tours.bundabergrum.com.au

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 03:10:7a was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=tours.bundabergrum.com.au,OU=GT22329471+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:7a
Serial Number (int): 200826
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 3a:a0:de:0f:99:5a:54:38:99:67:af:9f:fc:c5:28:04:b8:31:37:40
Fingerprint (sha256): 6f:1f:61:4c:f5:ca:32:c0:05:b5:7c:b5:05:e7:30:9d:1b:5c:ed:f9:4e:85:4f:80:81:09:9f:c6:d5:7c:1c:87

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate tours.bundabergrum.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tours.bundabergrum.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tours.bundabergrum.com.au

Other certificates including the domain name bundabergrum.com.au

(limited to 100 certificates)
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
*.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageo.com
*.bundabergrum.com.au
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
image.community.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
bdcbondstore.bundabergrum.com.au
image.community.bundabergrum.com.au
san-6-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
image.community.bundabergrum.com.au
tours.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
*.bundabergrum.com.au
www.diageohorizon.com
tours.bundabergrum.com.au
www.diageo.com
image.community.bundabergrum.com.au
thinktank.bundabergrum.com.au
www.diageohorizon.com
tours.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
*.bundabergrum.com.au
secure.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
*.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
san-6-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageo.com
image.community.bundabergrum.com.au
secure.neostaging.bundabergrum.com.au
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
www.diageo.com
image.community.bundabergrum.com.au
www.diageohorizon.com
www.bundabergrum.com.au
bdcbondstore.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au

Certificate

The complete raw certificate details for tours.bundabergrum.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM8bmMhGS9pYIuegfk4X
pTMT+WYI5bew7H/E/C51cMkKJ4wremP31PcLMufC3tHbAbOIH1m9tY/AGFy8PNsS
i52YZOxDLGRwypiwVnrZ4BA+w/xuAY8QtCPdRXZ+lrpcfplr24s9c8wBLYwAK3d+
WE4is5U7Zc0l3iF3BBE46vrGDzVOV0RTZQCCGePcoRRQdxvF2tmouaOWUfIjYPoB
GD1v67YsMCKW7iGIXq2xYswUlJNITTAFcuVA4sR7+YkzH/cc7wFrSbX+M/ZFhvh5
qkmW4QHzixwl1r7il0fJxzgK6enSY0X3Zt2lun0nbFfaG3IL2Cv+biQQXlw98skW
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-16 23:05:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-18 19:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT22329471'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tours.bundabergrum.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21815117116740920704739246792977281080763416635353245129646294731364657155610653815048317954156796797709977188748478886984199458875196040474222738390380998421757970009397410721977377574465429280626885294043525128820132268065192303917790777601899446754744971771498729644946990754150642558307803963956087796392125443319890163889813117275040568422680774521642417645380633240261412782193864259123960610203423973527435646231873949621550883030529718450479405124645195185901462377023477448315681390349566014518253224510468015760501343353343834255029335451294129788351990056735131019524335865398265812397461569880376832759503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tours.bundabergrum.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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