citrix.mccolls.com.au

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:b2:35:fc:5e:31:62:5a:fe:3c:98:39:dd:ad:9d:07 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citrix.mccolls.com.au

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:b2:35:fc:5e:31:62:5a:fe:3c:98:39:dd:ad:9d:07
Serial Number (int): 15546831756810513811775374694395256071
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:10:fc:d1:fd:37:f8:e9:97:b5:9c:0e:ea:60:6f:2e:a6:8a:53:f2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 9d:e2:61:be:ce:0e:57:2e:b2:e6:0f:ec:ca:23:80:c5:36:07:c9:bf
Fingerprint (sha256): b2:c2:7d:b2:7e:29:d9:f7:09:bb:b9:28:ef:86:ed:22:aa:50:9c:6a:06:34:a5:0e:46:35:0a:31:6b:ce:8c:08

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate citrix.mccolls.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.mccolls.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.mccolls.com.au

Other certificates including the domain name mccolls.com.au

(limited to 100 certificates)
mccolls.com.au
mccolls.com.au
*.mccolls.com.au
mccolls.com.au
helpdesk.brisbanemarkets.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maitland.nsw.gov.au
citrix.mccolls.com.au
servicedesk.mcson.com.au
citrix.mccolls.com.au
mail.mccolls.com.au
helpdesk.benedict.com.au
citrix.mccolls.com.au
helpdesk.mstglobal.com
*.mccolls.com.au
uat.mccolls.com.au
citrix.mccolls.com.au
lyncweb.mccolls.com.au
farm.mccolls.com.au
mccolls.com.au
mccolls.com.au
mccolls.com.au
servicedesk.stgiles.org.au
dashmate-dev.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maranoa.qld.gov.au
uat.mccolls.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.mstglobal.com
mccolls.com.au
mccolls.com.au
helpdesk.mccolls.com.au
mccolls.com.au
mccolls.com.au
uat.mccolls.com.au
mccolls.com.au
helpdesk.mstglobal.com
mccolls.com.au
helpdesk.benedict.com.au
mccolls.com.au
servicedesk.mcson.com.au
helpdesk.mccolls.com.au
mccolls.com.au
helpdesk.benedict.com.au
servicedesk.stgiles.org.au
servicedesk.4dmedical.com
servicedesk.4dmedical.com
helpdesk.maranoa.qld.gov.au
servicedesk.maib.tas.gov.au
uat.mccolls.com.au
servicedesk.4dmedical.com
servicedesk.maib.tas.gov.au
helpdesk.benedict.com.au
mail.mccolls.com.au
servicedesk.mcson.com.au
uat.mccolls.com.au
uat.mccolls.com.au
helpdesk.mstglobal.com
uat.mccolls.com.au
helpdesk.maitland.nsw.gov.au
mail.mccolls.com.au
helpdesk.benedict.com.au
*.mccolls.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
dm2staging.mccolls.com.au
mccolls.com.au
helpdesk.benedict.com.au
mccolls.com.au
servicedesk.stgiles.org.au
helpdesk.maitland.nsw.gov.au
dashmate.mccolls.com.au
*.mccolls.com.au
servicedesk.maib.tas.gov.au
citrix.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.benedict.com.au
bookings.mccolls.com.au
mail.mccolls.com.au
mccolls.com.au
uat.mccolls.com.au
servicedesk.pulseenergy.co.nz
helpdesk.maitland.nsw.gov.au
mccolls.com.au
dashmate.mccolls.com.au
servicedesk.mcson.com.au
citrix.mccolls.com.au
dashmate.mccolls.com.au
mccolls.com.au
servicedesk.pulseenergy.co.nz
helpdesk.brisbanemarkets.com.au
mccolls.com.au
dashmate.mccolls.com.au
uat.mccolls.com.au
mccolls.com.au
mail.mccolls.com.au
uat.mccolls.com.au
servicedesk.stgiles.org.au

Certificate

The complete raw certificate details for citrix.mccolls.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNIxRW3AnwPAXmxCe9v+
5nx08H9lfBaRvqFbJH4ZVjNwmPjrCrGOc17LwWyLGhkm7wF/fWC7qTMJmEUeJobT
lxjvQNGrNKCcMoDheQmkif9l0/utx1+2X/DH0nZVvG8sMnRv2GQq5/5rz2evJNB+
KiLfiTEpPzJtFG7YueNdCZmkVwBmkBzp+7P5j3+52CaUGpY1c8xjwF9dFifUYjDv
RDq8O/gGVWUhYAXh5DPn+8G+M8qJWbhRmXRlwWOMbhzD/DGlutl2XVh1NIu7x6wC
hBx0DHIjz5RDTLL5DSCVRPsysZadG0amvOSXa2dTk+TRRqj9LUlQiL/nH0pIUbvk
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15546831756810513811775374694395256071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.mccolls.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21816638222052962852449674959358395500150875456088033806360086641298083575377508548802536359981313238699821630201801142965926376848953015019262427180612105933723395743002725022165035840646128096431224198204575090143567679039814894974783335776568959904203789976006607262993333995780634396380139154254613235690679449304499670740467135407317629434777049742835295837704610565443679704605484919107898424767585683162140438517437576312360792432075977077645054904977817506572634096925981485579289854450714424126391945214200929112582696955795984454143906955861331823334644599052915559736830790762585110892826733794143231534323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b10fcd1fd37f8e997b59c0eea606f2ea68a53f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.mccolls.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001636cceb313000004030046304402203faa401bab4de97017d4a9704ff9278463b5510a12db788588c38dc02d21eada0220525b5cf529382865b9dff81993d70d2261ac30ef9d9dcdd2287bb84afe39d03a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001636cceb417000004030047304502210080158d6733468b713e67e8ec959f0ea2c1615198f557523204f82b994ea9c509022063673d3db5b5e88c8a70e2fba9703dd3f8b30461fe5e7e0c755e4ac904384b760075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001636cceb5ca0000040300463044022057d108bed5fb2ff1227d143f3450b9caf9244c31baa822f2a9aaf17d8ff3a75b0220109b5055ce41d91652478d7fd9c12ef0ec9b99a8eb0552fdcc5cfa2006d01a1e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006e80793be3423a9557042fa51b551ea92562b6169e10762ccea3000b8f18389518a402ce5076bb39d6f4c4cb075eeebf8c73a183540bdefced23f40f886beed0d49b1c45087985b1c1185800b8972c41579703aef2cfa7f572d0e5329da3fc1451fd0a7133ca57f44cad18f4d01d80927c221e94449b586284fc8d7c24333b722586fc32171e5cdbcd457b99b4ccbab61d36a729895be2f3aecf77b5758a515c6aecd248df80a0f7de76fe98540e35835bc44d7cbf8dbef35b389d865e4d8d1b6d61a24e44e94074a450ca0530f519ce3d181c76586229531abac7015760f660f1bbe3a0f92a70c5234050c26fa102909cdc0b270ad0bd0badded207ce5e44b