adr-accreditation.nswbar.asn.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ef:71:6e:c7:1e:e5:c4:7e:53:ed:6c:e2:cd:87:6d:f0:d5 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adr-accreditation.nswbar.asn.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:71:6e:c7:1e:e5:c4:7e:53:ed:6c:e2:cd:87:6d:f0:d5
Serial Number (int): 429927407375970879294305839618246717599957
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:45:16:87:cc:1b:6c:a3:78:8b:e1:a1:fe:85:86:14:94:98:2b:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:f7:ed:12:a9:ef:a0:61:45:54:36:7e:f7:38:16:be:c4:bf:03:5e
Fingerprint (sha256): dd:46:71:77:79:53:19:e3:d2:14:c5:b5:58:45:59:34:f9:17:6d:0d:af:3b:45:26:24:9e:21:fa:dd:d7:c9:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate adr-accreditation.nswbar.asn.au

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adr-accreditation.nswbar.asn.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adr-accreditation-api.nswbar.asn.au
adr-accreditation.nswbar.asn.au
directory-api.nswbar.asn.au
directory.nswbar.asn.au
olsc-api.nswbar.asn.au
olsc.nswbar.asn.au
webapps05.nswbar.asn.au

Other certificates including the domain name nswbar.asn.au

(limited to 100 certificates)
adr-accreditation.nswbar.asn.au
www.entertainmentcoach.com
*.sso.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.sso.nswbar.asn.au
ww2.nswbar.asn.au
helpdesk.nswbar.asn.au
*.nswbar.asn.au
ww2.nswbar.asn.au
cpd-streaming.nswbar.asn.au
mapped.myasoedv.com
*.nswbar.asn.au
adr-accreditation.nswbar.asn.au
libguides.library.nswbar.asn.au
bn.nswbar.asn.au
*.online-renewals.nswbar.asn.au
*.nswbar.asn.au
cpd-streaming.nswbar.asn.au
fab.nswbar.asn.au
*.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.nswbar.asn.au
secure.nswbar.asn.au
fab.nswbar.asn.au
fab.nswbar.asn.au
*.online-renewals.nswbar.asn.au
*.nswbar.asn.au
adr-accreditation.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.online-renewals.nswbar.asn.au
adr-accreditation.nswbar.asn.au
*.online-renewals.nswbar.asn.au
*.sso.nswbar.asn.au
fab.nswbar.asn.au
*.nswbar.asn.au
fab.nswbar.asn.au
*.nswbar.asn.au
forms.nswbar.asn.au
*.nswbar.asn.au
fab.nswbar.asn.au

Certificate

The complete raw certificate details for adr-accreditation.nswbar.asn.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhsgp7S49iJfErlCVzcV
r5a64zE3D9i1IYupI3qnQPoGPsdvqwzViKs6nfCk7W9TLEDjBPY/IiapPcGQYQqX
UT/kKuTY/7EAIrplLcR3/OjR8NlLMHiWkrN55lI8GbqKhx/85IgmbLCXr5R+ju+T
b56xJ75KnbCEcFIc3+LGwoAA1blNOJPSE4OK0lDFxdwE8rBXh0OX62DlapEnovev
yjkVi+hhHD2UnY1iQWDVzb0rFiZIP8Aec+ez3hnAQtuI4qyOdRJGNKgxka4Az+N6
QM7FPQZV3r98LdBcQyzaDApII4m4vXix9jq5e9xETaqZG3fzk/Uo3adeGBQg7wpA
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429927407375970879294305839618246717599957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 10:52:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 10:52:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adr-accreditation.nswbar.asn.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23998655041460213371386861200034763618447728706464936050407389803242280031566160232511755425732818162184153641171789879410164408763455075961158447742901385187120455774600258877955187745940536856318746402065202192003786008109287593009852279459345136008780419663497881125810707256601711069231590403820400688972291613152895931137664214626430007084139058375376119871301166593749353810721399449333420684117103409887290644909946062510782435519148466544618437400910322739965905636285176647553478859855201598320990363046042687024360731690463814130784398713102329844505325882125287160681606028354240518320402395084609911668819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf451687cc1b6ca3788be1a1fe85861494982ba9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adr-accreditation-api.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adr-accreditation.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory-api.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olsc-api.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olsc.nswbar.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapps05.nswbar.asn.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eff1a0b27000004030046304402201ce701ba0f4321db26e02c32d6913ef90b13e166acd7882eb1ddce7710561393022014054c8ea090a7bb471739b763890d884c6968df7c81b42f2c2137470201f92400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eff1a0b5f0000040300483046022100ceb1ee8f267d10aed29af9c8ff099f37576105b9b52a287d834b7de3cb58a5e8022100cebe90d72af4901e8e08b94e93400b8c92445317090a519afb3dc54ff3e14496
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d14af5663faaff0d065a3151d7e7ab6772fcd7f8fdc144825bd95d191cf28ce1e0576d3a8fe468c049e8b915176a45621ff8b870d4946c68b4332a859c99195d14415c964e5443dd32979f0e9ed8d02b54f04a2d81f81d4236b9ea69a0296d0df82cc613438ce4d51a84fbc8dd6a59e5e739b52d288f17119fcef3be253a025e8a0eaa1527110cd860974d3e396b88336b89719ace050b855705307a70410556d9a911e7f5a8c0f4898485feb6df4e0c1a11a1c08c936280694f2d3ad12308fcd5a49bd9b0a92380060860cf2e0282c7f91bf5ef83d3a7acb5f8d6bea8720e440386128a358ae51425ab8d823e0eb4e1eca57c2b6541c94bf068b78530b4eff