*.dcl.ato.gov.au

- Australian Taxation Office -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:d5:54:22:d9:d3:d7:ae:d9:1d:d9:65:15:3b:4f:fc was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Australian Taxation Office

Organization: Australian Taxation Office
Organization unit: Intech
State / Province: Australian Capital Territory
Locality: Canberra
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d5:54:22:d9:d3:d7:ae:d9:1d:d9:65:15:3b:4f:fc
Serial Number (int): 7753805693371078888041872946177462268
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b1:48:7e:fe:99:f2:ec:71:2c:00:1b:7d:fb:52:58:a1:ad:1c:1f:ec
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): bc:e7:5c:54:de:54:0d:41:d2:08:67:b7:06:b7:2c:3e:02:f0:35:d8
Fingerprint (sha256): 01:a6:d6:ef:fb:3b:2e:99:b7:41:d4:b5:66:1b:15:d2:9a:f9:ca:34:f4:f4:5a:72:f6:7f:ae:db:51:0f:a6:c5

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.dcl.ato.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dcl.ato.gov.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dcl.ato.gov.au

Other certificates including the domain name ato.gov.au

(limited to 100 certificates)
provider.tr.super.ato.gov.au
basp.status.ato.gov.au
EDCM001.ato.gov.au
auth.efix.ato.gov.au
bp.status.ato.gov.au
provider.tr.super.ato.gov.au
bp.status.ato.gov.au
api-status.360cities.net
api-status.360cities.net
andrei.sterda.com
govcms.gov.au
cfg-statuspage.avetta.com
wickenby.ato.gov.au
*.dcl.ato.gov.au
basp.status.ato.gov.au
secure02.lithium.com
EDCH052PV.ato.gov.au
govcms.gov.au
as.zacharyhill.dev
basp.status.ato.gov.au
GSUH071PV.ato.gov.au
softwaredevelopers.ato.gov.au
basp.status.ato.gov.au
govcms.gov.au
ipp.efix.ato.gov.au
acme.kstars.org
govcms.gov.au
cfg-statuspage.avetta.com
appstatus.justworks.com
datatransfer.acc.ato.gov.au
cfg-statuspage.avetta.com
www.ato.gov.au
as.zacharyhill.dev
as.zacharyhill.dev
ion-status.rockcontent.com
por.ato.gov.au
secure02.lithium.com
vatoapp-hdx.acc.ato.gov.au
api-status.360cities.net
api-status.360cities.net
govcms.gov.au
acme.kstars.org
basp.status.ato.gov.au
am.ato.gov.au
cfg-statuspage.avetta.com
cfg-statuspage.avetta.com
secure10.lithium.com
basp.status.ato.gov.au
www.ato.gov.au
basp.status.ato.gov.au
auth.evte.ato.gov.au
bp.status.ato.gov.au
www.tdv.ato.gov.au
cfg-statuspage.avetta.com
staff.acc.ato.gov.au
basp.status.ato.gov.au
cfg-statuspage.avetta.com
onlineservices.reliance.efix.ato.gov.au
acme.kstars.org
api-status.360cities.net
awmdm.acc.ato.gov.au
govcms.gov.au
secure02.lithium.com
GSUH074PV.ato.gov.au
cfg-statuspage.avetta.com
as.zacharyhill.dev
vpn.ato.gov.au
secure02.lithium.com
as.zacharyhill.dev
bp.status.ato.gov.au
por.ato.gov.au
omnichannel.ato.gov.au
datatransfer.ato.gov.au
itsystemstatus.rfdsse.org.au
softwaredevelopers.ato.gov.au
govcms.gov.au
ausid1.perf.acc.ato.gov.au
community.ato.gov.au
acme.kstars.org
ion-status.rockcontent.com
roamvpn.acc.ato.gov.au
pki.ato.gov.au
www.ato.gov.au
GSUH072PV.ato.gov.au
sws.ato.gov.au
EDCB001.ato.gov.au
secure10.lithium.com
acme.kstars.org
bp.status.ato.gov.au
cfg-statuspage.avetta.com
cfg-statuspage.avetta.com
api-status.360cities.net
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
secure10.lithium.com
secure02.lithium.com
govcms.gov.au
govcms.gov.au
acme.kstars.org

Certificate

The complete raw certificate details for *.dcl.ato.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7753805693371078888041872946177462268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Australian Capital Territory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canberra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Australian Taxation Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intech'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dcl.ato.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798505031766887761274341823026927981253931380237475110908357030989986607918547297020627372979545566200441471178539896255700052625395416671576917060542846309520227354682666753376455990957096735667623396338719588285892349008483362006180559515654602821882176809680257134037984204194287535466368198512026513704332878939280062325294666187119341984595934066023415952237997679454738032884928807967793149606764577147207276797102499274662388805493283259480639217305515285199636683292692389476854386668431251542486246444120687075566436859190353086638629519622108466868012567987218431707007874640545040098689448360770540025462368413095461301433950656207576859955070757822206636970165031681987664258730683300981734390023294069741364277950376622386119704524287769499545112221650778705350088306855818245723710943680103947328171526751817816247794888129048429180031200253588936364601866710547506494736620793814159700242340953862925260985799961133479923123597098637898438430883326781766704363749723405459847593671899022995384009516316144953145684390501472436639749147161322109222867482367343833343186530269718139447018518424302681432715432768948073016247144123059370418091235491020888949681071913211130564546367007041055927079592407816919281489797401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1487efe99f2ec712c001b7dfb5258a1ad1c1fec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcl.ato.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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