resourcebooker.unimelb.edu.au

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 04:d8:39:9b:fd:01:fa:46:3c:f3:aa:2c:bc:ea:3c:6b was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=resourcebooker.unimelb.edu.au

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:39:9b:fd:01:fa:46:3c:f3:aa:2c:bc:ea:3c:6b
Serial Number (int): 6439616560597882413469068199125990507
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3b:37:b4:56:f9:a9:61:12:d5:2e:c5:c7:8e:9f:ca:58:da:07:d9:1c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 50:0c:1a:77:a0:b0:d7:91:9d:5d:59:0e:11:0f:f3:34:01:cc:e2:fc
Fingerprint (sha256): 00:ab:60:b2:aa:f5:f1:51:0a:67:a5:84:2d:69:11:8d:0b:c3:96:b2:9c:b0:c7:71:cd:73:5d:0c:b8:e5:ed:bd

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate resourcebooker.unimelb.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resourcebooker.unimelb.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resourcebooker.unimelb.edu.au

Other certificates including the domain name unimelb.edu.au

(limited to 100 certificates)
000s-dc-stu-qs4.student.unimelb.edu.au
experts-pool.its.unimelb.edu.au
mail.unicol.unimelb.edu.au
msd.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
ctxnsg01.trinity.unimelb.edu.au
your.unimelb.edu.au
my.jch.unimelb.edu.au
trials.cera.unimelb.edu.au
resourcebooker.unimelb.edu.au
www.highq.com
puppet.unimelb.edu.au
stmarys.unimelb.edu.au
pictures.staff.unimelb.edu.au
ags42.atlas.unimelb.edu.au
esp.commercial.unimelb.edu.au
www.highq.com
wiki-test.cloud.unimelb.edu.au
research.finearts-music.unimelb.edu.au
mail.unicol.unimelb.edu.au
www.shop.unimelb.edu.au
art-museum.unimelb.edu.au
www.unimelb.edu.au
ci.h.eresearch.unimelb.edu.au
huntlab.science.unimelb.edu.au
resetpw.ormond.unimelb.edu.au
www.fbe.unimelb.edu.au
www.highq.com
abrahams.chemistry.unimelb.edu.au
www.queens.unimelb.edu.au
jch.unimelb.edu.au
web.unimelb.edu.au
melbournemodel.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
identity.unimelb.edu.au
ags31.atlas.unimelb.edu.au
apps.eng.unimelb.edu.au
nexusmse.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
queen.its.unimelb.edu.au
www.highq.com
webapp-hosting.eresearch.unimelb.edu.au
melbournepollen.nixdev.unimelb.edu.au
eresearch.unimelb.edu.au
shop.trinity.unimelb.edu.au
uomwfmp01meld.acc.unimelb.edu.au
owa.shepmed.unimelb.edu.au
covid19.science.unimelb.edu.au
quality.its.unimelb.edu.au
indicatortracking.iehu.unimelb.edu.au
www.archives.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
www.highq.com
podcasts.unimelb.edu.au
agargus.atlas.unimelb.edu.au
ut.ormond.unimelb.edu.au
ecommerce.unimelb.edu.au
housing.unimelb.edu.au
casper02.trinity.unimelb.edu.au
www.highq.com
ags27.atlas.unimelb.edu.au
www.highq.com
annualreport.about.unimelb.edu.au
ulpa.edu.au
cogtale-staging.eresearch.unimelb.edu.au
matilda.unimelb.edu.au
*.vet.unimelb.edu.au
www.highq.com
tower-dev.its.unimelb.edu.au
ameb.unimelb.edu.au
mail.whitley.unimelb.edu.au
vm-115-146-91-92.rc.cloud.unimelb.edu.au
paintrainer.org
research.finearts-music.unimelb.edu.au
*.le.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
sysdoc.its.unimelb.edu.au
www.highq.com
shop.unimelb.edu.au
bpg.unimelb.edu.au
searchmuseums.mdhs.unimelb.edu.au
ewormald.ws.queens.unimelb.edu.au
*.fbe.unimelb.edu.au
www.highq.com
identity.unimelb.edu.au
nexusengfuturestudents.unimelb.edu.au
www.highq.com
ctac.esrc.aws.uom.cloud
mobile.my.unimelb.edu.au
edtech.le.unimelb.edu.au
www.highq.com
www.highq.com
www.highq.com
www.braembl.org.au
ecommerce.unimelb.edu.au
nexus.ihouse.unimelb.edu.au
icatmon.its.unimelb.edu.au
ldap.trinity.edu.au
forms.ormond.unimelb.edu.au
ev.unimelb.edu.au

Certificate

The complete raw certificate details for resourcebooker.unimelb.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYnBCg8wrag6oUDkswfv
vlCvic81cZBPyO20mEaRPAlDmsDO/u2Ugu80yTKYIelrxMZpTfWsiC915rOn4icH
8iHqJqBo1IYLP7rcCPbrZC80rJaoa/9Xe5jbGM9l0FHyfjb8uKlWkJ/ZrK0pu7eo
MNciiM3Bxw4WPGd8haxWDGIILQbmKfncl0n3vFc4AIFWjyN/2dWWwFXv/Rp298NV
hiQBTFrxlVR0VtVuRzCuUCeB768/wah00Tfe9FJ2VEq2NN9c+oMOIdbS4TxJILiM
yF82EUtTbPWAh+g0i7KiKEDdGX2SWMJeH/j84xS5rQ+iziSZ7XILxd/2bLqomuhN
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6439616560597882413469068199125990507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resourcebooker.unimelb.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23926968697195183595866560477951252371053700476451793785490843659070260474719985385685571739802197745742090193751558037967704670997352185197332056635067193852720707660417016557045981761917075652272351419525903816342436646005440638856527078791641426714591930068906014375445231096327815278252398865638878151718688844171596523195882051419601113136537858150310207726930390744957021590731213087083725157486879568913302901102537633846144822311275861538669689396876643507632622319266376744052465900065630346733142778459815357271843756451163418597054576534519038505224478598116765550804666684787168385535166780152787587583353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b37b456f9a96112d52ec5c78e9fca58da07d91c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcebooker.unimelb.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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