eresearch.unimelb.edu.au

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:18:a1:e4:6b:d6:94:8f:7d:ba:e0:6f:66:0d:57:50:24 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eresearch.unimelb.edu.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:18:a1:e4:6b:d6:94:8f:7d:ba:e0:6f:66:0d:57:50:24
Serial Number (int): 423344006514273723048983823961725741781028
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:78:e4:59:67:61:0a:ba:a7:8e:07:24:62:7a:69:33:a1:b8:0c:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:65:59:88:3b:39:76:3d:7e:c5:82:8d:d7:27:64:4e:ce:a3:62:64
Fingerprint (sha256): 03:53:5f:18:b4:1a:52:62:3f:0a:b1:02:03:59:29:90:c3:e7:0c:a4:1f:98:b3:5f:2f:99:c3:da:4e:e8:26:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate eresearch.unimelb.edu.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eresearch.unimelb.edu.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eresearch.unimelb.edu.au
www.eresearch.unimelb.edu.au

Other certificates including the domain name unimelb.edu.au

(limited to 100 certificates)
000s-dc-stu-qs4.student.unimelb.edu.au
experts-pool.its.unimelb.edu.au
mail.unicol.unimelb.edu.au
msd.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
ctxnsg01.trinity.unimelb.edu.au
your.unimelb.edu.au
my.jch.unimelb.edu.au
trials.cera.unimelb.edu.au
resourcebooker.unimelb.edu.au
www.highq.com
puppet.unimelb.edu.au
stmarys.unimelb.edu.au
pictures.staff.unimelb.edu.au
ags42.atlas.unimelb.edu.au
esp.commercial.unimelb.edu.au
www.highq.com
wiki-test.cloud.unimelb.edu.au
research.finearts-music.unimelb.edu.au
mail.unicol.unimelb.edu.au
www.shop.unimelb.edu.au
art-museum.unimelb.edu.au
www.unimelb.edu.au
ci.h.eresearch.unimelb.edu.au
huntlab.science.unimelb.edu.au
resetpw.ormond.unimelb.edu.au
www.fbe.unimelb.edu.au
www.highq.com
abrahams.chemistry.unimelb.edu.au
www.queens.unimelb.edu.au
jch.unimelb.edu.au
web.unimelb.edu.au
melbournemodel.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
identity.unimelb.edu.au
ags31.atlas.unimelb.edu.au
apps.eng.unimelb.edu.au
nexusmse.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
queen.its.unimelb.edu.au
www.highq.com
webapp-hosting.eresearch.unimelb.edu.au
melbournepollen.nixdev.unimelb.edu.au
eresearch.unimelb.edu.au
shop.trinity.unimelb.edu.au
uomwfmp01meld.acc.unimelb.edu.au
owa.shepmed.unimelb.edu.au
covid19.science.unimelb.edu.au
quality.its.unimelb.edu.au
indicatortracking.iehu.unimelb.edu.au
www.archives.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
www.highq.com
podcasts.unimelb.edu.au
agargus.atlas.unimelb.edu.au
ut.ormond.unimelb.edu.au
ecommerce.unimelb.edu.au
housing.unimelb.edu.au
casper02.trinity.unimelb.edu.au
www.highq.com
ags27.atlas.unimelb.edu.au
www.highq.com
annualreport.about.unimelb.edu.au
ulpa.edu.au
cogtale-staging.eresearch.unimelb.edu.au
matilda.unimelb.edu.au
*.vet.unimelb.edu.au
www.highq.com
tower-dev.its.unimelb.edu.au
ameb.unimelb.edu.au
mail.whitley.unimelb.edu.au
vm-115-146-91-92.rc.cloud.unimelb.edu.au
paintrainer.org
research.finearts-music.unimelb.edu.au
*.le.unimelb.edu.au
5682747733442560-fe3.pantheonsite.io
sysdoc.its.unimelb.edu.au
www.highq.com
shop.unimelb.edu.au
bpg.unimelb.edu.au
searchmuseums.mdhs.unimelb.edu.au
ewormald.ws.queens.unimelb.edu.au
*.fbe.unimelb.edu.au
www.highq.com
identity.unimelb.edu.au
nexusengfuturestudents.unimelb.edu.au
www.highq.com
ctac.esrc.aws.uom.cloud
mobile.my.unimelb.edu.au
edtech.le.unimelb.edu.au
www.highq.com
www.highq.com
www.highq.com
www.braembl.org.au
ecommerce.unimelb.edu.au
nexus.ihouse.unimelb.edu.au
icatmon.its.unimelb.edu.au
ldap.trinity.edu.au
forms.ormond.unimelb.edu.au
ev.unimelb.edu.au

