benchmarkohs.com.au

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number cb:51:10:47:13:dc:23:39:40:f1:49:e9:28:a9:d9:52 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=benchmarkohs.com.au

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): cb:51:10:47:13:dc:23:39:40:f1:49:e9:28:a9:d9:52
Serial Number (int): 270254189339778785382770245854024030546
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bb:d8:34:ad:c0:ef:7b:95:ea:d4:95:a0:78:bf:17:9d:75:98:4b:45
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 2c:7a:da:75:78:72:bb:65:1d:81:04:f5:55:dc:d6:91:e8:ad:bd:4e
Fingerprint (sha256): 32:19:d3:20:8f:5f:20:39:c4:e1:ef:16:7a:7d:fe:f9:10:e0:56:fd:d0:63:e9:97:50:67:f7:59:01:0e:de:f2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate benchmarkohs.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benchmarkohs.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benchmarkohs.com.au
www.benchmarkohs.com.au

Other certificates including the domain name benchmarkohs.com.au

(limited to 100 certificates)
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
booknow.fivearrowstech.com
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
portal.mk3assist.com.au
benchmarkohs.com.au
www.benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
portal.mk3assist.com.au
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
benchmarkohs.com.au
scheduler.cloacina.com
benchmarkohs.com.au
app.incounsel.com.au
app.benchmarkohs.com.au
portal.mk3assist.com.au
benchmarkohs.com.au
portal.benchmarkohs.com.au
benchmarkohs.com.au
www.benchmarkohs.com.au

Certificate

The complete raw certificate details for benchmarkohs.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270254189339778785382770245854024030546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benchmarkohs.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913452734830355429728735892851262682682073855887875129865028030262622838160428999964185076029113668462578396506230936853915736970818608557004646034555276338966412632178092147978746336991461040958956136487168495735791035875635822320911631587356005173171978546318660657149277246237724952726922737925248337047063168777260901024441109105999041130238823754392088698546809919506412137004785736709023091580678223785805121706460287170456303916208795760669327163873945472080858335313984538654652616241756606522678981800824605747528438623616431751443524724772319799508841743787499700546985236150845063275810075702209081365535245014800535279662144258705739807307359026142582183715027691661655398483847425639933946338454307889507755120261802398303585897274799015568700660158739932872752577069651210716093283469793674248172571517114988751455708466010271592481024748091816070723508761118852500861249259342398202292929860772260549214086129926002879281685856681536258164013233689820143880849364808059738500349803708056416107938200203440672764236296149920615734783012054231075670687482959207984510429311778234897272847327335587583091627025214372133096445143238514826784393040737660890764305723465687400000777787469782102728553643707638187365252150699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bbd834adc0ef7b95ead495a078bf179d75984b45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchmarkohs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchmarkohs.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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