bdcbondstore.bundabergrum.com.au

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0d:3f:8f was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=DxBrKzsoG4Sh0CNHcdd0Y1E4u/dw6rAF,CN=bdcbondstore.bundabergrum.com.au,OU=GT49226822+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:3f:8f
Serial Number (int): 868239
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 38:ca:b0:c8:5c:3f:d4:f4:79:82:c4:ad:ef:45:8a:e7:cb:53:86:87
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): ea:db:ca:b1:ea:12:6c:6e:ec:c3:75:f9:ff:af:3e:0d:70:d0:f0:23
Fingerprint (sha256): e4:f6:26:e9:51:74:ac:8e:a3:ed:16:aa:8e:63:f2:0c:09:3f:82:a8:68:d4:5b:cf:7c:e7:db:d0:23:c9:48:33

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate bdcbondstore.bundabergrum.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bdcbondstore.bundabergrum.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bdcbondstore.bundabergrum.com.au

Other certificates including the domain name bundabergrum.com.au

(limited to 100 certificates)
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
*.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageo.com
*.bundabergrum.com.au
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
image.community.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
bdcbondstore.bundabergrum.com.au
image.community.bundabergrum.com.au
san-6-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
image.community.bundabergrum.com.au
tours.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
*.bundabergrum.com.au
www.diageohorizon.com
tours.bundabergrum.com.au
www.diageo.com
image.community.bundabergrum.com.au
thinktank.bundabergrum.com.au
www.diageohorizon.com
tours.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
*.bundabergrum.com.au
secure.bundabergrum.com.au
www.diageohorizon.com
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
*.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
san-6-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
www.diageo.com
image.community.bundabergrum.com.au
secure.neostaging.bundabergrum.com.au
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
www.diageohorizon.com
san-6-s50.tlsprovisioning.exacttarget.com
www.diageo.com
image.community.bundabergrum.com.au
www.diageohorizon.com
www.bundabergrum.com.au
bdcbondstore.bundabergrum.com.au
www.diageo.com
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
www.diageohorizon.com
image.community.bundabergrum.com.au
image.community.bundabergrum.com.au

Certificate

The complete raw certificate details for bdcbondstore.bundabergrum.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9iXoSOTUv7ldu6l0MoI
DU9mkI9I+e3qu0qIwOsuMfniJjhOnXyXAoVwEVFdKdr9xEv7ISroDXzLgls7einc
4r94VV8h7CqVxdtt7iRiw0ReJWCMvCtLkQmBsQdVWi+zxJShy93hOTQdkiBbuTyl
5rCngzEE1dwwgJXXLvNUMLIZytRv3doN1r5waFEcV4wUWTMyQgzpNE4gdrMaul2T
Q6jzQNSySQhtoCdSoFLTxyPFTgn1rXcCVcayDM7y/HUZDpGKiOPblfv2jiDT1aHH
O4Lbl9BjcBN9oI6S3QfA+7oZ2a/fnUSgMu3+fmbQoLxglbVUILJkaqrm+ULNN4EZ
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 868239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-28 17:05:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-29 17:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DxBrKzsoG4Sh0CNHcdd0Y1E4u/dw6rAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT49226822'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bdcbondstore.bundabergrum.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26238134773055297651195731941202072127495508946060454261504117082178675179576389065665271745574770049831444421797283657160823578934998187880897211633773609274685954533449637000395684555057169232871168788400490753014391796257861197172409296838005154592413362054882872564504060790527773937290877981715992830866228635428246766325869763360392760544196760052300018838683473824126355035740063418147137123034410498724690630528513515113753402502318422005121703501240483145552042330227528657570641357128818121397247427436014470260873917669384468797161208237307607256067454300361337412148703933207852597453663228378166176323853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdcbondstore.bundabergrum.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38cab0c85c3fd4f47982c4adef458ae7cb538687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8f8468aff84d07eff2056e7bd35843a25efd2a0d3e79737bb9b9e1447fc08dd42d743e9228f21ae2515c97c4668d9d6df422ab2de189858fe0a67e4a853afdf966d754d2fc8a33928f2a388dfa8acdcde45b20197f682184fa84d933763f115a9d2226532f6ba7f416b904ded652c1703ac670d99d1417e51efcfed6cd0353de5753f66d6b56f251169d84660d5eec6a2b5c3834d584b1eabe314dfc9217d5da26d9003281d6f6613a69779892e95fd9986cdfaa26ddb6a01ecb2922fff3266204c17de1ca7d840a5ac990b066432108df87f1b7376fe9d4a49c2cdb695f02f06248896ab38591cad3a03f1376c102dd287eb881b66d7d0b0bc8d565cae9df6