mi9cdn.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:9a:66:af:93:79:7e:1c:b7:18:b8:84:23:f1:ad:eb was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mi9cdn.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:9a:66:af:93:79:7e:1c:b7:18:b8:84:23:f1:ad:eb
Serial Number (int): 14093976390412706666264357385232559595
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 43:08:78:6e:61:7c:b7:1f:a4:33:2e:78:03:f0:37:6f:5f:1e:a6:93
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b5:e7:cf:11:5c:13:e6:55:cb:cb:02:e3:78:88:48:fc:e6:13:91:19
Fingerprint (sha256): d6:be:a7:f1:c1:09:48:15:df:6d:6e:6f:38:99:84:af:3b:7f:fc:22:fe:47:5f:39:1f:ec:60:0f:bb:a3:04:b4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate mi9cdn.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mi9cdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mi9cdn.com
vms.mi9cdn.com
9vms.com.au
9video.com.au
*.dev.9vms.com.au
dev.9vms.com.au
*.vms.mi9cdn.com
*.dev.9video.com.au
*.9video.com.au
vms-api.mi9cdn.com
*.mi9cdn.com
*.9vms.com.au
*.nine.com.au
*.9now.com.au
*.video.nine.com.au
*.video-preview.9now.com.au
dev.9video.com.au
*.vms-api.mi9cdn.com

Other certificates including the domain name mi9cdn.com

(limited to 100 certificates)
api-vms.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nz.vpn.mi9cdn.com
docker-registry.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
mi9cdn.com
www.networkservices.ninemsn.com.au
docker-registry.mi9cdn.com
docker-registry-nine.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
docker-registry-nine.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
mi9cdn.com
nz.vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
nz.vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
*.mi9cdn.com
vms.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nz.vpn.mi9cdn.com
mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.mi9cdn.com
vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
docker-registry.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
int.vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.vms-api.mi9cdn.com
mi9cdn.com
mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
docker-registry-nine.mi9cdn.com
www.networkservices.ninemsn.com.au
mi9cdn.com
www.networkservices.ninemsn.com.au
int.vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
mi9cdn.com
www.networkservices.ninemsn.com.au
int.vms-api.mi9cdn.com

Certificate

The complete raw certificate details for mi9cdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNo8sE+vPRB2AaFydceK
Th64WYnQO8yTSnZkuI8pPnhRZslzIxW+Ru+Ik4UY/EMpT23ecnabbXrQrAzAL3yX
5G/D2LHL+p80x1GRYLZ+fR8Eh94hcLSLfNmOlf89g582gNQcAZ/ddPxgQMaSN3Gg
wx7ez9wOsZDWlIbDztKTFUJO11N+BflRQqrvFCAhil8OdBdvKQSPxG3gQR0GK1ta
P0McKVYABZLpIyZf/vMi8fne1fMI2ahxWjA4ZBQOh5vi05eGrhlFpXhutRN//O9R
7PNFe++zbCZtYoDl7sleH33u7oq74Gx+kxsclWsiNihi+uOLzuoGtnsU/PST+ZC8
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14093976390412706666264357385232559595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi9cdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23335464821582091183614775838891007614683796207039030910086447367564221627454739990720745421927173635069609714893421996927204249178307288454129451253592211550522650620630322188745525019886791590082843546307867959974762889254329751014332916214980337174881444618670374313763219788534253126473678733136890260515208533603421343866762536541227730806002833235087929353214038741992014085792383591412540286933229931674473462234715694960563812495835167274567294099441016176436477862833766868688654386910476704316304480147417184978022306094113455413109355747272589721889162503327383802186962387515361448182821930429306123631727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4308786e617cb71fa4332e7803f0376f5f1ea693
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms-api.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video-preview.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vms-api.mi9cdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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