*.dcl.ato.gov.au
- Australian Taxation Office -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 05:d5:54:22:d9:d3:d7:ae:d9:1d:d9:65:15:3b:4f:fc was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Australian Taxation Office
Organization:
Australian Taxation Office
Organization unit: Intech
Organization unit: Intech
State / Province:
Australian Capital Territory
Locality: Canberra
Country: AU
Locality: Canberra
Country: AU
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:d5:54:22:d9:d3:d7:ae:d9:1d:d9:65:15:3b:4f:fcSerial Number (int): 7753805693371078888041872946177462268
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: b1:48:7e:fe:99:f2:ec:71:2c:00:1b:7d:fb:52:58:a1:ad:1c:1f:ec
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): bc:e7:5c:54:de:54:0d:41:d2:08:67:b7:06:b7:2c:3e:02:f0:35:d8
Fingerprint (sha256): 01:a6:d6:ef:fb:3b:2e:99:b7:41:d4:b5:66:1b:15:d2:9a:f9:ca:34:f4:f4:5a:72:f6:7f:ae:db:51:0f:a6:c5
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.dcl.ato.gov.au
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.dcl.ato.gov.au
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dcl.ato.gov.au
Other certificates including the domain name ato.gov.au
(limited to 100 certificates)
provider.tr.super.ato.gov.au
basp.status.ato.gov.au
EDCM001.ato.gov.au
auth.efix.ato.gov.au
bp.status.ato.gov.au
provider.tr.super.ato.gov.au
bp.status.ato.gov.au
api-status.360cities.net
api-status.360cities.net
andrei.sterda.com
govcms.gov.au
cfg-statuspage.avetta.com
wickenby.ato.gov.au
*.dcl.ato.gov.au
basp.status.ato.gov.au
secure02.lithium.com
EDCH052PV.ato.gov.au
govcms.gov.au
as.zacharyhill.dev
basp.status.ato.gov.au
GSUH071PV.ato.gov.au
softwaredevelopers.ato.gov.au
basp.status.ato.gov.au
govcms.gov.au
ipp.efix.ato.gov.au
acme.kstars.org
govcms.gov.au
cfg-statuspage.avetta.com
appstatus.justworks.com
datatransfer.acc.ato.gov.au
cfg-statuspage.avetta.com
www.ato.gov.au
as.zacharyhill.dev
as.zacharyhill.dev
ion-status.rockcontent.com
por.ato.gov.au
secure02.lithium.com
vatoapp-hdx.acc.ato.gov.au
api-status.360cities.net
api-status.360cities.net
govcms.gov.au
acme.kstars.org
basp.status.ato.gov.au
am.ato.gov.au
cfg-statuspage.avetta.com
cfg-statuspage.avetta.com
secure10.lithium.com
basp.status.ato.gov.au
www.ato.gov.au
basp.status.ato.gov.au
auth.evte.ato.gov.au
bp.status.ato.gov.au
www.tdv.ato.gov.au
cfg-statuspage.avetta.com
staff.acc.ato.gov.au
basp.status.ato.gov.au
cfg-statuspage.avetta.com
onlineservices.reliance.efix.ato.gov.au
acme.kstars.org
api-status.360cities.net
awmdm.acc.ato.gov.au
govcms.gov.au
secure02.lithium.com
GSUH074PV.ato.gov.au
cfg-statuspage.avetta.com
as.zacharyhill.dev
vpn.ato.gov.au
secure02.lithium.com
as.zacharyhill.dev
bp.status.ato.gov.au
por.ato.gov.au
omnichannel.ato.gov.au
datatransfer.ato.gov.au
itsystemstatus.rfdsse.org.au
softwaredevelopers.ato.gov.au
