southperth.wa.gov.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:3a:33:60:51:f6:9e:f3:67:cc:ae:51:71:bf:93:bd was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=southperth.wa.gov.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:3a:33:60:51:f6:9e:f3:67:cc:ae:51:71:bf:93:bd
Serial Number (int): 12265247214019082634253860024681993149
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 36:9f:75:95:db:64:6c:c2:35:29:3c:9e:af:1d:65:d1:08:70:36:4a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 66:8c:c4:f3:1f:80:20:a1:76:16:17:a9:e1:d3:79:06:16:88:89:17
Fingerprint (sha256): 87:51:b1:e3:49:a4:68:f9:72:61:bb:64:7f:1a:8d:58:3d:11:10:e0:c3:cd:d3:71:41:80:2b:88:46:f4:18:d0

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate southperth.wa.gov.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southperth.wa.gov.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

southperth.wa.gov.au

Other certificates including the domain name southperth.wa.gov.au

(limited to 100 certificates)
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
www.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
library.southperth.wa.gov.au
awpe.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
m.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
yoursay.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
*.southperth.wa.gov.au
awpe.southperth.wa.gov.au
onlineservices.southperth.wa.gov.au
southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au
*.southperth.wa.gov.au
*.southperth.wa.gov.au
www.southperth.wa.gov.au
*.southperth.wa.gov.au
maps.southperth.wa.gov.au

Certificate

The complete raw certificate details for southperth.wa.gov.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9RYu05pho4xTViy8SHk
prGYGAN9Bg2zy8dF3gd4MRueO8x5SQAgq++MLZVd3/gOslHQJgvkaTSUsfHZBHw2
GrAssnljZEpjilshKauQRak6WNbdmJR8rwgAQz03B69A5UhLvCtNSGfO/Ix4uaor
H3IYzZKtoDyZVD3qDXN9tkochoyCUbnWJl1zg4+yINN7O28ZZxCZajPULw5y+lP1
az4+XIf4oLKdFfp0QKlR15G2TIYUOLpq+BR5CYfME0XjSxS8MpF3fErZro5mt4Y3
EnCFVzf3/AhH+SXnCkvFO/ZXnCVmpPiIFSeKukkCn+tsW1ik9VE3Z86Y1wLLUhF8
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12265247214019082634253860024681993149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southperth.wa.gov.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24216228263625424379618585157930641762741965173550472336754100399831877613522456928503286236851563042398313581906828603846392173653452621040675944450578533222276210072370902394022631170403455644610058916293626586017051433207843754430651236247468700017422030777991274396293372772943617198891496639243841857828949992247152271890933302538603639230975092328028292344100759948572965118043849243021233324315570469989979845102509577073152155559441620343692904394589743294237216320299522389701515432056953629408007344557623463472478978428634471176620099054006280104118713801597355990883099776501373045564954134099103048629341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							369f7595db646cc235293c9eaf1d65d10870364a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southperth.wa.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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