*.9pub.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:a0:4a:33:26:46:70:f1:53:5d:f2:95:ce:4c:05:1e was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.9pub.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:a0:4a:33:26:46:70:f1:53:5d:f2:95:ce:4c:05:1e
Serial Number (int): 16783008397577109883805917524620215582
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:94:3b:6c:90:a0:55:10:f6:21:9c:25:41:d2:c6:ef:1b:d4:77:aa
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 65:9f:f2:54:84:bf:81:af:f6:e8:6a:2c:2a:76:33:83:8d:b7:a1:64
Fingerprint (sha256): 45:64:35:d7:b4:b5:85:b8:01:0b:1c:4e:d3:c5:09:25:60:00:00:f2:46:64:5a:fe:10:01:cc:0e:33:b8:aa:27

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.9pub.io

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.9pub.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9pub.io
*.afr.com
*.ffx.io
section79.ink
*.ninepub.ink
*.platform.ink
*.smh.com.au
*.brisbanetimes.com.au
*.preview.nine.com.au
*.api.ffx.io
*.9news.com.au
*.prod.platform.ink
*.nine.com.au
*.f2.com.au
*.theage.com.au
*.myfairfax.com.au
*.ffxblue.com.au
*.lock-up.platform.ink

Other certificates including the domain name 9pub.io

(limited to 100 certificates)
*.9pub.io
nine.com.au
nine.com.au
nine.com.au
*.9pub.io
*.9pub.io
nine.com.au
nine.com.au
*.pe-infra-01a.apse2.k8s.ninetech.dev
nine.com.au
*.9pub.io
*.ffxblue.com.au
*.9pub.io
nine.com.au
*.9pub.io
nine.com.au
*.9pub.io
*.ffxblue.com.au
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
nine.com.au
*.9pub.io
*.pe-observability-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
nine.com.au
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.dev-test-01a.apse2.k8s.ninetech.dev
*.dev-test-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.ffxblue.com.au
*.prod-codeintel-01a.apse2.k8s.ninetech.dev
*.dev-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.prod-01a.apse2.k8s.ninetech.dev
*.ffxblue.com.au
*.pe-infra-01a.apse2.k8s.ninetech.dev
*.prod-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
*.ffxblue.com.au
*.codeintel-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
*.pe-observability-01a.apse2.k8s.ninetech.dev
nine.com.au
nine.com.au
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.9pub.io
*.dev-test-01a.apse2.k8s.ninetech.dev
*.9pub.io
*.9pub.io
*.9pub.io
nine.com.au
nine.com.au
*.dev-test-01a.apse2.k8s.ninetech.dev

Certificate

The complete raw certificate details for *.9pub.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7cT1eQKKKUiCD0yhE23
EcXh3nAiO+UKElus1MMEZfB+WBIfVXV8TAQ3SnUZ6KLuqaEeAHN/hzRCXwzL5c4i
+RKrG6sUVyPl5B7qX87+RbZgmlRK8sgVAhQqq3Wn4xqoV3X24iSSv63ikeq8g5cu
EfT9O2ZMRz/bD2KN8WHb3PP/JyJyD/svEFO39Yu8v0NOIbz5GL2mDa6TGFnEPDRH
V+my3WrvqM7nJoEwRReVmxsLBloUGzEnHca0bFjH3kT1DzXLhsMByF8v7u5SUtbK
jEiBjZCe/d0zkvt4u6OThiONPCEX5GBeuIVbM+rJl5HJY3oeMLuj7Fl73VQUIeLQ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16783008397577109883805917524620215582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.9pub.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23191888680131485182167071785769758986003416294561115294456613385678012407340027447882200709218479339171746256170708017979114691848747142037185271260748475435451283738693215514055463409716664977495805774311369342924224553744627965596618795989856508011539422706958046212296794103255353655997319270599262282179101186103454764238641458805737887846780990851439566731692415206167581336263455880907416748630838638718951582831600328078414914485076001639944928035824631791123207377883228951150196445956574806135949921128024499223812331915513558414386938544027283465090467613393925733526769364357780481081851633746689459933297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9943b6c90a05510f6219c2541d2c6ef1bd477aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9pub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section79.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninepub.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9news.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.platform.ink'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f2.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfairfax.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffxblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lock-up.platform.ink'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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