govcms.gov.au
ausid1.perf.acc.ato.gov.au
community.ato.gov.au
acme.kstars.org
ion-status.rockcontent.com
roamvpn.acc.ato.gov.au
pki.ato.gov.au
www.ato.gov.au
GSUH072PV.ato.gov.au
sws.ato.gov.au
EDCB001.ato.gov.au
secure10.lithium.com
acme.kstars.org
bp.status.ato.gov.au
cfg-statuspage.avetta.com
cfg-statuspage.avetta.com
api-status.360cities.net
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
secure10.lithium.com
secure02.lithium.com
govcms.gov.au
govcms.gov.au
acme.kstars.org
basp.status.ato.gov.au
EDCM001.ato.gov.au
auth.efix.ato.gov.au
bp.status.ato.gov.au
provider.tr.super.ato.gov.au
bp.status.ato.gov.au
api-status.360cities.net
api-status.360cities.net
andrei.sterda.com
govcms.gov.au
cfg-statuspage.avetta.com
wickenby.ato.gov.au
*.dcl.ato.gov.au
basp.status.ato.gov.au
secure02.lithium.com
EDCH052PV.ato.gov.au
govcms.gov.au
as.zacharyhill.dev
basp.status.ato.gov.au
GSUH071PV.ato.gov.au
softwaredevelopers.ato.gov.au
basp.status.ato.gov.au
govcms.gov.au
ipp.efix.ato.gov.au
acme.kstars.org
govcms.gov.au
cfg-statuspage.avetta.com
appstatus.justworks.com
datatransfer.acc.ato.gov.au
cfg-statuspage.avetta.com
www.ato.gov.au
as.zacharyhill.dev
as.zacharyhill.dev
ion-status.rockcontent.com
por.ato.gov.au
secure02.lithium.com
vatoapp-hdx.acc.ato.gov.au
api-status.360cities.net
api-status.360cities.net
govcms.gov.au
acme.kstars.org
basp.status.ato.gov.au
am.ato.gov.au
cfg-statuspage.avetta.com
cfg-statuspage.avetta.com
secure10.lithium.com
basp.status.ato.gov.au
www.ato.gov.au
basp.status.ato.gov.au
auth.evte.ato.gov.au
bp.status.ato.gov.au
www.tdv.ato.gov.au
cfg-statuspage.avetta.com
staff.acc.ato.gov.au
basp.status.ato.gov.au
cfg-statuspage.avetta.com
onlineservices.reliance.efix.ato.gov.au
acme.kstars.org
api-status.360cities.net
awmdm.acc.ato.gov.au
govcms.gov.au
secure02.lithium.com
GSUH074PV.ato.gov.au
cfg-statuspage.avetta.com
as.zacharyhill.dev
vpn.ato.gov.au
secure02.lithium.com
as.zacharyhill.dev
bp.status.ato.gov.au
por.ato.gov.au
omnichannel.ato.gov.au
datatransfer.ato.gov.au
itsystemstatus.rfdsse.org.au
softwaredevelopers.ato.gov.au
govcms.gov.au
ausid1.perf.acc.ato.gov.au
community.ato.gov.au
acme.kstars.org
ion-status.rockcontent.com
roamvpn.acc.ato.gov.au
pki.ato.gov.au
www.ato.gov.au
GSUH072PV.ato.gov.au
sws.ato.gov.au
EDCB001.ato.gov.au
secure10.lithium.com
acme.kstars.org
bp.status.ato.gov.au
cfg-statuspage.avetta.com
cfg-statuspage.avetta.com
api-status.360cities.net
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
secure10.lithium.com
secure02.lithium.com
govcms.gov.au
govcms.gov.au
acme.kstars.org
Certificate
