ask.library.unisa.edu.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:29:4e:db:85:a9:14:bf:5c:7e:a0:50:74:94:bd:6d:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ask.library.unisa.edu.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:29:4e:db:85:a9:14:bf:5c:7e:a0:50:74:94:bd:6d:09
Serial Number (int): 335233039216543910641735472206254429793545
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:03:0a:92:d5:77:eb:78:57:10:9a:e3:16:3f:d7:18:cc:2d:12:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:6a:31:6a:5f:d7:5a:9a:0f:60:8b:a4:89:c3:c9:d5:4a:a6:e2:99
Fingerprint (sha256): 04:ae:ca:e9:2f:73:df:36:ee:68:3d:a1:6c:38:0c:cc:8a:25:35:0a:6b:99:8e:14:d7:b6:18:fd:ee:ed:b1:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ask.library.unisa.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask.library.unisa.edu.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ask.library.unisa.edu.au

Other certificates including the domain name unisa.edu.au

(limited to 100 certificates)
iee-studentweb.ml.unisa.edu.au
allow.sterda.com
sso.unisa.edu.au
imaps.testmail.unisa.edu.au
ereserve.unisa.edu.au
vpn.cisres.unisa.edu.au
devmail.unisa.edu.au
na.smart-integration.status.ricoh.com
funnelback.unisa.edu.au
itupw-ocs1.uninet.unisa.edu.au
na.smart-integration.status.ricoh.com
*.copyright.unisa.edu.au
aws-itupw-ct1b.vapps-prod.unisa.edu.au
*.library.unisa.edu.au
service-status.unisa.edu.au
*.librarydev.unisa.edu.au
na.smart-integration.status.ricoh.com
constructionwaste.unisa.edu.au
ask.library.unisa.edu.au
na.smart-integration.status.ricoh.com
edgex.unisa.edu.au
tango.unisa.edu.au
www.unisa.edu.au
www.unisa.edu.au
auth4.unisa.edu.au
communication.unisa.edu.au
sip.unisa.edu.au
cis-web.ml.unisa.edu.au
itupa-scan1.ml.unisa.edu.au
vcs.unisa.edu.au
itupa-cssm1.cw.unisa.edu.au
search.alumni.unisa.edu.au
login-idp.unisa.edu.au
itupw-cxrds2.uninet.unisa.edu.au
service-status.unisa.edu.au
*.access.library.unisa.edu.au
na.smart-integration.status.ricoh.com
itupw-live1.cw.unisa.edu.au
ccb.unisa.edu.au
www.unisa.edu.au
www.financesystem.unisa.edu.au
mediastream-test.unisa.edu.au
ieepl-mail1.ml.unisa.edu.au
chocolatey.unisa.edu.au
sp14.uninet.unisa.edu.au
na.smart-integration.status.ricoh.com
*.unisa.edu.au
hscpw-rado1.uninet.unisa.edu.au
prd-wildcard.unisa.edu.au
na.smart-integration.status.ricoh.com
ext.unisa.edu.au
ituta-mfapoc7.cw.unisa.edu.au
bi.unisa.edu.au
dev.lo.unisa.edu.au
nanozoomer.unisa.edu.au
na.smart-integration.status.ricoh.com
ask.library.unisa.edu.au
ipam-tst.unisa.edu.au
na.smart-integration.status.ricoh.com
waterlink.unisa.edu.au
search.library.unisa.edu.au
redir19.unisa.edu.au
bpi.unisa.edu.au
aws-itupw-cxd1c.vapps-prod.unisa.edu.au
edgex-test.unisa.edu.au
na.smart-integration.status.ricoh.com
alms.unisa.edu.au
admin1.ise.unisa.edu.au
inmpw-dbtech.ml.unisa.edu.au
login-idp-dev.unisa.edu.au
aws-itupw-ct2c.vapps-prod.unisa.edu.au
ojs.unisa.edu.au
webapplications.unisa.edu.au
vapps.unisa.edu.au
ereserve.unisa.edu.au
engage.unisa.edu.au
sponsor.unisa.edu.au
aws-itupw-csf1b.vapps-prod.unisa.edu.au
rds.unisa.edu.au
lo.unisa.edu.au
functions.unisa.edu.au
na.smart-integration.status.ricoh.com
cpi.unisa.edu.au
unisanet.unisa.edu.au
testmail.unisa.edu.au
api.unisa.edu.au
na.smart-integration.status.ricoh.com
mycareerplan.unisa.edu.au
onarrivalreception.unisa.edu.au
inmpw-dc1.cybernet.unisa.edu.au
go.mcvserverlab.com
assetbank.unisa.edu.au
allow.sterda.com
allow.sterda.com
caisapplications.unisa.edu.au
search.library.unisa.edu.au
wiki.unisa.edu.au
ep.unisa.edu.au
podcast-temp.unisa.edu.au
allow.sterda.com

Certificate

The complete raw certificate details for ask.library.unisa.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335233039216543910641735472206254429793545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 03:16:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 03:16:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask.library.unisa.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802698528224223030951596579963068914306870694026006076223069928438875849279844364172668198304629133329746313604641776869378629070144473377377269939072158179551040544909026681343725984698423187037209003488896819261564071071967040683423144430049117801407912235970806620296973490346967586443735640549575395090350087276159929582238108156182643498486970016385187134886112985842659826634319035006842625210600655508123887578769716342785377743335995876370395652014525273573147177370274697977048651311467301230738502176180875697667141223544107946277213557358555857452396788063802687020710914414219344427005432848660383724004312583264313168381125396877668065416582407823766253181506617252369034307906790288944097086304979928809059038182769136958777661425884335131116459109865379462147364404373109297752307492960774573763583506438554655699483392846699670801537581274953552981808750370352145819268006762332086610708686109544328310927559642723092813020586768243936793147904059260366091038566491206878709490745775894509566837469136114191920167818817236706332236540272459231903316087309126347648359078099326028720766659743996722367492624321533512099979840379155860325824738472414853649141563209941419139832025139589650526101135809874314187486488123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07030a92d577eb7857109ae3163fd718cc2d12ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.library.unisa.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168bbdf0ab10000040300483046022100b15a48ebf9c237e81e9ab6b18327aad09033a124598e956f918f84bc0cdeb9d202210099653c92e364331daa897c3505eb4bbc0617deb7fba9795baf508749c18a29ec007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168bbdf0ab20000040300463044022067f83ecad8c616fc98b3e4e958e098d9d20d200bfc175192780ba6deee32274502205b3a7fb7af76ae97544b18c777db50a56d9b842433c8995902cce662a5612dfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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