Certificate

The complete raw certificate details for eresearch.unimelb.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqHsbYlCHjkymhHOw9zA+
Ch6IK7dURD9Vzvx/W7SvSZ/3Wh0yjEvxzhrL2WsNA75Pzm0auFcCNBXiH+pe40O6
cDTB4hhkBCxwq4AJn+N1RZMTJv1WKwJMt1DyYNsAf5LEzBoBwAnDPHy6wBdZ7B2p
J0KJfUFPG+EbdSGN7LDnTtMQGEQ0AoJ6hGWfDhy0HYkf6vM3+5y/Zmb66f510EH1
cpNk10N79SSpgxXfKhwC2sxrp6fGb8X3F6eRtcIESdqSBHMNdGKHmcmbNyZ6wkno
StzcG8nZu5Go7vasktQamFk0FKYWRgPxfKnlqpRmv/eu57krXY5v+E0juX9GsRwc
1lewlJSIKPbIfNXLQXqYhb2tfZ9hxqeTWkzjT5ISKKO1svfLyFR05jxch1Yl8B11
+bQVgUzIlIz+Op0GmqS4wFRtEmvkbSOMA/rxhj/xqiJNqPbGw+j9Y9+SyENypcNg
E62/u8mesTbJta6/fGIaqHBgMueu68tVtAePQXe4k/AeRSsrhJOCShYUxvIT0/hZ
6ncl2WPXQE5iUQvRKBXdfkP6/RarZrWyO1HlSRwuJU7kT0udnrsHo3Gl3TEPcBw8
1M6UoPnuHMkspVeZmk5wGGkaCec/JYg4J2lj6PMSxdj95CEyv1RZyzI/bUY4k98L
X5WhPHz7TO5EabX4N5rZBNECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423344006514273723048983823961725741781028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-25 08:20:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-24 08:20:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eresearch.unimelb.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687342049581485884108191588772881913338798327646072917403432141230208899898695428014361000553288349034492537435803539831200215218563513134551340973301094566809792286223937617878767314030256533575682452904786894184740046693775485756398397415645115937147936851159044218370495243691885652401028880650093071564291826328237022748062319797714823176676400934985169150215070158125211922996206572634620914633233598077092048429907745890971251898963727093197280843433864166849663582289370118700406823410593429696166702941453278880758565743886409157185951140848228925665785268392026564724325330581544958627484726940086758618580656207366057792687153592235442544261525877120408726014799770922687769850602177188171057331874959461495833709311490854672072768324849107940740516890603814870807628467334317130307065137789458317915746912895664505919294687266359572676470704169906236174152400506188462312900969106441490186019321770912036389111108573686000441730630359751641770609195510651849831095288179671710198188144128527147488810567797486902951266476755744767491472311159618291702987550199011420185195789111564058391578501916460095728965951104515670773846476253910388849029016695739655442007260365682293429438480746285900032858213924823142575174649041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d478e45967610abaa78e0724627a6933a1b80cfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eresearch.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eresearch.unimelb.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018373f3082000000403004730450220442bce30142265d390c2f22c9e4aac3a21b8e5d23da918512af6e0164480ddef022100f37a41165c59f2b96419d61aae9829b1730f62bd3cf1ee95b9993a754a47aef100770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018373f308480000040300483046022100c1604a13c57eb2950b68d9bc59d0c435431d177be3b7a65ac6f19b2f7e540ded022100b10e1e858c2aca9d2a4dd77dc191b00956ee0c8aa324202df7a187ac4cfb4200
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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