gallery.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 0f:aa:1c:b9:4b:d2:52:86:36:3a:24:39:03:80:1e:bb:70:e6:00:68 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:aa:1c:b9:4b:d2:52:86:36:3a:24:39:03:80:1e:bb:70:e6:00:68
Serial Number (int): 89428490443135924273184836369781623471775023208
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 15:16:ec:8f:60:d2:99:96:cc:95:79:7d:d6:99:d3:2d:b3:e1:71:3d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 2b:7a:90:c0:dc:d6:82:8f:38:c6:8a:8e:f9:cd:16:cb:28:e8:a6:10
Fingerprint (sha256): 03:c1:c7:e1:aa:0d:61:5d:f0:f8:02:4d:e0:d2:c4:97:42:43:3f:53:6c:35:1d:80:ac:df:0e:c0:0f:07:08:ee

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate gallery.trinity.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gallery.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gallery.trinity.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)
ctxnsg01.trinity.unimelb.edu.au
gallery.trinity.edu.au
*.trinity.edu.au
casper02.trinity.unimelb.edu.au
ldap.trinity.edu.au
texas.trinity.edu.au
tcole-qa.trinity.edu.au
texas.trinity.edu.au
portal.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
storefront.trinity.edu.au
tcole.trinity.edu.au
wiki.trinity.edu.au
manage.trinity.edu.au
mrbs.trinity.edu.au
rt.trinity.edu.au
wiki.trinity.edu.au
*.trinity.edu.au
portal.trinity.edu.au
texas.trinity.edu.au
tcole.trinity.edu.au
ezproxy2.trinity.edu.au
cacti.trinity.edu.au
director.trinity.edu.au
*.trinity.edu.au
*.ezproxy.trinity.edu.au
texas.trinity.edu.au
mail.trinity.edu.au
wiki.trinity.edu.au
sts.trinity.edu.au
netscaler.trinity.edu.au
internal.trinity.edu.au
ios.trinity.edu.au
portal.trinity.edu.au
mx.trinity.edu.au
monit.trinity.edu.au
mrbs.trinity.edu.au
mypersonalhealth.trinity.edu.au
portal.trinity.edu.au
webprint.trinity.edu.au
ezproxy.trinity.edu.au
casper02.trinity.unimelb.edu.au
cacti.trinity.edu.au
sts.trinity.edu.au
winapps.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
mail.trinity.edu.au
sts.trinity.edu.au
*.trinity.edu.au
test-rt.trinity.edu.au
rt.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
rt.trinity.edu.au
img.trinity.edu.au

Certificate

The complete raw certificate details for gallery.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5uXypVoiTOFXxCBg/tG
+Ki+O1anjSryCt6aiblsd9ANX6EILr+2T+6LzdG68zPyBzeH89p+NVTHRnbjlVG4
EpkVqZUWVH7swMUNjVCI35uQPdVFkINP7Q3ubpMjo60q5qoNPVHyEonADwKGDSqr
Ou8U+AxRj6xwBXYxzx6aDQ3Px+mEmIeFnNdRTJ8Xxmno975Tv4kKZXRBVzaN+S9g
mx/gTICIj6j2+SGEPRIOcqHtaHh2VgRzCi2ck30W8pHvnKAnEBA0RP7yTxwp3Tub
61HU0SFyJZX4KB7PvJVtQXEWhAqhVhXxE3kOm9UWKSgMGMtVEV+yVPSMpyv9o+J1
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89428490443135924273184836369781623471775023208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-27 01:38:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 01:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gallery.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25198148424067389293158628710626428158866934467216428075101186633566828160101769804597602693653325485065365197191054535818183854376758198923484132264858341895998490956773555696178799466848761723731577968353933896227458805140310246428290896764694645030702859873287433621352995027999527180465836021337139225700618766004970971692828970016004054820592268296161949466009050661700505358577974936045044134128221088719777175672118503400629372365586518336644179388291269404116578001847764323650518716625045775502987712557385540096522821358929132617286275971988182806980037865322000006684724962486196220686838508083548587717961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallery.trinity.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1516ec8f60d29996cc95797dd699d32db3e1713d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00bc41232090cd6eed07acc503ee4b18ee2f3d00ffa45a3569ddad1bb9fcc0e20d5e47268690399d5735a1061d65dd5e4881ee50f85c50d24201d166d80649aab5e3a55f92d57b164b2d8aad88caaf1836f99c3ce786f180931baff36287a31cf2ac16f6da250c2d4cb220c0fd2352eff7bc6e64f15e9e42dd93cde523670ad90e44ed3adeea5a6851e513e9a40b44baf46354404be77eb4461d7674772d878037670740ae089a1f008da1bc286c7c28070619eac5d9babf254540dd34b6f62048981bdf29f81825465e769544d4eb78e0359fea8898649c7f7e6ed65a8612bf52fbc393ef714022717076ba24b22136435acf3a75f4a211b8687808afa60ab2ed4b6ba18968ddd56eb1fad6f233b7ac5c9d02639a65e87807b4c1c89aba38f92adac84556ca9d744d6d911dfc3b582e0b234be0f4564d4d11ec1cca09e4a7729e319aff6a03068fdc3fcc3b5da08d759b3de09c5a4083b995217025eb21a12a27fffa874ec9369a5b425ab400de1afeeadc44b3743dc9a87d357d156ec0284639a3d1144e5acef70ba129256554f0a0599939df74ac91540246dd81eb7449bf602a20519bd6ff616af6238f17fd4b4d5bfc2cefc3c349eba3a9dd7dfa7c6bd58640729b67cac704eef9a3d591b3064ecae4cac7f5e50eca3f4a8362799145f575a9d6c043bbec4802849e782835e8003a87e92b3279f5a921f10add6f65cdb95f