*.f2.com.au

- FAIRFAX DIGITAL AUSTRALIA & NEW ZEALAND PTY LIMITED -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 30:7b:0f:9d:4d:2a:9e:31:e0:b5:16:cc:0d:bd:26:50 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FAIRFAX DIGITAL AUSTRALIA & NEW ZEALAND PTY LIMITED

Organization: FAIRFAX DIGITAL AUSTRALIA & NEW ZEALAND PTY LIMITED
Organization unit: Digital Infrastructure
State / Province: New South Wales
Locality: Pyrmont
Country: AU

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:7b:0f:9d:4d:2a:9e:31:e0:b5:16:cc:0d:bd:26:50
Serial Number (int): 64441913010123182906903362170917824080
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 22:59:d7:6e:c7:7d:bf:9d:85:4d:40:08:03:97:66:62:69:d4:c8:96
Fingerprint (sha256): 71:7e:1d:ac:d7:7f:42:57:af:32:85:56:6b:53:28:e4:ef:16:14:22:2a:35:57:ae:96:98:54:01:93:62:f9:06

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.f2.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.f2.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.f2.com.au

Other certificates including the domain name f2.com.au

(limited to 100 certificates)
subscribers.theage.com.au
nine.com.au
www.f2.com.au
5710758973276160-fe2.pantheonsite.io
nine.com.au
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
nine.com.au
5710758973276160-fe2.pantheonsite.io
fairfaxmedia.com.au
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
*.thestore.com.au
nine.com.au
5710758973276160-fe2.pantheonsite.io
*.kubernetes-production.f2.com.au
5710758973276160-fe2.pantheonsite.io
afr.com
nine.com.au
subscribers.theage.com.au
5710758973276160-fe2.pantheonsite.io
*.pe-infra-01a.apse2.k8s.ninetech.dev
subscribers.theage.com.au
fairfaxmedia.com.au
*.thestore.com.au
*.f2.com.au
*.fairfaxmedia.com.au
subscribers.theage.com.au
syndication.f2.com.au
nine.com.au
f2.com.au
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
fairfaxmedia.com.au
5710758973276160-fe2.pantheonsite.io
level2.f2.com.au
5710758973276160-fe2.pantheonsite.io
agtrader.com.au
5710758973276160-fe2.pantheonsite.io
wsd.f2.com.au
nine.com.au
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
f2.com.au
nine.com.au
f2.com.au
afr.com
stuff.co.nz
5710758973276160-fe2.pantheonsite.io
*.9pub.io
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
fairfax.com.au
stuff.co.nz
*.fairfaxmedia.com.au
5710758973276160-fe2.pantheonsite.io
*.9pub.io
bruce.mob.f2.com.au
*.9pub.io
5710758973276160-fe2.pantheonsite.io
nine.com.au
fairfax.com.au
fairfaxmedia.com.au
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
subscribers.theage.com.au
5710758973276160-fe2.pantheonsite.io
f2members.f2.com.au
fairfax.com.au
search.f2.com.au
fairfaxmedia.com.au
syndication.f2.com.au
*.fairfaxmedia.com.au
f2.com.au
5710758973276160-fe2.pantheonsite.io
stuff.co.nz
f2.com.au
5710758973276160-fe2.pantheonsite.io
*.pe-observability-01a.apse2.k8s.ninetech.dev
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
*.9pub.io
5710758973276160-fe2.pantheonsite.io
fairfax.com.au
*.fairfaxmedia.com.au
fairfaxmedia.com.au
afr.com
*.fairfaxmedia.com.au
5710758973276160-fe2.pantheonsite.io
afr.com
*.f2.com.au
*.9pub.io
5710758973276160-fe2.pantheonsite.io
5710758973276160-fe2.pantheonsite.io
f2members.f2.com.au
*.dev-test-01a.apse2.k8s.ninetech.dev

Certificate

The complete raw certificate details for *.f2.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl1Hal9weE+Z9BIHwWBW
/cb347guNH7azkorGi5wylvTs6MvjIWuMVHljje5xyCi84Qk5BcWyxOutDYABbQ4
Jl6fwKjz32VDsxtawqZCUrAxeA5bJXTv/KmQPR9wMKxSkH4rh4L6FUobysk6TJxW
rrNXnhOOrxQCqB/Q+antNRfrHWREPvGl9ZyfFL4NZJlTCwGhTdGXIcQr8rpFpB9G
65M2c5P2muCmJEJUzRONu7AnPKeA1EsfAHO27aDFzNdR8gehptoSeSUNvAmJdlCG
UgNBYB95LrIijt3Gg2dnS6G/r6rM41HeBa9TZDBhN4tBjh+EGpg+LyNons0YbgWF
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64441913010123182906903362170917824080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Pyrmont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'FAIRFAX DIGITAL AUSTRALIA & NEW ZEALAND PTY LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Digital Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.f2.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24536228736332121988016723644723693123884802980899811988559086711488733728923028451690111400208701157507780657022017506490351161941755176073011699400631421937313313773146456039022581516964623271019040775325011777610546130808301290483132985650112915409997675815877674351965129092879352002134736107764792604573951521774895813222837140347238472114153980193691743844808653617017234925729697923250380241581663924589237701534021182951968656432599332983163831978320563704518033251258224193274714306493700937747644374493438797789721621777568002323118397822575655893647367363060986765189692294165369309394730807514803602818499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f2.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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