southperth.wa.gov.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:0b:b6:f0:75:73:d3:25:60:a0:a9:3a:5c:83:98:99 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=southperth.wa.gov.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:0b:b6:f0:75:73:d3:25:60:a0:a9:3a:5c:83:98:99
Serial Number (int): 12023877677164763714679502562750863513
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 27:b6:3a:2e:42:2e:1e:76:76:95:bc:19:d1:6f:71:ce:c0:ee:ce:8c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 23:9f:b0:79:ed:c2:f2:ea:1e:fa:2c:49:04:d3:3d:55:9d:29:41:0c
Fingerprint (sha256): 45:f7:02:0f:ff:9a:d9:17:06:18:17:49:f9:92:1e:23:17:4c:50:99:31:03:6f:c3:b7:b8:79:9a:9d:61:d7:0d

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate southperth.wa.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southperth.wa.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

southperth.wa.gov.au

Other certificates including the domain name southperth.wa.gov.au

(limited to 100 certificates)
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
www.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
library.southperth.wa.gov.au
awpe.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
m.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au

Certificate

The complete raw certificate details for southperth.wa.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUY3E7IZomIUCHVhfXXw
Xcn8IyqdcEpACScd2t6X+0KU4Nup8A0Hi1/TZPLkhJglBUPFTDMsbnIXwr0ODqNn
8kjvl129kHY5H3SBqRjb8WCQQ6xY8ecAwGn4dIuRSwJX7TXkGwAaqN6Cc3x479+B
BUDnEWEfFvBwDb836lOVPT7pw1fLTCF+L3tm4jf2QPgjU1He06LQbEK5di50bF8x
h9t3NRS9pqIxv1dbQqXPUlqB75N3cYqMttqsJk24de4S9a5paC//Bhb77lZiA51L
PZi9x+OXMWttTLhRkSPjJfEnO8s2YI1Kyq2n2CreE1LRQdxFDN9+PnR3J0GIQpnO
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12023877677164763714679502562750863513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southperth.wa.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23388710796834833701465733305543277543354418864208132304452207067559389091878338892123334057525148203671325497421092907790655144036662779613580441522906532270148842012204930745489003184091016913591742983854937263454278529810043687210382734839340050279063111385661602965054350598378343752239494314686694983680730403875034833358577748645967526759833741112057606525376290984668173536069821126211136374050926788731436273929215054016549703960679379402374338133643245837624125502165087181818565622363334363574829124621267781500224920702701275983544398737947497036130786785885595090715699949248913173418946277714187328802357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27b63a2e422e1e767695bc19d16f71cec0eece8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southperth.wa.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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