The complete raw certificate details for *.dcl.ato.gov.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmjCCBoKgAwIBAgIQBdVUItnT167ZHdllFTtP/DANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgxMjE4MDAwMDAwWhcNMjAxMjE3MTIwMDAwWjCBmDELMAkGA1UEBhMCQVUxJTAj BgNVBAgTHEF1c3RyYWxpYW4gQ2FwaXRhbCBUZXJyaXRvcnkxETAPBgNVBAcTCENh bmJlcnJhMSMwIQYDVQQKExpBdXN0cmFsaWFuIFRheGF0aW9uIE9mZmljZTEPMA0G A1UECxMGSW50ZWNoMRkwFwYDVQQDDBAqLmRjbC5hdG8uZ292LmF1MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw7ql0N3FPxkUGob7NLFAycf+5MTbMh7b OzdlMKe1LcAzKXFC+N2AJGHU//We1LD7LphiiuiYhofQBewlHrCPEFlHyyW7d+n+ 7iZOED72Lne21IRov0/cu6IlQ7owoEyrjEPbAo2sclQI8SZEJbaiM/6PXvIUy84H BpJdprToj9/zGXr93RO0leHfboU+pImv+p/p5Y5v9SY9d2kXvHPOEv6YALXFptQ+ gnOx9qN0oOD1MLlzSQZGf832LoGTwxDAx8qEl8QvqWHd52Fc/+jsS0+2wli3Rv5K JpxhVohuqYeOLhpo0v4GdxF3k5FQHooyIaG+A3GRdfhebz2par5NjrxW+v6TTdLf w6dKfPGwaDnNwwPnIuAkTDcyFIBxDYyaRXqkNSjsuche44bznYWgaQrQGvapygnE 5QZFfgPTnrivu10SossDzSIr9lzpKzXs1cAC5YNzqc+0JCoIPULpLG+ybwwlLY7c 0mpXKyvIi6rSQ5fSHahpzXRKGUh2tbR5Vg1/EhTObDbwm00v7RGW8Jv4hQWkmgZT cj20swpJHa+6s1TIHwzvwnp55LbJxhnwHJZ2/8lixKIuXGAvTeSs9uhpM+0O/YX0 cjgBVMns81Nno+IQYrkSAJn0QhDMKKLJGcQ0QhiCvOqTtQ3cLkVseiyoGXp1Eful grYHsphZ4RkCAwEAAaOCAxkwggMVMB8GA1UdIwQYMBaAFKPIXmVU5TB4wQXqBwpq Wcy5/t5aMB0GA1UdDgQWBBSxSH7+mfLscSwAG337UlihrRwf7DAbBgNVHREEFDAS ghAqLmRjbC5hdG8uZ292LmF1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50 aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgIwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8v c3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRo YXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfwYKKwYB BAHWeQIEAgSCAW8EggFrAWkAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2 jh7RhQAAAWe/t1vbAAAEAwBHMEUCIQDCTgEN4zE8bQUDxhdhodjBN9nKn3GXOF85 9E5YzkhzEAIgExTAG/cHTHQcGDXkY+ZNUTVl0RF/ClPn8cPxr9Y8kxUAdwCHdb/n WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWe/t1yyAAAEAwBIMEYCIQCI K0+J/XvqE9RPfoCNXKHQS11dcZ4w0UfecjChFcb5UAIhAIagAyF88p+Yq68esq1V rY8LhNPkqOxdnCH2ivuM8ugaAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFnv7ddNgAABAMARzBFAiAok1w1YCDpQU8rbpSwmJ24Yy0bYFla4xZX UZ8mjJMQjAIhAK1uEXqDcMkFlg7ckM4GjQE8Oa5E1dyt1zam3ptoUw85MA0GCSqG SIb3DQEBCwUAA4IBAQAaLg9zfcwicBmTCJ0sccIIxyBjaiz7LEcFBZ/ro0BvIWJU LJ4TRtKpJqPyGBhlNtn/P8OWDdlUKlpNEOe64w8iAGp2GDI5EIBOedjhr/cssAVB yMYU+lmpkNXzw0UwAhzCg1Pa3877+63K329iqiSuY3Q68RgabJjJuB8wQgl/+HLR 874Z3xgUlTmQDa3CE+WPWJ/yu46RmmxBpKNA5WHVWmbM5FY5T+fZXG+mw+5A53IN JDwEg8/sgvL1wE5Fn0dgcDSJKAIt23MKNM8Vu+/gHg0wk7Ve4dWf1SXM8UhnkXqz q1gcB+y+UaIPAVfulj43s6a6xGiHpQHwcwTaHedQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw7ql0N3FPxkUGob7NLFA ycf+5MTbMh7bOzdlMKe1LcAzKXFC+N2AJGHU//We1LD7LphiiuiYhofQBewlHrCP EFlHyyW7d+n+7iZOED72Lne21IRov0/cu6IlQ7owoEyrjEPbAo2sclQI8SZEJbai M/6PXvIUy84HBpJdprToj9/zGXr93RO0leHfboU+pImv+p/p5Y5v9SY9d2kXvHPO Ev6YALXFptQ+gnOx9qN0oOD1MLlzSQZGf832LoGTwxDAx8qEl8QvqWHd52Fc/+js S0+2wli3Rv5KJpxhVohuqYeOLhpo0v4GdxF3k5FQHooyIaG+A3GRdfhebz2par5N jrxW+v6TTdLfw6dKfPGwaDnNwwPnIuAkTDcyFIBxDYyaRXqkNSjsuche44bznYWg aQrQGvapygnE5QZFfgPTnrivu10SossDzSIr9lzpKzXs1cAC5YNzqc+0JCoIPULp