ocp-registry.nsw.education

- NSW Department of Education -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4f:65:04:06:2a:84:20:67:af:ce:36:bb was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSW Department of Education

Organization: NSW Department of Education
State / Province: New South Wales
Locality: Sydney
Country: AU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:65:04:06:2a:84:20:67:af:ce:36:bb
Serial Number (int): 24571436286877343172963219131
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 4c:eb:a5:77:ab:b6:93:21:66:40:cb:85:b3:d0:3b:67:48:ba:53:0a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 93:92:f8:f7:68:65:40:1e:67:69:31:ba:f2:82:33:0d:e1:bb:e5:da
Fingerprint (sha256): 00:1a:ba:39:eb:47:d2:db:df:ac:e1:d8:03:fa:46:7b:cf:63:2d:55:75:2a:aa:33:5d:75:80:61:18:ee:3d:83

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate ocp-registry.nsw.education

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocp-registry.nsw.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocp-registry.nsw.education

Other certificates including the domain name nsw.education

(limited to 100 certificates)
ocp-registry.nsw.education
uams-impl-uams.cloudapps.dev.nsw.education
msacache.nsw.education
dev-lb-host0001.nsw.education
dl0992kfkab001.nsw.education
console.obs.dev.nsw.education
tl0992kfkab001.nsw.education
policyarchive.education.nsw.gov.au
tower.nsw.education
ocp-console.dev.nsw.education
uams-front-end.cloudapps.test.nsw.education
pw0992aufm0001.nsw.education
test-lb-host0002.nsw.education
msabp.cloudapps.nsw.education
vcenter.cloudapps.dev.nsw.education
pl0991kfkac0002.nsw.education
cirrus.dev.nsw.education
vault.nsw.education
build.det.nsw.edu.au
uams-front-end-demo.cloudapps.dev.nsw.education
jenkins-ci.cloudapps.dev.nsw.education
pw0991vcutil01.nsw.education
tower.nsw.education
cirrusdb-old.dev.nsw.education
tower.dev.nsw.education
sapcc.prd.dmz.sap.nsw.education
ds6test.nsw.education
sssss.nsw.education
lb-https-test.nsw.education
registry-console.registry.nsw.education
uams-front-end.cloudapps.nsw.education.nsw.education
cirrusdb.nsw.education
cirrus-api.nsw.education
loadbalancer-demo.nsw.education
tower.dev.nsw.education
cirrus.local.nsw.education
cloudapps.nsw.education
admin-console.dev.nsw.education
dl0991af5v0001.nsw.education
msadb.cloudapps.dev.nsw.education
lb-https-test4.nsw.education
prebwadmin.det.nsw.edu.au
vault-dev.nsw.education
pl0991syslog01.nsw.education
uams-front-end-uams-service.cloudapps.dev.nsw.education
tower.nsw.education
nexus.det.nsw.edu.au
cirrustest2.nsw.education
cuattestlb0005.nsw.education
pl0991syslog01.nsw.education
IAPMWebService.det.nsw.edu.au
scm.test.nsw.education
illumio.nsw.education
uams-front-end.cloudapps.nsw.education
msapr.cloudapps.test.nsw.education
tl0992kfkac001.nsw.education
vcenter-citrix.cloudapps.dev.nsw.education
registry-console.dev.nsw.education
bwadmin1.test.det.nsw.edu.au
scm.nsw.education
uams-impl.cloudapps.test.nsw.education
pl0991syslog01.nsw.education
tower.dev.nsw.education
splunk.nsw.education
api-cirrustest.cloudapps.nsw.education
ql0992kfkab001.nsw.education
msaapi.cloudapps.test.nsw.education
proxy.nsw.education
ql0992kfkac003.nsw.education
loadbalancer-demo.nsw.education
forms-dois.cloudapps.dev.nsw.education
sapcc.pre.dmz.sap.nsw.education
matrix.test.nsw.education
dl0991pmprom01.nsw.education
uams-impl.cloudapps.dev.nsw.education
test-lb-host0001.nsw.education
quay.cloudapps.dev.nsw.education
msaltadb.cloudapps.test.nsw.education
dl0475duat7777.nsw.education
tower.dev.nsw.education
samlsigner.dev.det.nsw.edu.au
dl0992kfkac001.nsw.education
build.det.nsw.edu.au
dl0991kfkab205.nsw.education
cloudapps.dev.nsw.education
ql0992kfkac002.nsw.education
console.obs.test.nsw.education
sapcc.pre.dmz.sap.nsw.education
testcertrevoke.dev.nsw.education
matrix.pre.nsw.education
dl0992kfkab202.nsw.education
dl0991cuat9013.nsw.education
pl0992syslog01.nsw.education
sapcc.prd.dmz.sap.nsw.education
pl0992syslog01.nsw.education
tower-proxy.nsw.education
dl0992kfkac002.nsw.education
srhtestlb456.nsw.education
pw0991scordws1.nsw.education
pl0991kfkab0001.nsw.education

Certificate

The complete raw certificate details for ocp-registry.nsw.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kRKHQVIy83mT1awuDbZ
jkSOasWtmZTOUv8+ipZD3/VI/z2aSzAUS00Gd8Udqg4kjv0l1cmEbMfo7TDwozu4
im1YrMCaY47M5LabADcbilMC8nXe+BDPD2FWixBAIaWR4b9VJUDOd5A8tA0CJtru
w6jng00lGTqNHHMX4LRmYZArYKFp2SEia0oP/Gp+2zIg+dwx+lc/a7JptQLLnlNj
EsGnrXcmlSDO7jZOHpx+YHZyKi1rzHB/QnmhP+lZE2oNXr3Iq6eGf4i5eMCbKkf0
0zKqA70ngFG9s7OcAAu5fVUbNB7I3luxKDEFBFxbXn/HngW/XjvV0U2UCo69Y4+m
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24571436286877343172963219131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 03:53:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-05 03:53:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSW Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocp-registry.nsw.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30078391392072534770220021484353161456311096476655609810174143244362489092109107720212032675812752174429247029232302361851915184790671210464317624120170863281476821635768820414010336292147350671744065093672688021826161281994864340465969760709793446990252088823393880318046717404008646739248255952097774715066739744284641097091363105794433899143044652629788034796052336738104848384195531124823818742101652778859811292654091805229222292361339134658621745102084288828703295207303863665415484383386633799723196383690366843103637838460769241075518680375100332030434769992721973043708699543781765943014408283416404343891531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocp-registry.nsw.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ceba577abb693216640cb85b3d03b6748ba530a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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