*.hit.com.au

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0f:6f:b4:ff:93:e2:b1:35:54:b9:aa:9d:78:69:9d:35 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.hit.com.au

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:6f:b4:ff:93:e2:b1:35:54:b9:aa:9d:78:69:9d:35
Serial Number (int): 20518435970749552920027021348707081525
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:06:b5:b5:34:48:2c:f6:23:59:05:e5:70:b3:fb:29:26:12:05:1a
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 7a:9a:6c:a9:76:eb:62:4d:e5:a2:d6:9b:85:6e:05:9b:d9:97:ed:ab
Fingerprint (sha256): 0c:25:65:7f:a7:39:31:76:9e:ec:27:0c:a7:25:b4:84:8a:a4:26:2b:53:d1:2d:e2:13:06:78:7a:58:90:d8:5a

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.hit.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hit.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hit.com.au
hit.com.au

Other certificates including the domain name hit.com.au

(limited to 100 certificates)
app.klokka.com
www.hit.com.au
sni.cloudflaressl.com
*.hit.com.au
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
my.hit.com.au
san-17-s12.tlsprovisioning.exacttarget.com
*.hit.com.au
my.hit.com.au
javierfcast.com
*.hit.com.au
platform.onlinesales.ai
san-17-s12.tlsprovisioning.exacttarget.com
www.dent.claims
san-17-s12.tlsprovisioning.exacttarget.com
www.welt-capital.com
san-17-s12.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
www.hit.com.au
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
www.dicksword.xyz
www.hansknapp.art
san-17-s12.tlsprovisioning.exacttarget.com
www.hit.com.au
*.hit.com.au
san-17-s12.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
chargefinder.com
*.hit.com.au
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
*.hit.com.au
eravea.io
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
*.hit.com.au
sni.cloudflaressl.com
sni.cloudflaressl.com
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
dev.ashreinu.app
ssl747806.cloudflaressl.com
san-17-s12.tlsprovisioning.exacttarget.com
www.hit.com.au
*.hit.com.au
foodmigo.com
unspoken-staging.cixos2.com
www.alilex.com
san-17-s12.tlsprovisioning.exacttarget.com
debicheck.co.za
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
chargefinder.com
san-17-s12.tlsprovisioning.exacttarget.com
san-17-s12.tlsprovisioning.exacttarget.com
ssl747806.cloudflaressl.com
www.wreely.com
san-17-s12.tlsprovisioning.exacttarget.com
www.matahari-amsterdam.nl
*.hit.com.au
ssl747806.cloudflaressl.com
cash-airport.de
sni.cloudflaressl.com
sni.cloudflaressl.com
san-17-s12.tlsprovisioning.exacttarget.com
sarai.3ayez.com
dev.go-cream.com
*.hit.com.au
www.hit.com.au
app.tanyagundi.com
san-17-s12.tlsprovisioning.exacttarget.com
www.wreely.com
ssl747805.cloudflaressl.com
san-17-s12.tlsprovisioning.exacttarget.com
hit.com.au

Certificate

The complete raw certificate details for *.hit.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15KI4HHfiV6e43W1p9cz
Ind9qjz0tyzcs/UwGz3FEAzDNb3betelOPZFxlmSfcVh/6DtmDNKtA3CLDZFt838
jmjYUy917ejQYzgXisNdcjMSppOuqgiPsrsgqH1SNiFScegcM2yWWmoufeGp9dir
HXWoLvZQVSjd0JpfZ7Qwt2BLY89tEGYDvxd18vmETpinyZs6DD2h6AB4sdXqhDHe
jaTCis9+pAcMbua4hd8Eb7Oj5vMbKzUoGedFmMqlR1MxLfwTvV2PxPPCCKhIDWxx
cbABoG2FZ4YkLRZBeB9KO9h3I7h0Rh01WG+5xCRN5JjHn/o5/Va8iL85HFs6m38Y
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20518435970749552920027021348707081525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hit.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27213494508952468703594590571458158396033240383862922330488004111285764659535582486149488716889339800791955134626467207957537387733074573339853832008845718977467450851227542699450384335426800652815566534353459991133737841425881239637760466250407012815630435799679626606641194232309961947045217041866903919179828157306424449156757609976675560195701559212724176815528876524434823506755518301781444822441877494947313847040275564229541632557895612990024297674596436628465728411910813545909403860071898454778919515727258200112196186335665755326751363473819057269137263460422998099134728311947897697237909095204019479976107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2606b5b534482cf6235905e570b3fb292612051a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hit.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170c3011c84000004030046304402205381a03e0f02d83d4a4c748415abdd224a29ac1fd49285efef0edd4f64d10b1802207ad9381cf87c4953efcb308a3c604f92aee5a32bf577b5914132505f9df819c5007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f900000170c3011cf80000040300473045022100a19d34c6525b7396f9de8cf3834b1933a764bc69a309779792adb5a1a12764cd022053f7467c8e5d41a77473d58d84e3d594ec27b71e95a4706abf1ddaa9200785cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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