product.defencebank.com.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:26:54:51:ad:ca:fd:70:f6:6d:57:08:9f:fe:54:9b was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=product.defencebank.com.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:26:54:51:ad:ca:fd:70:f6:6d:57:08:9f:fe:54:9b
Serial Number (int): 13491297432147659131816484968215762075
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 27:a4:98:89:10:93:2c:69:08:d6:79:36:dd:c0:63:4e:15:9d:75:3a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): c9:86:04:27:4e:7e:40:90:87:f3:9c:af:b7:5e:07:b9:59:0a:a8:73
Fingerprint (sha256): 49:58:4d:7c:9f:31:b3:d8:35:69:6a:87:1c:c8:6a:60:64:75:cc:6f:86:80:74:87:62:a4:51:23:b6:a1:10:3b

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate product.defencebank.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for product.defencebank.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

product.defencebank.com.au
www.product.defencebank.com.au

Other certificates including the domain name defencebank.com.au

(limited to 100 certificates)
defencebank.com.au
cdr-api.defencebank.com.au
sni.cloudflaressl.com
marketing.defencebank.com.au
defencebank.com.au
tls-bnfu.swiftdigitalcloud.com.au
video.defencebank.com.au
tls4.swiftdigitalcloud.com.au
defencebank.com.au
comms.defencebank.com.au
defencebank.com.au
mail.defencebank.com.au
tls4.swiftdigitalcloud.com.au
defencebank.com.au
defencebank.com.au
product.defencebank.com.au
defencebank.com.au
lending.defencebank.com.au
www.defencebank.com.au
defencebank.com.au
video.defencebank.com.au
defencebank.com.au
www.defencebank.com.au
www.defencebank.com.au
servicedesk.defencebank.com.au
lending.defencebank.com.au
defencebank.com.au
tls-bnfu.swiftdigitalcloud.com.au
defencebank.com.au
www.defencebank.com.au
defencebank.com.au
defencebank.com.au
tls-bnfu.swiftdigitalcloud.com.au
marketing.defencebank.com.au
cdr-api.defencebank.com.au
tls4.swiftdigitalcloud.com.au
sni.cloudflaressl.com
defencebank.com.au
tls4.swiftdigitalcloud.com.au
secure.defencebank.com.au
cc-api.defencebank.com.au
join.defencebank.com.au
defencebank.com.au
defencebank.com.au
video.defencebank.com.au
cc-uat-api.defencebank.com.au
oma.defencebank.com.au
defencebank.com.au
defencebank.com.au
defencebank.com.au
servicedesk.defencebank.com.au
video.defencebank.com.au
defencebank.com.au

Certificate

The complete raw certificate details for product.defencebank.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SoqdHsd/yIDap/aIZhd
Trw0cmefVVwwwODVoRAGRAMayQKUTdALuDmCLyS2IWnC256mbUXdHoHZQseltrcB
wl6+E4L+kFaAw4TyCkE018Kvkos1iOYVT84228jRihFf243poDPPSFidLPAv5aVn
PI8ghNWlnu1FsylK6CUb5pjBfHzlCuCcN1cqLY0ZfblBrTx2XTDabEr8VODJW3iJ
y2p5RZbpiPQJe+QKvr3PCZ9vfxid6DnAh7foVWLLBKD76DoMOktj3kb7mN5sfyR8
DowTukwrzZ3EAEEolRLV2+zS6WvVLQTbjoV7nzgaIXDu/AxvTdlYtuuuAdBGEwI5
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13491297432147659131816484968215762075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'product.defencebank.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28424411367953541141959118520307380379167852644376163343963231520359935160389417826707031587134022633841882361765501662349935676635938887122300443621761994247622981906581773709099015643280770539839241661416322395758571153883158609513185865169546964979564362731221429757797812657174569594199782330909395078146244714829666532144125868012474524247952712492809744404424165243355825510121882061733111509439527086623731467181086900994188514271324986252669120666838277662042964791090587735059736667036607204214114217050199279328556844268783127964637532217965457831754479717947935553616159485228605533599485409308298323310907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27a4988910932c6908d67936ddc0634e159d753a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.defencebank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.product.defencebank.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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