AU30QU2-internal.anz.com

- Australia and New Zealand Banking Group Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:8a:8a:bb:00:d5:e9:62:84:a2:bc:98:7a:a7:0d:65 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Australia and New Zealand Banking Group Ltd

Organization: Australia and New Zealand Banking Group Ltd
Organization unit: Technology
State / Province: Victoria
Locality: Docklands
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:8a:8a:bb:00:d5:e9:62:84:a2:bc:98:7a:a7:0d:65
Serial Number (int): 17999314700132009986743087577868733797
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:f9:6b:a2:7e:d5:30:51:52:3c:46:c4:84:50:fc:5e:6d:d7:1e:bf
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a9:a2:fe:7b:08:f0:0c:e1:1a:81:32:7b:35:f5:f3:f5:e3:c8:65:3f
Fingerprint (sha256): 02:16:39:a8:38:ec:db:ec:29:46:40:b0:38:ca:52:05:ce:c4:77:60:e8:bd:a0:33:bd:54:1e:12:d4:2b:a3:43

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate AU30QU2-internal.anz.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for AU30QU2-internal.anz.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

AU30QU2-internal.anz.com

Other certificates including the domain name anz.com

(limited to 100 certificates)
www.anz.com.au
portal.docs.anz.com
mobilepayments.anz.com
api.anz.com
magr.mdmqa.anz.com
www.cashactive.anz.com
travel.businessrewards.anz.com
merchandise.anz.com
fileactive.prod.anz.com
smartchoice.anz.com
fusion.cashactive.anz.com
mstcl3.anz.com
www.integrity.anz.com
booknpay.anz.com
tscportalid.online.anz.com
mac.mdm.anz.com
wealth.anz.com
imperva.com
AU30QU2-internal.anz.com
docs.anz.com
api1.anz.com
bb2status.mambu.com
imperva.com
web1.notifications.anz.com
corporateloans.anz.com
sstats.shareinvesting.anz.com
yoursay.anz.com
tscid.online.anz.com
inwardunauthb2b.apps.anz.com
TestProdExternalCertificate.anz.com
webauthdcc.anz.com
anzid.anz.com
staging-www.anz.com.au
collect.anz.com
surveys.anz.com
samlsigning.anz.com
fb.prod.search.anz.com
shareholder.anz.com
propertytracker.anz.com
ematchingnz2.online.anz.com
testingkalyan.anz.com
magr.mdm.anz.com
imperva.com
ExtMailinboundEdge.anz.com
ebanking.guam.anz.com
www.wealth.anz.com
donotreply.retailentitlementoffer.anz.com
anzweblink.online.anz.com
tscid.online.anz.com
prod-ams.anz.com
bb2status.mambu.com
www.theedge.anz.com
onlineapplications.anz.com
fxonline1.anz.com
gcptransactive.online.anz.com
www.anz.com.au
demo1.fxonline.anz.com
news.anz.com
qa.mindset2030.anz.com
banking4.anz.com
nonprod-inwardunauthb2bqa.anz.com
mobilelending.anz.com
sfxanzweblink.online.anz.com
APIBCARDAUTHPREPROD.ANZ.com
MYPORTFOLIOSIM.anz.com
bb2status.mambu.com
discover.anz.com
onlineapplications.anz.com
aemauthor1.aws.privdmz.anz.com
yulendj.anz.com
www.cashactive.anz.com
login.anz.com
businessrewards.anz.com
bb2status.mambu.com
svc.pega.anz.com
growinsights.anz.com
d1.L1.OCSP.anzpki.anz.com
ens2.mdmpp.anz.com
imperva.com
IDCBS501-internal.anz.com
uagr.mdmqa2.anz.com
root.ocsp.anzpki.anz.com
onlineapplications.anz.com
au.corp.mydesk.anz.com
growcentre.anz.com
sg.anz.com
digitalkey.anz.com
debtinvestors.anz.com
Anzconnectmw.anz.com
au062-internal.anz.com
waf1x.anz.com
jmbl.anz.com
webauthecc.anz.com
www.anz.com.au
esxau002mel0535-mgt.global.anz.com
bb2status.mambu.com
icmpc2d.c2e.anz.com
fabric-preprod.anz.com
travelcard.anz.com
anzbankuatsuccessfactor.anz.com

Certificate

The complete raw certificate details for AU30QU2-internal.anz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm3MhCsPmJALm4LOoUQA
cvWdMScug12vXQgLT0SqdjKAZu8nbPBhFx/WAlS2o0D5rpwrBLTQ+QOKvHcCZ/x+
B/jdGUguZXdfIxgIWc7Ku6Q63CcX35fWFNwc1IcRIt06CHsx5vCEEJHT+VAh1a4t
5ZoLQCqErzvqNkCKQRS7dlltH/FMaLtAia7VDQAFFE9d3TmCu5jkZSBJROLTdNTw
191EprC9G/4Rhm6bNsxWBtNXbzqav5925jtpG+2cKyZJPKE/+FxZEpCwsENnnDh7
H+TxlgPNaAvKlNwF2lc0BB5T8076td12szrcqz5xI6EGxUJ0tNLa+9bCqr/B3mVb
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17999314700132009986743087577868733797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Docklands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Australia and New Zealand Banking Group Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU30QU2-internal.anz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19999796036116720960189360511212563313367414390064676985340595678358599878724354455755482945390878014192785602611669066160533536163808367718806238210791382273541801060309366026409564177574352867336359038996338904290267437091124235234214683259041240269712789669895575020458890722330677111087821693552457425485525885236407463251483849686415537950462074312777478675954541745250618990557000759729718253350830177366270076855951842467342400283577340194227420934142657423922703179500334880808629250559902059466945250786097618309880170501405866673028149295510614449100181886561927942977090458879005186582411255243166508735279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adf96ba27ed53051523c46c48450fc5e6dd71ebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AU30QU2-internal.anz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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