members.assa.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:a5:9a:ce:ec:c7:51:c7:d0:06:59:a0:93:c0:fc:b1:e7 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=members.assa.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b3:a5:9a:ce:ec:c7:51:c7:d0:06:59:a0:93:c0:fc:b1:e7
Serial Number (int): 322467527904085361471444312989899570328039
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:bc:08:bb:f7:e1:e6:3f:57:66:ca:ad:fc:3c:b2:d5:1b:ee:86:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:d2:55:50:09:5f:46:41:c5:40:77:c3:14:d1:63:f5:45:c0:8b:74
Fingerprint (sha256): 05:5a:6f:32:62:c5:10:e8:d9:cf:24:7d:7c:fe:a6:28:f8:ef:a9:ec:1e:5b:2b:c3:28:b0:dd:27:97:2a:d4:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate members.assa.com.au

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for members.assa.com.au

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dulux.assa.com.au
dulux.assanz.co.nz
duluxaccredited.assa.com.au
duluxaccredited.assanz.co.nz
members.assa.com.au
members.assanz.co.nz
www.assatest.com

Other certificates including the domain name assa.com.au

(limited to 100 certificates)
connect.betterspace360.com
subscriptions.cmfx.app
connect.macleodmarketinggroup.com
members.assa.com.au
new.assagroup.com.au
soporte.consolidargentina.com
cliq.skylineclean.com
support.detect-measure.com
subscriptions.whatsscore.com
connect.assa.com.au
survey.fiscalally.com
assa.com.au
assa.com.au
connect.desotollc.com
cxcsupport.1on1lms.com
support.detect-measure.com
subscriptions.voolama.co
billing.wildamerica.earth
customer.be-gb.co.uk
connect.macleodmarketinggroup.com
connect.macleodmarketinggroup.com
get.itransport.help
connect.techcompanyinc.net
forms.cabinrentalpros.com
connect.macleodmarketinggroup.com
connect.snaplitics.com
connect.macleodmarketinggroup.com
subscriptions.guruthetrainer.com.au
get.itransport.help
connect.macleodmarketinggroup.com
support.detect-measure.com
tcpa.modassystems.com
subscriptions.whatsscore.com
connect.macleodmarketinggroup.com
subscriptions.whatsscore.com
survey.steveolsonconsulting.com
support.detect-measure.com
connect.macleodmarketinggroup.com
subscriptions.trueup.ca
support.detect-measure.com
subscriptions.uptime365.com
securepay.assa.com.au
customercare.pharmaca.com
connect.macleodmarketinggroup.com
connect.todaycfo.com
connect.macleodmarketinggroup.com
subscription.beekast.com
new.assagroup.com.au
connect.agilean.ca
billing.scottsystems.com
connect.agilean.ca
support.detect-measure.com
billing.ameritrex.net
subscriptions.unicornauthors.club
subscriptions.whatsscore.com
get.itransport.help
subscriptions.unicornauthors.club
form.gibsonplumbing.com
get.itransport.help
connect.macleodmarketinggroup.com
billing.scottsystems.com
connect.macleodmarketinggroup.com
connect.macleodmarketinggroup.com
subscriptions.whatsscore.com
forms.cabinrentalpros.com
connect.mindrenewer.com
billing.ameritrex.net
contact.purefluent.com
subscriptions.guruthetrainer.com.au
survey.docusketch.com
get.itransport.help
subscriptions.whatsscore.com
connect.macleodmarketinggroup.com
connect.macleodmarketinggroup.com
support.detect-measure.com
connect.macleodmarketinggroup.com
*.assa.com.au
forms.cabinrentalpros.com
customercare.pharmaca.com
get.itransport.help
connect.macleodmarketinggroup.com
customercare.pharmaca.com
subscriptions.guruthetrainer.com.au
support.netixsolutions.com
support.detect-measure.com
app.itsecnow.com
subscriptions.voolama.co
connect.macleodmarketinggroup.com
connect.axia.agency
register.autobidbroker.com
connect.macleodmarketinggroup.com
billing.ameritrex.net
support3.thandora.com
get.itransport.help
subscriptions.uptime365.com
support.flatworld.ph
connect.exterro.com
connect.macleodmarketinggroup.com
billing.scottsystems.com
subscriptions.trueup.ca

Certificate

The complete raw certificate details for members.assa.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAqI6g9XXVvrxFLRZEwt2s
P/phqUBJYyhHTb8aVo0Xf+HLM1ctqFGUR9UmPY5yybM9Rlm9NFpB94i4U8Ia51BP
F74tvbNvgMs7Z5jm1xCe1+ATL5K62ulXbkrnQyMp7ZdHee0S+HeXu4+A513VCdL1
lme6z9U0Jzf68YSsm/xNWinHsnEFSfnaePZd+MHqSypqY/G5zXI6hfZSyX960+Z1
ttTJXbeNlM9QiZAWDAVC8eMzl9IU2eQ75+UnsSTCQVB2mKigPj5y83r/CxP7Xsov
KsCpPJPW4mgU5hKjCER3H4i8K3dJ5/5i4sz/5YimtN96Zok8o+y1+Hrotn4Unt0g
zaNfVOfUh4XYNDo7bz51E/XEkwqU3hO7CWr9neljCzqAUZxcAG9kzD9eOpXyVyJd
l7c+ln2EIIHh+3i6W6rx9NHKXA2fYF4OorwTpeXzRcpLimKcDe16+Ik5BK9P1c/m
pmV1k9jO1n/ajrZhlVtfejQAiQ86p2CalrJk/xHLxCQBAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322467527904085361471444312989899570328039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 00:00:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 00:00:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'members.assa.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3825197623648299626189945513067930954493736136441764759495193114558657825530063856838556377441235380094814726925896888604278258518369173493189839304017899303049330938663739698162809895634754125862511811060661246239753433211971812941167000156466491226181133722785051512179676345443441870687831658991569261377234154073562251401650795988601921123918624388793677377376082602580257332904835870348293184205627362603748724347028011638455424263117592666964158758808263975464637067407141561813535830529970504164760396471226252882758272734106815253575758221650868614036897375117060134333656201767175207120527101878706784439051034465761850086070343603255653268443962467125449598201943813906404358376994020068338879547363888457782116358904845643756836976739202592661619829456622472470161258695355502213029364493196931049303687590137819672016531085050674735918833835366053274751040503508484078141890481914025282644236064767906866046182401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07bc08bbf7e1e63f5766caadfc3cb2d51bee862c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dulux.assa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dulux.assanz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluxaccredited.assa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluxaccredited.assanz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.assa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.assanz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assatest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eb0eb7b4a0000040300463044022054fc34f8ea6504010d84cd8874df5966e410333a5c23c1f8b0d6718d6ac9e16002206af04ba7c905630cb56b5f094cae6fb7ad850efd097d1c013cc61595e940384b0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eb0eb7b4a00000403004630440220620ba957fc5b173de24d5560aa92f27607d6bcbd01dcf973215c7413fbb850ca022029806d74f39d8866bc6bb2e35ae36e2c9104e9d764edb4bf1a6ba172fd21c3cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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