portal.tac.vic.gov.au

- Transport Accident Commission -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 0f:d5:4c:f4:4e:1f:f5:f5:83:9b:92:18:56:a0:f2:41 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Transport Accident Commission

Organization: Transport Accident Commission
Organization unit: ITSS
State / Province: Victoria
Locality: Geelong
Country: AU

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d5:4c:f4:4e:1f:f5:f5:83:9b:92:18:56:a0:f2:41
Serial Number (int): 21045939986621656361081598498605953601
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): d6:1b:98:68:15:91:b7:af:fb:ec:a4:c9:82:ef:24:18:4b:57:f5:d8
Fingerprint (sha256): 1f:f7:37:11:a1:50:7f:27:db:98:83:10:37:2f:f8:db:37:7c:a3:68:fa:35:0d:b3:8f:2d:57:9a:0a:fa:2f:9a

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate portal.tac.vic.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.tac.vic.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.tac.vic.gov.au

Other certificates including the domain name tac.vic.gov.au

(limited to 100 certificates)
api-pa1.tac.vic.gov.au
sip02.itss.vic.gov.au
tac.vic.gov.au
www.tac.vic.gov.au
join.itss.vic.gov.au
search.tac.vic.gov.au
search.tac.vic.gov.au
sip.itss.vic.gov.au
portal.tac.vic.gov.au
myaurion.tac.vic.gov.au
join.itss.vic.gov.au
api.tac.vic.gov.au
api-pa1.tac.vic.gov.au
portal.tac.vic.gov.au
api-ts1.tac.vic.gov.au
portal.tac.vic.gov.au
search.tac.vic.gov.au
search.tac.vic.gov.au
tls-bmjn.swiftdigitalcloud.com.au
tls-bmjn.swiftdigitalcloud.com.au
join.itss.vic.gov.au
www.tac.vic.gov.au
gw.tac.vic.gov.au
api-pa1.tac.vic.gov.au
portal.tac.vic.gov.au
www.tac.vic.gov.au
portal.tac.vic.gov.au
gw.tac.vic.gov.au
api-pa1.tac.vic.gov.au
api-ci1.tac.vic.gov.au
www.tac.vic.gov.au
myaurion.tac.vic.gov.au
sip.test.itss.vic.gov.au
tls-bmjn.swiftdigitalcloud.com.au
sip02.itss.vic.gov.au
portal.tac.vic.gov.au
join.itss.vic.gov.au
www.tac.vic.gov.au
api.tac.vic.gov.au
www.tac.vic.gov.au
myaurion.tac.vic.gov.au
datest.tac.vic.gov.au
portal.tac.vic.gov.au
api-ts2.tac.vic.gov.au
portal.tac.vic.gov.au
portal.tac.vic.gov.au
www.tac.vic.gov.au
www.tac.vic.gov.au
join.test.itss.vic.gov.au
search.tac.vic.gov.au
join.test.itss.vic.gov.au
www.tac.vic.gov.au
api.tac.vic.gov.au
myaurion.tac.vic.gov.au
portal.tac.vic.gov.au
portal.tac.vic.gov.au
portal.tac.vic.gov.au
sip.test.itss.vic.gov.au
join.test.itss.vic.gov.au
api.tac.vic.gov.au
www.tac.vic.gov.au
www.tac.vic.gov.au
ctxtest.tac.vic.gov.au
join.test.itss.vic.gov.au
api.tac.vic.gov.au
api-ts3.tac.vic.gov.au
tls-bmjn.swiftdigitalcloud.com.au
www.tac.vic.gov.au
search.tac.vic.gov.au
api-ps1.tac.vic.gov.au
sip.itss.vic.gov.au
gw.tac.vic.gov.au
api-pa1.tac.vic.gov.au
sip.itss.vic.gov.au
api-tr1.tac.vic.gov.au
join.itss.vic.gov.au
api.tac.vic.gov.au
search.tac.vic.gov.au
join.itss.vic.gov.au
myaurion.tac.vic.gov.au
tac.vic.gov.au
search.tac.vic.gov.au
api-dv1.tac.vic.gov.au
sip.itss.vic.gov.au
search.tac.vic.gov.au
myaurion.tac.vic.gov.au
portal.tac.vic.gov.au
search.tac.vic.gov.au

Certificate

The complete raw certificate details for portal.tac.vic.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqRfLvLBkIQR1kL7X9k2
H1Prirqv7mQuOCH/sFwTmO/sjRy70LC6gye+2ZpnXheO+ssTv/by5AR2yFgIb/x9
VetNxR3/Zqt3UXAf4KO3PjTfS+2mPajCRr0fvhcDXK8zlRkHyC1xXQSYyaNZfLvd
wWeRms2zj/Wm/80wr9qUHaILCsi8rlfPi48Rhxwv91vDGPUU7qbpzKlNWVVv0VXf
EllrlMOhht9H6bAlRPpNz1YDACWeiiKoAOltEASYPRw2Vbf38o6AtJ0fJ0LF4r8w
gr6hZy2iZPEMlYtkqenzllZn5aDKPBjRG5bYB8OBtVPatwppyuaB/sZxF9+mQyhp
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21045939986621656361081598498605953601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Geelong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Transport Accident Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ITSS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'portal.tac.vic.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21036613384890017590525976092007824479537508627190134931111412252212882231863700498041675770207810943944660133951899789555911963992954319395979771141510733781021290261570188522266836331163816692482422362410863729309480221431502745825018673580741693238042804458591348049324972873437956933486915980673754705101801967075123258939471324708421379570649590162768912496265137024536247735828090672112981741621840679229252892668808460398039454317363814659202471116323469317265354738425576205304279655822778600086612742315135031094993957840558528252427659990981319562352575200708226142396174780978094823827985891910237765003537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tac.vic.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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