nine.com.au

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:41:4c:1a:3c:b2:cc:50:7e:e3:b9:8d:b6:f7:0d:78 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nine.com.au

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:41:4c:1a:3c:b2:cc:50:7e:e3:b9:8d:b6:f7:0d:78
Serial Number (int): 14960550791286195528438852455499238776
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:c0:f7:a5:8a:ef:77:d8:14:69:1a:cf:32:d8:1f:6c:6f:bb:2d:1c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 31:71:00:8a:00:50:1c:21:79:f8:fc:ab:f2:ec:d3:4e:11:4c:16:f8
Fingerprint (sha256): 2a:30:91:1e:b1:f3:c4:20:d1:91:85:c7:f1:49:d0:b9:c9:14:a3:d0:55:4e:07:1a:d3:10:de:3e:1a:80:4a:9a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate nine.com.au

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nine.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nine.com.au
*.nine.com.au
*.9now.com.au
*.yourtv.com.au
*.nineentertainmentco.com.au
*.9news.com.au
*.api.nine.com.au

Other certificates including the domain name nine.com.au

(limited to 100 certificates)
nine.com.au
*.api.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
nine.com.au
int-pixel.nine.com.au
test.perso-data-api.nine.com.au
customer-test.ssl.fastly.net
uat.settings.nine.com.au
entertainment.nine.com.au
www.nine.com.au
*.9pub.io
nine.com.au
*.nine.com.au
f1.nine.com.au
as.adsoniris.com
elsewhere.nine.com.au
www.nine.com.au
*.nine.com.au
*.nine.com.au
pickle.nine.com.au
*.staging.origin.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.nine.com.au
wwos.nine.com.au
customer-test.ssl.fastly.net
nine.com.au
www.networkservices.ninemsn.com.au
9.nine.com.au
nine.com.au
prev.login.nine.com.au
www.networkservices.ninemsn.com.au
akamaisecure7.qualtrics.com
dns-vetting1-jeffg-noah.map.fastly.net
saleshub.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
staging.fantasticfurniture.nine.com.au
nine.com.au
akamaisecure7.qualtrics.com
nine.com.au
kevincanwait.nine.com.au
somni.nine.com.au
nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
go.nine.com.au
ratings.nine.com.au
magellan.nine.com.au
int-adc.api.nine.com.au
*.api.nine.com.au
intranet.nine.com.au
www.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
www.wwos.nine.com.au
honey.nine.com.au
nine.com.au
nine.com.au
*.nine.com.au
somni.nine.com.au
staging.login.nine.com.au
*.api.nine.com.au
www.nine.com.au
images.passendo.com
9now.com.au
nine.com.au
quizapi.nine.com.au
*.9pub.io
asruns.nine.com.au
nine.com.au
www.nine.com.au
somni.nine.com.au
www.nine.com.au
uat.amp.nine.com.au
customer-test.ssl.fastly.net
somni.nine.com.au
*.9pub.io
akamaisecure7.qualtrics.com
logies.nine.com.au
www.celebrity.nine.com.au
misc.nine.com.au
style.nine.com.au
student.afr.com
rebel.wwos.nine.com.au
*.thefix.nine.com.au
www.networkservices.ninemsn.com.au
*.nine.com.au
*.staging.origin.nine.com.au
*.nine.com.au
www.networkservices.ninemsn.com.au
customer-test.ssl.fastly.net
9now.com.au
akamaisecure7.qualtrics.com
nine.com.au
www.celebrity.nine.com.au
dns-vetting1-jeffg-noah.map.fastly.net
customer-test.ssl.fastly.net
www.nine.com.au
bookmarktowin.nine.com.au
wwos.nine.com.au
c.msn.com
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for nine.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH9sM4IMAfzJharipVLb
OLAoeGG+mmXVf3epUNNk4wr71IC0hnQd1OhI6uRtBSQIWS4Okar1Ogf2O0o4kwf4
2jeyTxaSvT9En261/doFrgL89T9S/Iz3viw4okaz0EowZtLMs5vB82fyTklFOuM1
Kl9FQOd8nZ4nGy1HPuzKTv52knn6XUiYZNg6z365v0QuaIrY0PPuPCCSRVTYqi7B
TdJVF0m5Ze4LdJAOX8FXcWf/FmySMR7z2/ddVAmcZpWtTdnPLnV7HSgNchOHqlTb
Bnrfhfle7n16xZf1o/diGl4JyiCnA+vjLVwFsJWIm5zRSbX4MrjGWg1/sXzZ9mk3
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14960550791286195528438852455499238776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nine.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19756010030691659013138626854858515015782590752452628188195440765079478710394479299285140448564515679393073501830941630942026036102803527482220263199662637184790651543613410102236864147891446881416472525037195362407605312956744166556716719014088813202622874178082703052569842189467905305979215814671286006054665335139308162613410758361886390441402258891048261993747544506357784170376817082434768140463154010245167886760942508771780714178579207975098739844712828385567439297852878021413958817193026828205995275180313542696231107760636967862799049234090998623388110777652799742363986957132614480949998672085329296046057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7c0f7a58aef77d814691acf32d81f6c6fbb2d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtv.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nineentertainmentco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.nine.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d351fc17d3b40a0cba12eaf755040657cad58bd5881519b011b59a1f83b72ee899d8b5513ae97944ab4eadd50c6109434230b0b9fe73d5dfabf38fdcdb1dd61d49d95c907730b8add51f0b88931c7fcf11973635f139fd8a400674d5eb8a146ab6ef3b8c93948d84089544d834b68dda7ac443d46b543e88e04fad2551f204b54449dc275e928870def18519d8a7487042aa69c2b58c9bb5c2f36d25ae8c9150aca6ccbd54ac1c7884b89c035dad7c3a4c6386be8ac8dd5476d05d3df82de0fd00b7545283880a608bb25e76f10cd7c30549003a624448659de347f9a34a187a3e0ee0da0e7319bd503fcd20cf38388caf452b3895f9e01dc93c0faf0618b21