www.eqt.com.au

Issued by RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 04:d0:92:5b:7d:8d:99:b2:f4:b0:97:56:21:45:b2:a1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.eqt.com.au

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:92:5b:7d:8d:99:b2:f4:b0:97:56:21:45:b2:a1
Serial Number (int): 6399878210136640171744068206372172449
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a5:29:e8:da:d3:9f:27:27:85:bb:51:11:e7:2a:cd:2d:25:1c:e9:b7
AuthorityKeyId: a4:8d:e5:be:7c:79:e4:70:23:6d:2e:29:34:ad:23:58:dc:f5:31:7f

Fingerprint (sha1): a2:ea:d9:dc:ba:26:a4:20:9d:1c:89:c0:2c:49:8c:6c:8c:7f:e5:a0
Fingerprint (sha256): ec:0b:f3:a6:de:9d:54:54:f5:ff:b8:5f:bf:76:3a:d8:63:ae:2e:23:d9:f9:70:da:39:1e:bd:d6:36:0b:dd:a1

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl

Check the revocation status for certificate www.eqt.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eqt.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.eqt.com.au
eqt.com.au

Other certificates including the domain name eqt.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.eqt.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6399878210136640171744068206372172449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.eqt.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697206688300434089443619345282839415882444790333736030583617070646189627381056665437860424603129343746403229284780993345256540691078377015334723921419183012614893327318232795816537178583882858874686093650617611153155590892281229321702461207378256487349527422105150251147418956158777311160414107971929871388274160513657240560965544580640989375315796638892770839673395421795687200137845977998045744594421313623476814171432258915371036971748393750643498998602867903426028215015468624808278687192819117264640511915478830315431059422060793707789938512637232763868035781462263048528515299218645655322848003929627845270504149063930164306182554383496791026878217830667308951999077370709639775082638844596506919174098348137017374359670095467918569360929172746167584129789861489158180919478460896008220308927972829328605281787922958571484198816807145102679335302364685552791851002389013238338128576988561642523806818839625799775923275530501798816269052261872398823366091973566300308534298247682937491947642024990272344426616893191443274763270271902238259122742340728992896729897011858646609723747589103480384995655576722513325369779205253293979322235803859574644771787519981243830877733835344628849472493965376512779812903135182795449261104869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a48de5be7c79e470236d2e2934ad2358dcf5317f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a529e8dad39f272785bb5111e72acd2d251ce9b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqt.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017f956aefde0000040300483046022100c7216eee16e3745522bbab609fd8f56ae9e3503ba9823da989d0e162ff2e7805022100cc489e59e80db423af49fc9b5e736f15c72561b16cd8bb3b1fa606fcdbd1e16700770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017f956aefff0000040300483046022100b31d9854eac8fb26aa03f9b2d64c9a3e0ca67748606306a538b8eb7d370f1d4a022100fb12939573350807bc7b0c89b24d8c6e40b7e0ed959793c5806586eeb1e98079007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017f956af01c0000040300473045022100fba4258f7a74b742db8a1753289c15f8272b7716fa55cb5e22ca73ce0487390602202dbf4c31a501662eef605647fd3294fbe208188ad85c116188bb5ba5674467f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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