naiftp.newscorp.com

- News Corporation -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 5f:a6:06:b7:1a:f5:37:95:2d:98:62:76:f4:3d:6a:24 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

News Corporation

Organization: News Corporation
Organization unit: News Corporation
State / Province: New York
Locality: New York
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:a6:06:b7:1a:f5:37:95:2d:98:62:76:f4:3d:6a:24
Serial Number (int): 127138717079638210895761521358401268260
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 60:4e:1a:79:96:a6:b5:b2:9b:c2:3c:57:da:9e:af:a2:4d:aa:c1:10
Fingerprint (sha256): 2b:69:0a:d8:19:e8:b2:10:b4:d2:db:60:b5:18:92:91:dc:36:d1:c3:a1:8f:e0:ab:52:20:e7:e9:df:d5:8c:4b

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate naiftp.newscorp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naiftp.newscorp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naiftp.newscorp.com

Other certificates including the domain name newscorp.com

(limited to 100 certificates)
leapfrog-ssl-24.gcs-web.com
compliance.newscorp.com
tls.automattic.com
naifs.newscorp.com
pwm.newscorp.com
*.newscorp.com
naimeeting.newscorp.com
leapfrog-ssl-24.gcs-web.com
rsvp.newscorp.com
leapfrog-ssl-24.gcs-web.com
dscms.newscorp.com
api.content.capi.newscorp.com
lyncweb.newscorp.com
leapfrog-ssl-24.gcs-web.com
v2.pixel.djp.data.newscorp.com
m.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
leapfrog-ssl-24.gcs-web.com
slcwprd1.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange.newscorp.com
hyperion.newscorp.com
naipinchange.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
tanprd.newscorp.com
newscorp.com
pwm.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
newscorp.com
content.capi-nonprod.newscorp.com
naid3.newscorp.com
intranet.newscorp.com
editionscurator-api.newscorp.com
board.newscorp.com
naifs.newscorp.com
v2.pixel.nukp.data.newscorp.com
newscorp.com
content-dr.kapi.newscorp.com
lcspublic.newscorp.com
board.newscorp.com
content.capi.newscorp.com
leapfrog-ssl-24.gcs-web.com
remotevpn.21cf.com
naiftp.newscorp.com
staging.developer.newscorp.com
naichat.newscorp.com
ncusnjvzops1.newscorp.com
leapfrog-ssl-24.gcs-web.com
content-knewz.capi-nonprod.newscorp.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
naimail.newscorp.com
*.api.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
content.kapi.newscorp.com
newscorp.com
conferencecenter.newscorp.com
tcfusnjpgpl1.newscorp.com
tanpre.newscorp.com
ncsubmissions.newscorp.com
gtp.newscorp.com
newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange-test.newscorp.com
*.acs.svc.newscorp.com
rsvp.newscorp.com
content.capi-stage.newscorp.com
leapfrog-ssl-24.gcs-web.com
staging.developer.newscorp.com
*.qa.newscorp.com
developer.newscorp.com
leapfrog-ssl-24.gcs-web.com
hyperion.newscorp.com
tfs2010portal.newscorp.com
web.newscorp.com
lync15pool.newscorp.com
content.capi.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
content.capi-stage.newscorp.com
content.capi.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
naisharepoint.newscorp.com
datacatalog.cyber.newscorp.com
staging.developer.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
equitynet.newscorp.com

Certificate

The complete raw certificate details for naiftp.newscorp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHJX5uE8hJk1jmLcGydI
66AdIifC+jZDp8YTH/K7HyZcpGDXMMgYX9sdRGfWqmu+SC47RqaA+3dgFxYUW2Z3
SpEpAVpiVy8iP7So2T9J4v3s7FdgAPxm+qjc2Mb0vAFBqR7T4dsQrLdxzhHwxio7
ckrb/bOyhkpR/OAopCQe95qnDlP/80Zhd3+W7s0IcqSDWcfq4tc7izUlKl2U1Sby
GZY9ZplMTVgbvTeSHG0VwMQOPmIJXI75VrjPXq9w+1IOr/53fy0bBerdl2lPkT0x
qwRiBQQ6BDKJ4SrFgjGyaa1an9u9SVHt68+1+yEl1dYHIPfvCsIzSVgDwJtDwtxN
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127138717079638210895761521358401268260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'News Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'News Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'naiftp.newscorp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21769373269771043077819365993904015859967396066379841103473067764237585510479037067298267520233037632450132699011588472936514403544430180162880913438147901587621058564317374305764553607556737780007344157200368954017424035198801084952090053469438817259098907960132191212707036771561115806968561620561649271376262295334026356497498288487861046984810718046727530248292935412641827302878437249933500167240839959423020844120671937605835043899147691289231358537315040258595233722416161552065025001570778487865343128096633586625265591466574826112475010411057032196097127871302703546928982353685099025729598158149810172743151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naiftp.newscorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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