*.citrix.det.nsw.edu.au

- NSW Department of Education -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3f:9d:7f:c9:e9:46:a2:45:99:44:03:82 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSW Department of Education

Organization: NSW Department of Education
State / Province: New South Wales
Locality: Sydney
Country: AU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:9d:7f:c9:e9:46:a2:45:99:44:03:82
Serial Number (int): 19687960437572420449666859906
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: cc:9a:7c:eb:59:a6:b9:86:4c:db:54:c0:d0:c1:ab:f0:a4:af:2f:f5
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 0a:cf:43:44:66:c9:da:ad:fe:d7:3d:bd:1f:8c:ea:08:42:e7:69:37
Fingerprint (sha256): 03:08:ae:d6:0e:17:68:04:7d:0e:83:fd:f9:1f:bf:d4:39:d2:4f:21:4f:e0:b1:3e:d3:16:4e:95:54:b0:fd:b6

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.citrix.det.nsw.edu.au

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.citrix.det.nsw.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.citrix.det.nsw.edu.au
*.sso.citrix.det.nsw.edu.au
citrix.det.nsw.edu.au

Other certificates including the domain name det.nsw.edu.au

(limited to 100 certificates)
search.det.nsw.edu.au
skypool1.det.nsw.edu.au
gq2.sap.pre.det.nsw.edu.au
hrsap.test.det.nsw.edu.au
sso.det.nsw.edu.au
sapD7.dev.det.nsw.edu.au
parentuat.test.det.nsw.edu.au
myemail.tst.det.nsw.edu.au
amxadmin.dev.det.nsw.edu.au
console.obs.dev.nsw.education
cloudconnector.det.nsw.edu.au
Access.dev.det.nsw.edu.au
*.citrix.dmz.det.nsw.edu.au
skyPool1.tst.det.nsw.edu.au
openam.pre.det.nsw.edu.au
*.citrix.det.nsw.edu.au
sapc0.cnb.det.nsw.edu.au
sso.det.nsw.edu.au
detwww.det.nsw.edu.au
fsa.citrix.det.nsw.edu.au
akamaisecure8.qualtrics.com
prcws.det.nsw.edu.au
esb.test.det.nsw.edu.au
teach.nsw.edu.au
www.theschoolmagazine.com.au
astp.api.dev.det.nsw.edu.au
myemail.devexch.det.nsw.edu.au
skypool1.det.nsw.edu.au
sso.dev.det.nsw.edu.au
staff.det.nsw.edu.au
mantis.dev.det.nsw.edu.au
3pi.det.nsw.edu.au
testjboss7.apps.test.det.nsw.edu.au
pa0991skyson01.dmz.det.nsw.edu.au
portalsrvs.det.nsw.edu.au
bud.apps.test.det.nsw.edu.au
homesteadems.det.nsw.edu.au
guestportal.det.nsw.edu.au
ssoam.dev.det.nsw.edu.au
jira.preprod.det.nsw.edu.au
www.train.det.nsw.edu.au
api.schools.telemetryplatform.apps.det.nsw.edu.au
console.mtm.apps.det.nsw.edu.au
webtest.det.nsw.edu.au
akamaisecure8.qualtrics.com
servicemanagement.uat.det.nsw.edu.au
portalsrvs.test.det.nsw.edu.au
pa0991vixca001.vi.det.nsw.edu.au
test-datacollections.det.nsw.edu.au
*.library.det.nsw.edu.au
sapQ1.pre.det.nsw.edu.au
IAPMWebService.dev.det.nsw.edu.au
MaD-UAP.dev.det.nsw.edu.au
jira.preprod.det.nsw.edu.au
jboss7mgmtapi.det.nsw.edu.au
mantis.test.det.nsw.edu.au.det.nsw.edu.au
api.telemetryplatform.apps.det.nsw.edu.au
lms.det.nsw.edu.au
ddac.test.det.nsw.edu.au
myemail.det.nsw.edu.au
parent.det.nsw.edu.au
qlik.det.nsw.edu.au
online.train.det.nsw.edu.au
awms-sydney.det.nsw.edu.au
akamaisecure8.qualtrics.com
PV0992RPCS0201.messaging.det.nsw.edu.au
jira.education.nsw.gov.au
eccservices.pre.det.nsw.edu.au
sapQ8.pre.det.nsw.edu.au
prcws.det.nsw.edu.au
*.amp.det.nsw.edu.au
edod.det.nsw.edu.au
build.det.nsw.edu.au
ws3pi.test.det.nsw.edu.au
*.withwild.nosan.test.det.nsw.edu.au
extranet.det.nsw.edu.au
SkypeOfficeonline.dev.det.nsw.edu.au
schoolsfinance.det.nsw.edu.au
access.uat.det.nsw.edu.au
studentint.pre.det.nsw.edu.au
portal.det.nsw.edu.au
mgmtvpn.det.nsw.edu.au
lmbrsso.det.nsw.edu.au
ph0992ntxuc004.nutanix.det.nsw.edu.au
ws3pi.det.nsw.edu.au
wfpinstall.det.nsw.edu.au
fp1.det.nsw.edu.au
airwave.amp.det.nsw.edu.au
sapQ00.pre.det.nsw.edu.au
purchasing.det.nsw.edu.au
unixvcs.services.det.nsw.edu.au
nowild.nosan.mfasdk.priv.det.nsw.edu.au
pw0992util0101.ad.det.nsw.edu.au
portal.test.det.nsw.edu.au
dp.det.nsw.edu.au
j50-lb.det.nsw.edu.au
unixvcs.services.det.nsw.edu.au
doechanges.det.nsw.edu.au
ams.det.nsw.edu.au
awms.det.nsw.edu.au

