smartraveller.govcms.gov.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:85:74:36:60:9c:a6:e8:9a:2d:d7:2a:8e:67:58:cc:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smartraveller.govcms.gov.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:85:74:36:60:9c:a6:e8:9a:2d:d7:2a:8e:67:58:cc:bf
Serial Number (int): 305750956227782227681422404280366952664255
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:e7:25:0a:29:a1:e7:4e:70:50:c1:4e:bd:18:3f:99:d1:96:e2:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:67:e0:ae:65:b8:ce:1b:11:20:a6:3a:ec:47:ce:b1:ef:f8:a8:02
Fingerprint (sha256): 0d:d3:bd:4b:bf:0a:b3:8d:2a:cd:f4:84:8d:1d:84:d6:74:73:6e:58:2a:97:0d:09:8e:b7:04:1b:1e:77:25:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate smartraveller.govcms.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smartraveller.govcms.gov.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smartraveller.govcms.gov.au

Other certificates including the domain name govcms.gov.au

(limited to 100 certificates)
paas.govcms.gov.au
sec.govcms.gov.au
paas.govcms.gov.au
nla-handr.govcms.gov.au
austapprent.govcms.gov.au
govcms.gov.au
govteamsd8.govcms.gov.au
sec.govcms.gov.au
education.govcms.gov.au
govteamsd8.govcms.gov.au
sec.govcms.gov.au
govcms.gov.au
nnidr.govcms.gov.au
govteams.govcms.gov.au
govcms.gov.au
ministers-jobs.govcms.gov.au
nhmrc.govcms.gov.au
govcms.gov.au
dese-interim.govcms.gov.au
protectivesecurity.govcms.gov.au
naturehub.govcms.gov.au
sec.govcms.gov.au
meritprotectioncommission.govcms.gov.au
govcms.gov.au
projects.govcms.gov.au
studyassist.govcms.gov.au
govteamsd8.govcms.gov.au
iasc.govcms.gov.au
veteransemployment.govcms.gov.au
ipcnsw.govcms.gov.au
vhhsba-vic.govcms.gov.au
studyassist.govcms.gov.au
naa.govcms.gov.au
eea.govcms.gov.au
projects.govcms.gov.au
govcms.gov.au
sec.govcms.gov.au
sec.govcms.gov.au
australiangovernmentbonds.govcms.gov.au
naa.govcms.gov.au
sec.govcms.gov.au
sec.govcms.gov.au
webhooks.govcms.gov.au
govcms.gov.au
vhhsba-vic.govcms.gov.au
projects.govcms.gov.au
inlandrail.govcms.gov.au
sec.govcms.gov.au
myagedcare.govcms.gov.au
abr.govcms.gov.au
asqa2019.govcms.gov.au
trademinister.govcms.gov.au
agedcarequality.govcms.gov.au
health.govcms.gov.au
govcms.gov.au
govcms.gov.au
naturehub.govcms.gov.au
asbestosqld.govcms.gov.au
cyberasd.govcms.gov.au
ipcnsw.govcms.gov.au
ags.govcms.gov.au
smartraveller.govcms.gov.au
govcms.gov.au
meritprotectioncommission.govcms.gov.au
iasc.govcms.gov.au
paas.govcms.gov.au
fac-dhhsvic.govcms.gov.au
protectivesecurity.govcms.gov.au
govcms.gov.au
govcms.gov.au
community.govcms.gov.au
govcms.gov.au
pean.govcms.gov.au
docs-edu.govcms.gov.au
jobjumpstart.govcms.gov.au
govcmsd8.govcms.gov.au
protectivesecurity.govcms.gov.au
austrac.govcms.gov.au
indigenouscareers.govcms.gov.au
dofdirectory.govcms.gov.au
yourhome.govcms.gov.au
fines-sa.govcms.gov.au
dashboard.govcms.gov.au
minister-edu.govcms.gov.au
sellingtogov.govcms.gov.au
aofm.govcms.gov.au
sec.govcms.gov.au
govteams.govcms.gov.au
sec.govcms.gov.au
pean.govcms.gov.au
govcms.gov.au
govcms.gov.au
govcms.gov.au
asd.govcms.gov.au
rcdisability.govcms.gov.au
sec.govcms.gov.au
safeworkaust.govcms.gov.au
govteams.govcms.gov.au
esafety.govcms.gov.au
sec.govcms.gov.au

Certificate

The complete raw certificate details for smartraveller.govcms.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305750956227782227681422404280366952664255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 16:20:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 16:20:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smartraveller.govcms.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780674580143327017586080001976686664803704368730256174555904450215245146989938715736889790674748748533941105446580696424777405579733727053134465427425187161499888750607318730658515200272224540073574359023638593749172094267321419561544956942946569380121690598333903649419921008855782692276246338230173455731424463900654884059380710703092990052445171273020707658255908942832799924646440805165887407111909603570966123484167135476444126143270042056370983740017317049254851775713402244308378574020899687093605871600458263222857417670110681650386258632770418008757046648756045866112867903373258369792687660591390007189245137243231521614645030673999203166099002673719253902271376412126290329314201260346279435771150897534556265230512053781994441445900889047224986750982393851825559161935725856184466869429384367748359501572607205207300812649193038480168724122735903651429559462671597782923738568594481037067446741918804397237804359590680614384100026218237844047245926290491311876890288465542687400425464798453214497692400445765997731495172988045608853712460560478920634645410636228915860933294517680857022549674783815124162551770543882418187032960468635289029668282451286694992347136292925316650392381606506422721962713678576980130396144019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ae7250a29a1e74e7050c14ebd183f99d196e256
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartraveller.govcms.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c04fbf6b0000040300483046022100f9ea5a0798f578a1127d94c49c25dee4a2f4f435fdfbe8ff9f62307b43707ed1022100f1fd12a9a98a4dc3a70eaa29850b389839d2d43fe7c9a9faeed1384adb9e723d007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170c04fbf7300000403004730450221008ed4e5fe595a782553cc9b6f8ff93eba1fb4b53625c803338dadb158c38b341e022044bca14601a8ebb4c2d9f2db234bb7a5ebd21d82b75bd88d68552ac99f3dd8b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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