*.nswbar.asn.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:bc:07:d5:58:c4:eb:3f:00:f6:51:9f:10:ed:b5:eb was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nswbar.asn.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:bc:07:d5:58:c4:eb:3f:00:f6:51:9f:10:ed:b5:eb
Serial Number (int): 11610134655622456920651581812003157483
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:43:7b:06:7d:eb:1f:4f:b3:ed:b0:26:34:a5:95:18:0c:b9:c0:c6
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 02:b1:f8:9a:17:d2:64:96:0e:87:0d:b8:ae:68:32:e2:68:d2:6b:02
Fingerprint (sha256): 43:a1:c1:5e:55:fe:81:4b:20:c5:c0:cf:16:b5:bb:b1:d7:24:95:1a:1e:a2:51:73:fb:2b:e9:02:30:ac:ec:b0

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.nswbar.asn.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nswbar.asn.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nswbar.asn.au
nswbar.asn.au

Other certificates including the domain name nswbar.asn.au

(limited to 100 certificates)
adr-accreditation.nswbar.asn.au
www.entertainmentcoach.com
*.sso.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.sso.nswbar.asn.au
ww2.nswbar.asn.au
helpdesk.nswbar.asn.au
*.nswbar.asn.au
ww2.nswbar.asn.au
cpd-streaming.nswbar.asn.au
mapped.myasoedv.com
*.nswbar.asn.au
adr-accreditation.nswbar.asn.au
libguides.library.nswbar.asn.au
bn.nswbar.asn.au
*.online-renewals.nswbar.asn.au
*.nswbar.asn.au
cpd-streaming.nswbar.asn.au
fab.nswbar.asn.au
*.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.nswbar.asn.au
secure.nswbar.asn.au
fab.nswbar.asn.au
fab.nswbar.asn.au
*.online-renewals.nswbar.asn.au
*.nswbar.asn.au
adr-accreditation.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.online-renewals.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.online-renewals.nswbar.asn.au
*.sso.nswbar.asn.au
fab.nswbar.asn.au
*.nswbar.asn.au
fab.nswbar.asn.au
*.nswbar.asn.au
forms.nswbar.asn.au
*.nswbar.asn.au
fab.nswbar.asn.au

Certificate

The complete raw certificate details for *.nswbar.asn.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5subj48cTk9ePbKOeZF
jObOVeGD/GXEbJ1Xpatlrr6E0YQgUbThsqrWD3jlahXIKcu7QFa5ncX/VMZ6qZjo
KhnVkfnDj57IH3cQ7d6EXoMcMj53CoLjTr251Vk0drCOHlraQ9FrzN5SsiQeLJMW
JJJETWBY9bLfRiFBcEeaBPwLFBbS18G0ku1UtUDKXafRlCUla6ir68aO+/g7byNG
KVFKjBXTYo6FJwgtSp+1LWt5QQSGaGmtEQv5Cyy+DgR7PH01G+e22ovuifUHjd/s
/Z4CT3bLAIh0XwHefmFWgSyRXQARgvOB8ZrvxgP/DTWiF5whsdr9zPxdJr7M1dz7
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11610134655622456920651581812003157483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nswbar.asn.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21158319714762472422101167364242763124101675905451334179457816405770770415125628187817370967250394076699491584307072413442518818715213080984376413130049825235027861739149443633143289378400828131537469025099878421031177365430390903200072010221389967634551558741833419613137197945606344217516854192261418103761639325126756037209385937286691378309273575071891825314530206061011624839192214991554733200391325873706166260260481349577502339050739479873993123969717778035725887301604050058276773754971028068414997443316650787323888929897352181654213424652132187284315947610177981074010259949574443700462344530327052293569479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc437b067deb1f4fb3edb02634a595180cb9c0c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nswbar.asn.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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