967701413062606397857467218514847732831576126606576141355210437857223582043890602517295617450964237994525525849661020113799803023593324014414591606800303859695404359729196445823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b7c1085632e2419ae9282da57f75aecf935c2b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-adc.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-adc.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-adc.api.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-adc.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-adc.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-adc.nineentertainmentco.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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