maritimemanagement.transport.nsw.gov.au

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:b0:1b:9a:05:fd:8e:08:ff:66:a8:68:dd:df:b3:e5 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maritimemanagement.transport.nsw.gov.au

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:b0:1b:9a:05:fd:8e:08:ff:66:a8:68:dd:df:b3:e5
Serial Number (int): 7560544054076988842437167336667460581
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7f:fb:2c:46:fd:77:57:d6:e4:9b:f5:8b:18:ea:9a:f7:df:e3:6d:48
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3a:a8:cd:7c:2f:12:2a:e3:16:83:8a:de:b6:e4:e7:92:0e:94:26:d3
Fingerprint (sha256): 00:b5:89:f3:d9:55:31:89:25:9e:80:4a:d5:17:ea:53:bb:90:37:6e:f3:46:25:43:8f:8c:c8:9f:c0:0d:8d:41

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate maritimemanagement.transport.nsw.gov.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maritimemanagement.transport.nsw.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maritimemanagement.transport.nsw.gov.au
www.maritimemanagement.transport.nsw.gov.au

Other certificates including the domain name nsw.gov.au

(limited to 100 certificates)
glc-lyncfe.glc-dom.greatlakes.nsw.gov.au
wnswlhd.health.nsw.gov.au
virtela.simpplr.com
sni192047.cloudflaressl.com
helpdesk.regionalhousing.org.au
webpac.sutherlandshire.nsw.gov.au
*.sopa.nsw.gov.au
rsc.cdn77.org
test.cadastre.nsw.gov.au
support.licence.nsw.gov.au
incapsula.com
incapsula.com
search.det.nsw.edu.au
vsp.schn.health.nsw.gov.au
www.goulburn.nsw.gov.au
live.artgallery.nsw.gov.au
citrix.service.nsw.gov.au
ehub.enrol.education.nsw.gov.au
www.heti.nsw.gov.au
incapsula.com
archivemanager.health.nsw.gov.au
vpn.hawkesbury.nsw.gov.au
*.finance.nsw.gov.au
www.careforacarer.nsw.gov.au
ictsd.sureservegroup.co.uk
www.kogarah.nsw.gov.au
ictsd.sureservegroup.co.uk
pra.community.nsw.gov.au
PCS-PDS263.tmc.rta.nsw.gov.au
vmoirs.health.nsw.gov.au
objective-dev.transport.nsw.gov.au
employment.midwestern.nsw.gov.au
*.audit.nsw.gov.au
mpa.nsw.gov.au
mailsync.narrandera.nsw.gov.au
incapsula.com
*.int.smprimavera.aws.hosting.transport.nsw.gov.au
skypool1.det.nsw.edu.au
ssl758952.cloudflaressl.com
mhrt.nsw.gov.au
intranet.transport.nsw.gov.au
m.artgallery.nsw.gov.au
policingactivity.bocsar.nsw.gov.au
eventshub.nsw.gov.au
pointtopoint.nsw.gov.au
macroc.nsw.gov.au
oacciwtrn.oci.dcj.nsw.gov.au
ssl758953.cloudflaressl.com
www.energy.nsw.gov.au
cims-sit.hbcf.nsw.gov.au
fncw.nsw.gov.au
wollongong.nsw.gov.au
accessedge1.nswgov.ucfx.com
crl.nsw.gov.au
gitlab.service.nsw.gov.au
ssl375654.cloudflaressl.com
alpha.portal.data.nsw.gov.au
www.victimsservices.justice.nsw.gov.au
sni203116.cloudflaressl.com
www.pexa.osr.nsw.gov.au
msa.dev.education.nsw.gov.au
sni183646.cloudflaressl.com
5676582576324608-fe3.pantheonsite.io
sni183646.cloudflaressl.com
citrix.lb.rta.nsw.gov.au
sni192047.cloudflaressl.com
*.icac.nsw.gov.au
imperva.com
failover.graftongallery.nsw.gov.au
whatsonhelp.cityofsydney.nsw.gov.au
5638916786880512-fe1.pantheonsite.io
tmf-dashboard.icare.nsw.gov.au
uat.emos.nsw.gov.au
www.otsi.nsw.gov.au
events.energysaver.nsw.gov.au
*.unify.service.nsw.gov.au
www.kyogle.nsw.gov.au
web-workflow.sl.nsw.gov.au
camden.nsw.gov.au
cloud.comms.service.nsw.gov.au
sni192050.cloudflaressl.com
governor.nsw.gov.au
*.wls.dpi.nsw.gov.au
tools.dev.justconnect.justice.nsw.gov.au
api.uat01.onlineregistry.justice.nsw.gov.au
incapsula.com
locale-distro.morpht.com
apt-apigee-devs-profile-user-images-prod.cf.g.service.nsw.gov.au
imperva.com
eservices.byron.nsw.gov.au
snswlhd.health.nsw.gov.au
maritimemanagement.transport.nsw.gov.au
tst.smartandskilled.nsw.gov.au
www.hay.nsw.gov.au
*.audit.nsw.gov.au
incapsula.com
*.upperhunter.nsw.gov.au
sni.cloudflaressl.com
mail.yass.nsw.gov.au
archives.nsw.gov.au

Certificate

The complete raw certificate details for maritimemanagement.transport.nsw.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG71fxEAE5EyOMNzbgoP
SvcI8RHWxWqf+3K8W99nQKWVGlPIsIjxuKUJ0GoTaCCS2VbWDLjmLsFTsQh6Dp1+
FGQQ0TNhIBf9pG6CLHzPkPFZTRe24k/A/TY+xkaJsXGVV1USQHy1FvZfzJm2zR/6
zwDuFfeZAlohEhHFKFNIwuxkvle4AbmcV5SpcOxJ5CGdXzPtWuLC1wXB6qNypzNS
e72wCaq/5wL3bv2xWbEuPveHgUTmfHOhGDxruyyQFA5roAXyE7hYtSObYzYihfxi
yh5ik/qCupmlG3oKN6i9/WGhpB4wJxx8kTG1fJ6xZfTSXqsCdQh3dFXhxCZXy2Zb
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7560544054076988842437167336667460581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maritimemanagement.transport.nsw.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20757797921894272573791814393473055042423971609992522591286748013415411187339918190736580246981277503370831219394717276505824626570134591380867943562622008347890144592957932531469967983418332538907369574440922549050692119336924517476624926526234867253117785222562771767338965530345740220388416257982304344853605919591633748051303844775042068043584148995501658224729605624944045774164515846700234947881008161736485902986655207201111273497888832983632100226449587112376097333414189601181517853265283540516557948466881724043901758682123207733669363951258950252724555218470907857336506218242650312041308379047476662262601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ffb2c46fd7757d6e49bf58b18ea9af7dfe36d48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimemanagement.transport.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maritimemanagement.transport.nsw.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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