Certificate

The complete raw certificate details for *.citrix.det.nsw.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIMP51/yelGokWZRAOCMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTgwNTMwMjMyNjA0WhcNMjAwNTMwMjMyNjA0WjCBgDELMAkGA1UEBhMC
QVUxGDAWBgNVBAgTD05ldyBTb3V0aCBXYWxlczEPMA0GA1UEBxMGU3lkbmV5MSQw
IgYDVQQKExtOU1cgRGVwYXJ0bWVudCBvZiBFZHVjYXRpb24xIDAeBgNVBAMMFyou
Y2l0cml4LmRldC5uc3cuZWR1LmF1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqTNUOmltC7yHOM06sdUfHLa23zi53KuEEVoBRZZujca1chHenB+fhL/0
kE6sz+aFcRK21DtHujTbPKNQScADJRcv66UvkbtRdagV3pAluIqgv/omoMwFcPUt
3X8ONxVY5R13FOYO0Qw9LsBtQIsclg1Q16flkwhqDfyjx7ENj49N+XpmGq5smj1C
NGhqOlkqyeoqOKqd3oMCaHCjg/pD41Hxe3eLBWwSAGcxkrIvdzuscB9wWPEfAj6W
NT2EJ8iCVWhDT4/S+I42fujvfG3ObXc915/xPcOy6pxqU1627jh0qydKneLh4vT2
qK1rWMQn4vOVpCamCjL/GfxeBjxxqQIDAQABo4IDnTCCA5kwDgYDVR0PAQH/BAQD
AgWgMIGgBggrBgEFBQcBAQSBkzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJy
MS5jcnQwPwYIKwYBBQUHMAGGM2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9n
c29yZ2FuaXphdGlvbnZhbHNoYTJnMjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADBJBgNVHR8EQjBAMD6gPKA6hjhodHRw
Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dzb3JnYW5pemF0aW9udmFsc2hhMmcy
LmNybDBWBgNVHREETzBNghcqLmNpdHJpeC5kZXQubnN3LmVkdS5hdYIbKi5zc28u
Y2l0cml4LmRldC5uc3cuZWR1LmF1ghVjaXRyaXguZGV0Lm5zdy5lZHUuYXUwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTMmnzrWaa5hkzb
VMDQwavwpK8v9TAfBgNVHSMEGDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYafDCCAX0G
CisGAQQB1nkCBAIEggFtBIIBaQFnAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgX
L6OqHQcT0wwAAAFjs190hgAABAMARzBFAiBFUbxPIU+p8dit38HNi6Rd72oXQBFh
HbJ108LVG4ItxQIhAOQtsH+h5gHmfMOG1nL67LzvBvJsUqtEWZ9XDOW6pMt1AHYA
u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFjs191vQAABAMARzBF
AiEAzyXTbNFPds8bYsxK7KM9GBZ4w/W9hIl29FWJVw5JsBECIGClnLQVBa5mp55p
0RbTqLGsatULSni2T4l/tUcbxasyAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp
Bo2yCJo32RMAAAFjs191iQAABAMARjBEAiBzVe4yq4G4r929hGYAPTrDvn5OK32e
cohestmuQUsIfwIgFRgPFDBld53He8sDfkToF9vXiwl+e5LD1DrcVkA+q5MwDQYJ
KoZIhvcNAQELBQADggEBAK9/1UADS9kAvFUV482QGeWp70cxLMX7WkZorL603X1Q
yjQvKICqeuDnidAgtcfIxp0IufUiBkfL8BnvllwgpgHDff1gvCD0llsOMx+YWuEI
xlRL4n2KreBozmGx46KaFNg4lYa87ZRNIgYkYNxu4x61E84kSXs7R0mtPwcPT93x
ezgV73TAMIN5O4c8Rhe2PWBlMk5e2iPP9A0anw8/ASrqzsMY1R9vO/q9yrDMy73T
DMGazsdYbiru+H87Zn/xx9kZhcEf5rQJbmxPaP7Noh/NpDb5m60nXJ2vcHY2rt7Y
+xuyqirUFe1eCpd0zEaDk/gOUGX07Gf5kyqdaF+idIo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTNUOmltC7yHOM06sdUf
HLa23zi53KuEEVoBRZZujca1chHenB+fhL/0kE6sz+aFcRK21DtHujTbPKNQScAD
JRcv66UvkbtRdagV3pAluIqgv/omoMwFcPUt3X8ONxVY5R13FOYO0Qw9LsBtQIsc
lg1Q16flkwhqDfyjx7ENj49N+XpmGq5smj1CNGhqOlkqyeoqOKqd3oMCaHCjg/pD
41Hxe3eLBWwSAGcxkrIvdzuscB9wWPEfAj6WNT2EJ8iCVWhDT4/S+I42fujvfG3O
bXc915/xPcOy6pxqU1627jh0qydKneLh4vT2qK1rWMQn4vOVpCamCjL/GfxeBjxx
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19687960437572420449666859906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-30 23:26:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 23:26:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSW Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.citrix.det.nsw.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21359584820562675284832166933187856364158652074045259181794563820911116725974009254822812328494430933672262994965163047278524036083006481028317613702982432899738548556910454310878438078694640420004485897156929948391396458697248409906546689095468814032394308707891300298324314691940783187181368560697875994389852777300582156361646098102880035423929439798842916957199539077452891799922962437919940897990757341060913656469771897700965866109992917200007624731679835535320948706198035620967005977725753285650589833983364247198613369554411653949618353712966065719692605859208604137900053940859413839432885483992146471842217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citrix.det.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sso.citrix.det.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.det.nsw.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc9a7ceb59a6b9864cdb54c0d0c1abf0a4af2ff5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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