aflpa.eqt.com.au

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 0c:25:c1:31:9b:95:92:bf:ee:ec:aa:c1:2b:ff:71:32 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aflpa.eqt.com.au

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:25:c1:31:9b:95:92:bf:ee:ec:aa:c1:2b:ff:71:32
Serial Number (int): 16146769368569246543927682658969022770
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 32:af:77:03:a2:5b:e1:7f:47:6d:f8:ba:71:8d:2d:da:8a:57:96:8d
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): f4:b9:ef:49:30:c7:79:4d:9a:99:16:ab:68:ec:41:b8:d3:6b:b8:be
Fingerprint (sha256): 1d:72:4e:b6:e9:77:9d:43:41:35:34:b4:40:ff:3d:c1:da:75:00:ad:a4:84:40:eb:d0:e7:78:44:33:13:1a:4e

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate aflpa.eqt.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aflpa.eqt.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aflpa.eqt.com.au

Other certificates including the domain name eqt.com.au

(limited to 100 certificates)
icr.eqt.com.au
icr.eqt.com.au
unitregistry.eqt.com.au
aflpa.eqt.com.au
*.eqt.com.au
remote.eqt.com.au
aflpa.eqt.com.au
icr.eqt.com.au
webmail.eqt.com.au
remote.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
esm.parracatholic.org
unitregistry.eqt.com.au
test.barkuma.com.au
citrix.eqt.com.au
eqtdocs.eqt.com.au
aflpa.eqt.com.au
remote.eqt.com.au
dms.eqt.com.au
esm.parracatholic.org
servicedesk.eqt.com.au
servicedesk.eqt.com.au
*.eqt.com.au
servicedesk.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
esm.parracatholic.org
opreq.eqt.com.au
*.eqt.com.au
icr.eqt.com.au
servicedesk.eqt.com.au
test.barkuma.com.au
www.eqt.com.au
test.barkuma.com.au
dmstest.eqt.com.au
www.eqt.com.au
*.eqt.com.au
citrix.eqt.com.au
vpn.eqt.com.au
unitregistry.eqt.com.au
www.eqt.com.au
aflpa.eqt.com.au
owa.eqt.com.au
test.barkuma.com.au
aflpa.eqt.com.au
www.eqt.com.au
dms.eqt.com.au
remote.eqt.com.au
aflpa.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
aflpa.eqt.com.au
esm.parracatholic.org
vpn.eqt.com.au
icr.eqt.com.au
vpn.eqt.com.au
*.eqt.com.au
icr.eqt.com.au
aflpa.eqt.com.au
remote.eqt.com.au
dmstest.eqt.com.au
unitregistry.eqt.com.au
www.eqt.com.au
remote.eqt.com.au
servicedesk.eqt.com.au
aflpa.eqt.com.au
webmail.eqt.com.au

Certificate

The complete raw certificate details for aflpa.eqt.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxgrStQAeiAh0ErBnw3WP
i1pXN/FBi0BmRcsJVdzQIXcU//h/AZ3srDcZXbhbBghjsq9a5W0EAkx4gevRX6zB
Pj0FUZyAAfY4Qcni03g7J4vqIwcmqHx2awXvMfWnLfDd9ysf078tSsGou3Zx5Z3c
YbQt4cIVXyQ6cKhdZMRCgX/88nfyNNSW2/jAidziyNrkEFa/rydXI93O0woEG1Uz
pAI/Jir8HkmBdTj265DUt80/OCoo5F8lAg907ucsW1OXJdwN8ygC9NQz1fyoddHJ
VwScviSSp+8Tk7oX/hEHFJOfcNPIFD/JtgyYkCyXVgY/j/vZKkug/y+nC80XhQ8u
B/83NfONledsTJCnrcMWQM4Z8N60qKQEm764eF81cyTL1SAnJXPtQi8rPQZqEApA
VndL/e3pie5kflFlYy/PiPZuAYrVlUaAQIgHj14StOxOePrTtPwaecbqAehRASEF
9w4lk8oX60iheWC1vNBoKTbROjJ6aexS1tJhjiI5TVLnmOKNkMkEKp0fD575HA+v
YIWPfvse14q0f20C2h/TXU8EcgueEMUCLz4RwH7cNMx5YwyLpsH6as1mkZAakkDb
UeodfKTiLPIEilIa20NqyUn5I1GcL+XyreTN+Uajaedxol5Zs/leiOu3NQgB8yjT
SU2MNOOfPA0nD44JTPcC8GECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16146769368569246543927682658969022770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aflpa.eqt.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807942003167443224540812561590387005733460198142510429486353833590299390065264244354687586107324579154260731610396133507386043514980461172238044308307585043027004841388488615459004509601034308377421476623877091306317307276881583955894167415920630843097290215420565754317013056928475919389170230636402387069326880791339825728370460168254133488586711541371170228083752120779281373990485810613950697023242429270856986154594791761995839449695340160167707599500634226821610357955499123699961181112019680700070512412948772641562517628958222697215567323764272096380329975001425197227617338563190780045627823589105057554329451257513948408045991615305158678605630825235817763603130991006701085668623649798575961143139046707408555878094408170385285721157814293122028099457823129862644099147777207444992837238356092652851081405460019297738663974021510531059626792642303490377326402647939109842726844860200597149488397683909983880986628967655340049181153111578689313998070679508299570796619458365353120920726971356169971918908406793361665318524613142465092108565505292327496840917123499095610972543644178553216467601731880589815904656279672090700164679369659168240205300369478891622123411777359756310075001537878712695652054360617810630352760929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32af7703a25be17f476df8ba718d2dda8a57968d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflpa.eqt.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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