*.safeministrytraining.com.au

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 09:a6:ca:81:83:27:c9:9d:c2:ee:4d:47:2d:27:ae:87 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.safeministrytraining.com.au

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:a6:ca:81:83:27:c9:9d:c2:ee:4d:47:2d:27:ae:87
Serial Number (int): 12829080548344562719404813012861169287
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ec:e4:b3:cc:39:e4:41:f5:a5:b9:38:04:bc:1e:24:08:79:6c:9b:ad
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 28:a1:50:eb:fa:71:e9:04:f0:2f:a0:99:ee:88:b5:8d:85:b2:ab:5f
Fingerprint (sha256): 7d:ac:44:76:fe:62:82:07:8c:47:66:8a:1c:70:ff:6f:0d:3f:03:39:76:b7:96:4a:81:2d:07:fd:a0:36:b6:b7

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.safeministrytraining.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.safeministrytraining.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.safeministrytraining.com.au
safeministrytraining.com.au

Other certificates including the domain name safeministrytraining.com.au

(limited to 100 certificates)
safeministrycheck.com.au
online.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
*.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
mychurch.safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
*.inc.safeministrycheck.com.au
*.safeministrycheck.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
*.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
*.safeministrytraining.com.au
safeministrytraining.com.au
safeministrytraining.com
safeministrytraining.com.au
online.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
*.safeministrycheck.com.au
*.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
safeministrytraining.com.au
safeministrytraining.com.au
*.safeministrycheck.com.au
safeministrytraining.com.au
safeministrycheck.com.au
*.safeministrycheck.com.au
safeministrytraining.com.au
*.safeministrytraining.com.au

Certificate

The complete raw certificate details for *.safeministrytraining.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnjltjIOAnkUr+j6zjy0
PNCOAcoTioe+zcR1V1BCp2AyEmu4DDeIEChP/UptVwOzGyhY5Qc5CT23rR4loeod
/x8R5hEuEL4kec3a3PKIZMGvckHUx4Vl4mhBxHbanHGQBMqJnZLUlsZ2rFfN+lxk
HDCZWLfaMhSiQAqEbOb24mT3YBmZxiKQ9bCvvcCuIwG7HEBnM54PHhlcyVXdBW5r
RLmtsPy7+X6Nh/T8Zp/lElEjNkhYTs+HmrjA9pgoJLbFBBvswwNy/tmEfl8ELfK8
rgI1+hh+hq3ueDZoFO0xp9XUsdu3krkDmshq1ts/bdetQ8DupaqbSo2TA3O0p1JD
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12829080548344562719404813012861169287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.safeministrytraining.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24549847849578047930623123867937318316412881556043612251248067482822703633763722265854838278451718145553087161681836412221788588989623051020456833741245817560668907308858786367012124320092205047337701108910990027921946835918918050272437133837067141549622673762712414410294398552460421632194793603520791245982404084733965712182127195480161235035383046841918151287284687345178191236269704809586916612835733299630865099502406097638293132379148618875639502289647631158548688111237801457404946447920834559115513230346336197691573766507453803036247099792732144430524603231874168517218351102266820759389965520354741616526291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ece4b3cc39e441f5a5b93804bc1e2408796c9bad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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