citrix.eqt.com.au

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 07:f6:ca:ec:67:9d:02:86:18:32:07:01:b7:fe:5f:1f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citrix.eqt.com.au

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f6:ca:ec:67:9d:02:86:18:32:07:01:b7:fe:5f:1f
Serial Number (int): 10586016774347038994372635125243338527
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 37:f9:02:5c:66:cd:56:09:04:96:88:0a:eb:f1:dc:ed:43:bd:1e:73
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 18:56:81:0c:84:8b:19:14:b5:e8:d4:27:41:28:7c:92:c4:cd:c0:a8
Fingerprint (sha256): 41:50:c2:54:14:74:db:be:fc:1f:de:76:ac:b3:19:78:08:82:ae:97:96:8d:85:39:07:90:fb:09:24:22:be:5f

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate citrix.eqt.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.eqt.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.eqt.com.au

Other certificates including the domain name eqt.com.au

(limited to 100 certificates)
icr.eqt.com.au
icr.eqt.com.au
unitregistry.eqt.com.au
aflpa.eqt.com.au
*.eqt.com.au
remote.eqt.com.au
aflpa.eqt.com.au
icr.eqt.com.au
webmail.eqt.com.au
remote.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
esm.parracatholic.org
unitregistry.eqt.com.au
test.barkuma.com.au
citrix.eqt.com.au
eqtdocs.eqt.com.au
aflpa.eqt.com.au
remote.eqt.com.au
dms.eqt.com.au
esm.parracatholic.org
servicedesk.eqt.com.au
servicedesk.eqt.com.au
*.eqt.com.au
servicedesk.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
esm.parracatholic.org
opreq.eqt.com.au
*.eqt.com.au
icr.eqt.com.au
servicedesk.eqt.com.au
test.barkuma.com.au
www.eqt.com.au
test.barkuma.com.au
dmstest.eqt.com.au
www.eqt.com.au
*.eqt.com.au
citrix.eqt.com.au
vpn.eqt.com.au
unitregistry.eqt.com.au
www.eqt.com.au
aflpa.eqt.com.au
owa.eqt.com.au
test.barkuma.com.au
aflpa.eqt.com.au
www.eqt.com.au
dms.eqt.com.au
remote.eqt.com.au
aflpa.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
aflpa.eqt.com.au
esm.parracatholic.org
vpn.eqt.com.au
icr.eqt.com.au
vpn.eqt.com.au
*.eqt.com.au
icr.eqt.com.au
aflpa.eqt.com.au
remote.eqt.com.au
dmstest.eqt.com.au
unitregistry.eqt.com.au
www.eqt.com.au
remote.eqt.com.au
servicedesk.eqt.com.au
aflpa.eqt.com.au
webmail.eqt.com.au

Certificate

The complete raw certificate details for citrix.eqt.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10586016774347038994372635125243338527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.eqt.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906545322367777698631475579598280607390810839752353717026558549936177334429465083952254903641895290157496603822315810289946558479557329514047416991458945853231192735516213922805054413993534869212444888714548985815572851789495803099013101118916734331287001109022764203886524113989039968577409514417649144010125106462371063809730002174759553518166659009050473313748451278108348357414592328568793564040446277713698148127803926537863110465751347915733583599033588997740455211861998310591159323097750095051941770306785544988235932135987163626700388943100757188062527145627592343194645161960279487737554086364282192578030745369373084715850343530825325781369951233174903342677320506287794465134111759084559475876474784725145908920074193883264406636147634948253652815296715952091293115920805159148308053048330930590395486729017979461517564759971217026526331693884081438120526607528447998141283174218557392814806435876541843701401955018015426805391531667700665055902030686688878460080043727083045028726081569460323935091748072079076176629509811131534961439694663053895967517629323801937266780077317537749186600780405377707559750378026475842301550146409555820526267041354048319603995390434543311199877054065922228160355310541767436009370972153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37f9025c66cd56090496880aebf1dced43bd1e73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.eqt.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d3eff81c83efae8c976204f2116428cc15e74b95eff2fb64e92321ea15bd1f0d1237277ca2192035ad2621fbc577ad6ddc2c2a3f6198ccf555fb8721a2edfdd10f93b0e164b92c7750648d7cbb1a0b04c6b2a9455531ccd1b35c542df5761c1d55f214e8687c8e55c0dd2a9e4481a4736d4789b0bfbe9ab88d2b5ab622cc13321a73de08a355cca3dfd89208a7e67bd8b9e9038fe39ca9b89d3899398a17faec502d8367eb248e6c2637bcba61e0e7236944356eb3cd70790514ad3f67251c28fcc944f236e282defbd1500a80a386e6a102ba7ee1c6b548c83ad443381689dfa1e980b9e5920c59cc78ac6c24d78f36bf67cab56e9e01bcc6521bab2f5d6db8