LG+ybwwlLY7c0mpXKyvIi6rSQ5fSHahpzXRKGUh2tbR5Vg1/EhTObDbwm00v7RGW 8Jv4hQWkmgZTcj20swpJHa+6s1TIHwzvwnp55LbJxhnwHJZ2/8lixKIuXGAvTeSs 9uhpM+0O/YX0cjgBVMns81Nno+IQYrkSAJn0QhDMKKLJGcQ0QhiCvOqTtQ3cLkVs eiyoGXp1EfulgrYHsphZ4RkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7753805693371078888041872946177462268 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Australian Capital Territory' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canberra' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Australian Taxation Office' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intech' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dcl.ato.gov.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798505031766887761274341823026927981253931380237475110908357030989986607918547297020627372979545566200441471178539896255700052625395416671576917060542846309520227354682666753376455990957096735667623396338719588285892349008483362006180559515654602821882176809680257134037984204194287535466368198512026513704332878939280062325294666187119341984595934066023415952237997679454738032884928807967793149606764577147207276797102499274662388805493283259480639217305515285199636683292692389476854386668431251542486246444120687075566436859190353086638629519622108466868012567987218431707007874640545040098689448360770540025462368413095461301433950656207576859955070757822206636970165031681987664258730683300981734390023294069741364277950376622386119704524287769499545112221650778705350088306855818245723710943680103947328171526751817816247794888129048429180031200253588936364601866710547506494736620793814159700242340953862925260985799961133479923123597098637898438430883326781766704363749723405459847593671899022995384009516316144953145684390501472436639749147161322109222867482367343833343186530269718139447018518424302681432715432768948073016247144123059370418091235491020888949681071913211130564546367007041055927079592407816919281489797401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1487efe99f2ec712c001b7dfb5258a1ad1c1fec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcl.ato.gov.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167bfb75bdb0000040300473045022100c24e010de3313c6d0503c61761a1d8c137d9ca9f7197385f39f44e58ce48731002201314c01bf7074c741c1835e463e64d513565d1117f0a53e7f1c3f1afd63c93150077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167bfb75cb20000040300483046022100882b4f89fd7bea13d44f7e808d5ca1d04b5d5d719e30d147de7230a115c6f95002210086a003217cf29f98abaf1eb2ad55ad8f0b84d3e4a8ec5d9c21f68afb8cf2e81a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000167bfb75d360000040300473045022028935c356020e9414f2b6e94b0989db8632d1b60595ae31657519f268c93108c022100ad6e117a8370c905960edc90ce068d013c39ae44d5dcadd736a6de9b68530f39 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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