autocloud.newsdev.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:67:5e:ad:6a:f0:9a:86:78:14:c5:01:be:47:09:9c was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=autocloud.newsdev.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:67:5e:ad:6a:f0:9a:86:78:14:c5:01:be:47:09:9c
Serial Number (int): 19145918803489050653867108175121418652
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:b1:eb:5d:20:68:9a:b1:c7:47:1f:7b:0f:20:46:b2:2a:1c:c9:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f0:82:fb:5c:17:c9:bb:9e:6e:84:2b:a7:25:8d:69:5e:92:32:d9:67
Fingerprint (sha256): 31:86:ee:0e:a8:b2:c6:bc:b1:03:93:f8:ef:29:af:ab:f2:6b:80:be:84:ea:3d:bf:5b:56:69:bb:33:11:2d:37

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate autocloud.newsdev.com.au

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autocloud.newsdev.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autocloud.newsdev.com.au
origin.www.geelongadvertisersit.com.au
origin.www.weeklytimesnowsit.com.au
origin.www.escapesit.com.au
origin.www.kidsnewssit.com.au
origin.www.ntnewssit.com.au
*.autocloud.newsdev.com.au

Other certificates including the domain name newsdev.com.au

(limited to 100 certificates)
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
gcpbudgetalert.newsdev.com.au
*.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
*.edtech.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
resources-pollybot.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
*.talk.newsdna.newsdev.com.au
autocloud.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
*.talk.newsdev.com.au
sslcam.newsdev.com.au
prime-dev.edtech.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
myprofile.newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
myprofile.newsdev.com.au
newsdev.com.au
*.newsdev.com.au
*.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
myprofile.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
resources-pollybot.newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
sslcam.newsdev.com.au
newsdev.com.au
newsdev.com.au

Certificate

The complete raw certificate details for autocloud.newsdev.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKunQolBIWTmPtnFkZM9
ANk5pDvqArbghAfvpFLCWNaDIZWDN5+ESnq2Eu4QJaFMvkaj0OxYX+LnwyZEXmnx
NzHoVyPWDWdGOPxyA2QKPQiGdIZOk5mcZdgRO4QCFu2eZXX0CZa7HsOKzA5IaHPD
fIsU5Jjp5PoKfbo7Nq2gYsUkWr47Yx/71I19Rl/cGc8aPwApgmKBCZQHEVMiOPt/
7r8oHaJO2YqL9k3mq0HYt4EUdFGWxWXZtUDnS1ePdqfNSMP9j5XqHlAgSUSKkVGE
wTTXciumdQaKIVV6FcgYyk60zoxMBFvQYTDewqZ2el0IjSVpWlL5pcpmgtqvaoSV
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19145918803489050653867108175121418652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autocloud.newsdev.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16748101681626335464907199093465056859384616397341037393517420660689125111158687745950916578141674581184285447426042553317354084175891668565796864330237990348671634002608552765381165951191339091101532925334398417368406989587641897363421438102826978247216453467585584128751125452332393934391230896282498066582233403035677190587801704824795620382244435935365082768577516023478047789679784926250318452866149971224781595687810657795639475184633760546200705490269079253034663732308590185128309622465179683488018367191136978511906422296388538135163267329970532835043890726627344710305611210127496573198434749798858505885161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b1eb5d20689ab1c7471f7b0f2046b22a1cc93e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocloud.newsdev.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.www.geelongadvertisersit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.www.weeklytimesnowsit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.www.escapesit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.www.kidsnewssit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.www.ntnewssit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocloud.newsdev.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ba3353ac24a0a3763dab118c7b40908fb89f52d97e460b131a961981e75190728298d7249e320b7e2cc67982b0f1c24147b2118656d49844a18441c4e2ae48e6d6dd04b2445f8b732f709856d86f4345a8cf3d23cb8847499c06922c381d8e37d9779a9948155a77536a7e593dd60ca813cc61d2597efad40f10d91a0cb575cdd1d5b351da9acb69a13353ef2ca74b7ad040d779c8fddd0f43ea780f99a2ce43878ffec1706accda2533d04fded377eacbc9aff54c19a1313fe67d23546056da0e08dddadaf53a24cd91d8fadc18de840179da3f377a63e3dfd8d2996ef20dfee6fe0a1f4885ba076bfa1be3b42e08d2718f987a4f76edff190cfc1c34bb54c6