canterbury.qld.edu.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f0:88:93:18:40:f3:57:d1:58:1d:79:e3:17:23:00:da:5b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canterbury.qld.edu.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f0:88:93:18:40:f3:57:d1:58:1d:79:e3:17:23:00:da:5b
Serial Number (int): 430298450555054914907167749018702789532251
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 79:83:59:25:f7:8b:b2:3d:36:ca:41:60:7f:17:ae:4e:31:a7:e7:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:c4:53:3a:6f:bc:6f:d6:de:51:8a:6e:ec:0d:57:3c:9e:ac:fd:df
Fingerprint (sha256): 16:ef:13:78:19:7d:8f:af:3f:2c:e5:52:07:69:93:c7:f4:b4:85:ca:40:31:1a:18:bc:11:dc:b4:cc:5c:97:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canterbury.qld.edu.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canterbury.qld.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canterbury.qld.edu.au
www.canterbury.qld.edu.au

Other certificates including the domain name canterbury.qld.edu.au

(limited to 100 certificates)
sdp.collinsfoods.com
secure.canterbury.qld.edu.au
helpdesk.thescapegroup.com.au
libraries.canterbury.qld.edu.au
sni.cloudflaressl.com
support.canterbury.qld.edu.au
theportal.horizons.govt.nz
canterbury.qld.edu.au
helpdesk.grv.org.au
canterbury.qld.edu.au
servicehub.austal.com
servicedesk.yooralla.com.au
helpdesk.phsa.com.au
servicedesk.cockburn.wa.gov.au
servicedesk.yooralla.com.au
helpdesk.thescapegroup.com.au
it.atsichsbrisbane.org.au
www.canterbury.qld.edu.au
canterbury.qld.edu.au
servicedesk.yooralla.com.au
www.canterbury.qld.edu.au
www.canterbury.qld.edu.au
canterbury-newsletter.digistormlabs.com
servicedesk.ransw.org.au
helpdesk.thescapegroup.com.au
ithelpdesk.teahn.org.nz
portal.thescapegroup.com.au
servicedesk.bluechipit.com.au
servicedesk.yooralla.com.au
clearpass-pm.canterbury.qld.edu.au
canterbury.qld.edu.au
sdp.collinsfoods.com
*.canterbury.qld.edu.au
servicehub.austal.com
servicedesk.yooralla.com.au
esm.parracatholic.org
sip.canterbury.qld.edu.au
test.barkuma.com.au
canterbury-newsletter.digistormlabs.com
theportal.horizons.govt.nz
helpdesk.grv.org.au
servicedesk.yooralla.com.au
sni.cloudflaressl.com
help.cygnetwest.com
helpdesk.tcc.sa.edu.au
support.calvary.qld.edu.au
servicedesk.regis.com.au
servicedesk.yooralla.com.au
www.canterbury.qld.edu.au
servicedesk.dardanup.wa.gov.au
servicedesk.classictechnology.co.nz
help.cygnetwest.com
servicedesk.yooralla.com.au
esm.parracatholic.org
*.canterbury.qld.edu.au
sdp.collinsfoods.com
www.canterbury.qld.edu.au
canterbury-newsletter.digistormlabs.com
canterbury.qld.edu.au
canterbury.qld.edu.au
helpdesk.phsa.com.au
servicedesk.regis.com.au
servicedesk.eqt.com.au
help.cygnetwest.com
support.taxinstitute.com.au
helpdesk.tcc.sa.edu.au
helpdesk.phsa.com.au
support.calvary.qld.edu.au
canterbury.qld.edu.au
servicedesk.eqt.com.au
www.canterbury.qld.edu.au
canterbury.qld.edu.au
servicedesk.eqt.com.au
servicedesk.yooralla.com.au
canterbury-newsletter.digistormlabs.com
sdp.collinsfoods.com
servicedesk.regis.com.au
www.canterbury.qld.edu.au
libraries.canterbury.qld.edu.au
libraries.canterbury.qld.edu.au
canterbury.qld.edu.au
www.canterbury.qld.edu.au
servicedesk.yooralla.com.au
helpdesk.thescapegroup.com.au
helpdesk.grv.org.au
libraries.canterbury.qld.edu.au
sdp.collinsfoods.com
canterbury-newsletter.digistormlabs.com
esm.parracatholic.org
support.taxinstitute.com.au
www.canterbury.qld.edu.au
servicedesk.yooralla.com.au
servicehub.austal.com
servicedesk.yooralla.com.au
theportal.horizons.govt.nz
support.taxinstitute.com.au
servicedesk.classictechnology.co.nz
support.canterbury.qld.edu.au
helpdesk.tcc.sa.edu.au
helpdesk.thescapegroup.com.au

Certificate

The complete raw certificate details for canterbury.qld.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt71OKTLptiHtXfy+rlOY
y2b4yZNvPbvFiyPmXKGrpi7bf80W8QUCjtjufcMpHkFfp69Q+vqaabn0O8nakAH1
Bcsc1dNKm1mshUqDwKG8dhvA78nF9ijDl4QExX1941RkIbmIrSiefzr1ldw/ecLV
51Ky2+Vwl1/NdSsr+kKsZNl75GYdsckzg8EEuJvLObn6XhdyjTFiJuB1iwfKgH1Z
p6fYV62hKVdg1ydp6f1fY6lY11P5nt7xBO7mBVrxZfQo8E1Yqiil/h5IKMmqqCJ2
5BkX7UnCdFnIIaciJLDop6/gU9xEu4dFuhsrF+x5+YNVIlscKcQ4Hqp6w4KHwLLl
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430298450555054914907167749018702789532251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-05 14:04:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 14:04:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canterbury.qld.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23194959739379386169880122542443471769622215033857284451712842960229684687999795511389167421329994800765938325675704793228119607371515482877792807892665077152030892289849618948583113630819781478347174326611445079879062669514859976146017538662987911221922027492124218341203124292659282036015614400882423347806845244639356040230641516988980186434087412465585027974585612791238561848811980353706703365787979398640450417996904020390973996600918699521740986554823710232969749418299422598145779949105272197288873715634824640496594446539659021497939808778027632408064015336109943132179438790050012162859323381183305131156921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79835925f78bb23d36ca41607f17ae4e31a7e7aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterbury.qld.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterbury.qld.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001650a9e26a20000040300473045022040312495cef4c8b89e6ed343692865be769e88a4db75462904ee0037711b15db022100f4059056a4a9c1a1bad41d3d5561bbc85a8e0647bc35eee59d847e78e57e7bd0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650a9e268c000004030047304502205858d702581c2af4b662d2bd8228e01c49343dfb1f5b813c1d1837c383e5fc41022100eb847c3988f6d01d32cea8df5f28e85c65c4b2d017aedccf5bdd15a262e3e907
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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