www.eqt.com.au

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 07:ad:c4 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.eqt.com.au,OU=GT52275678+OU=See www.rapidssl.com/resources/cps (c)15+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ad:c4
Serial Number (int): 503236
Serial Number lenght: 19 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): ca:e6:36:a5:6b:dd:56:45:16:52:6f:67:32:c2:b6:62:fe:1c:f6:f5
Fingerprint (sha256): 9b:1d:22:57:22:ba:82:f2:b9:96:cf:c9:da:86:03:21:b2:6b:f6:4d:4c:0f:9f:f3:24:64:27:ba:a2:d5:a2:51

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate www.eqt.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eqt.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.eqt.com.au
eqt.com.au

Other certificates including the domain name eqt.com.au

(limited to 100 certificates)
icr.eqt.com.au
icr.eqt.com.au
unitregistry.eqt.com.au
aflpa.eqt.com.au
*.eqt.com.au
remote.eqt.com.au
aflpa.eqt.com.au
icr.eqt.com.au
webmail.eqt.com.au
remote.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
esm.parracatholic.org
unitregistry.eqt.com.au
test.barkuma.com.au
citrix.eqt.com.au
eqtdocs.eqt.com.au
aflpa.eqt.com.au
remote.eqt.com.au
dms.eqt.com.au
esm.parracatholic.org
servicedesk.eqt.com.au
servicedesk.eqt.com.au
*.eqt.com.au
servicedesk.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
esm.parracatholic.org
opreq.eqt.com.au
*.eqt.com.au
icr.eqt.com.au
servicedesk.eqt.com.au
test.barkuma.com.au
www.eqt.com.au
test.barkuma.com.au
dmstest.eqt.com.au
www.eqt.com.au
*.eqt.com.au
citrix.eqt.com.au
vpn.eqt.com.au
unitregistry.eqt.com.au
www.eqt.com.au
aflpa.eqt.com.au
owa.eqt.com.au
test.barkuma.com.au
aflpa.eqt.com.au
www.eqt.com.au
dms.eqt.com.au
remote.eqt.com.au
aflpa.eqt.com.au
icr.eqt.com.au
www.eqt.com.au
aflpa.eqt.com.au
esm.parracatholic.org
vpn.eqt.com.au
icr.eqt.com.au
vpn.eqt.com.au
*.eqt.com.au
icr.eqt.com.au
aflpa.eqt.com.au
remote.eqt.com.au
dmstest.eqt.com.au
unitregistry.eqt.com.au
www.eqt.com.au
remote.eqt.com.au
servicedesk.eqt.com.au
aflpa.eqt.com.au
webmail.eqt.com.au

Certificate

The complete raw certificate details for www.eqt.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsJz91HHiC1n1HFVI753d
sYCSYpQ3tTieURzmJSP1Hkl3sJPdWmsC1R77NRpFEgQwjy1x58W5sHr7P1ABpOs9
w7gNXLCWNj2xDgrD2xM6fOwE19yoSu6xJlDSp/+hzsMm46xcXJpuW8y5JU8aUrWz
bXS0SIVh8eC3bgbYhxca3Pjt2wARuPsLFaS0rnsTO//CeuxjYHHBy+ZbjrXHyn5n
1HahwsXWy8GoQKpQJrVa+3OGXsbNIQ70+WGxQpneBAH9Vn0ACW3yHBxwaQRGlqeW
FT/Md/6QjNPUfRmImotxKHIDDSI/hVo4uy24C8td7MczXZfN9kI7q/8MNcEzuiBT
QS5smZRgPi+w6sbUwVxKQSTLWz6TaewsF7TWe3n5+rZXk8cXWiT0JM9H5ZGPmg0G
x1/sg/JUH+nUyXJSGN8NB2N3IUfb+bkwdDyC1NwO61wtjCILNEbyMuDX3EyWHvXD
vmh47+BgnVcMggTsI5lb+7Mey/+nwSoC1p5bNXq5zVS7BKPt/6q9xKbCMbU9WzOB
ilStoFeP/sBpz0YCGGDc0gGerL3/b70VSuklQvMeVygEstsf2AyDsmNWcuEmLW73
SnvjWDgspadjrQaYZyNUV44FampxRo1pNChlaOnES8ccI97pt5JSNI6NV0CLPBwA
DDj7Yh05pRIGxW2R4ZwRUJMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 503236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-17 23:22:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 11:20:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT52275678'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.eqt.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720519190093157481208182084028890263008600963079170315433785695992489260110886913355653619963325260792523538998565342551904449808329123138046769572838156071630544563896495906524597976189241777334588624799171168248938340301289966064409440628182439918508105674199318848542232796811644815305168230548024799560966044254347153070822559475501293073236825305495921126286494480334346397311011378991834014584519297615291540003647750344129994068326893162300763873245434882605554145745738772511559235428038105609508785623508506221580588420401279217023928187070274010720048078312957775658833831249850640068157081814157277766827323745395075262269454999527311973547147721467038686832040151723085773499488259757004336124161263615211681738879510951725355072092879177958278756985150143351500761068040358947833529025202688471163697598873236693882644801234161319359652486475760895259553467039503895759203861267078356543171189735462570733742529483415397546905226214932346294404179729276763102491081366585888018388106819320817394119118156693293077044562756685972998636657963097777829972413384838068979813531769868494245002958808863062554043787925973639792261818943418161968164427167869067942666105865414811273820521354056341553657900946779350453778993299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqt.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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