tcole-qa.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 3f:ea:8a:fe:e7:65:48:bd:3b:9e:a1:5d:ac:4a:0b:71:08:79:08:3e was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:ea:8a:fe:e7:65:48:bd:3b:9e:a1:5d:ac:4a:0b:71:08:79:08:3e
Serial Number (int): 364896901173115401009307526407769627808396544062
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: ca:3c:09:dc:b9:28:e7:7e:41:47:22:25:5b:7a:a9:c4:da:c4:02:ef
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 37:a7:ad:cc:7c:3a:62:05:de:3c:68:d8:ca:78:82:12:f5:68:35:bd
Fingerprint (sha256): 18:3b:49:3d:5a:f3:7d:13:a6:ed:07:63:dc:4b:6d:11:8d:8b:f2:d8:c8:44:8e:85:ab:3f:e2:77:3b:d1:11:21

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate tcole-qa.trinity.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcole-qa.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcole-qa.trinity.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)
ctxnsg01.trinity.unimelb.edu.au
gallery.trinity.edu.au
*.trinity.edu.au
casper02.trinity.unimelb.edu.au
ldap.trinity.edu.au
texas.trinity.edu.au
tcole-qa.trinity.edu.au
texas.trinity.edu.au
portal.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
storefront.trinity.edu.au
tcole.trinity.edu.au
wiki.trinity.edu.au
manage.trinity.edu.au
mrbs.trinity.edu.au
rt.trinity.edu.au
wiki.trinity.edu.au
*.trinity.edu.au
portal.trinity.edu.au
texas.trinity.edu.au
tcole.trinity.edu.au
ezproxy2.trinity.edu.au
cacti.trinity.edu.au
director.trinity.edu.au
*.trinity.edu.au
*.ezproxy.trinity.edu.au
texas.trinity.edu.au
mail.trinity.edu.au
wiki.trinity.edu.au
sts.trinity.edu.au
netscaler.trinity.edu.au
internal.trinity.edu.au
ios.trinity.edu.au
portal.trinity.edu.au
mx.trinity.edu.au
monit.trinity.edu.au
mrbs.trinity.edu.au
mypersonalhealth.trinity.edu.au
portal.trinity.edu.au
webprint.trinity.edu.au
ezproxy.trinity.edu.au
casper02.trinity.unimelb.edu.au
cacti.trinity.edu.au
sts.trinity.edu.au
winapps.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
mail.trinity.edu.au
sts.trinity.edu.au
*.trinity.edu.au
test-rt.trinity.edu.au
rt.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
rt.trinity.edu.au
img.trinity.edu.au

Certificate

The complete raw certificate details for tcole-qa.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r/zY7wgzgNKGQKNl906
U18OVSQvjmIYxnqL0HPeQjAE0Jw5jtWO6B+nY3fE4Yo1MVk3R2G69aeD1dAhBV1v
joRg3VuK5zoRJLpE50B1maZYEEPBPj65wb6CmWbbyGWS0+PHN7ANx1rLw93WL8Ue
AaBk/ACTymQh1iu3exZODLPThmu+Y9Ud4BDgsBwO6nuXQGWAeW3/1xdHjAr1fO0N
4R9eqMxLxcW8b16ztIgTmPV/y+9ZA4kruoWnTHd1utzdFTTr5T8e9zcRkUAQoXb4
YfkZMM+4FgGfl9c+wM/rjVp72+G/C2omRl6QhpFNfzl3J1IN/Zw/fLLn6SOPp3sP
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364896901173115401009307526407769627808396544062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 06:01:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-21 06:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tcole-qa.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27614604920601684474196306164530218712693245593073918042018379197507812895113448961894266516747657333178671726631052143556978344596850666488692689384236106562772914566838604398165893851209014700014525974687603924397342975685379959423239255074884268483817947327682929983543565907824441359632141554202687002663245279077829245425069670151540493499468659923454602937713249590046967100359967272277040780396313804658071920851388063278414031823085000379326200191799831793149937951071513917786547037858651195395420876087443196049802987032364976570146377414692822902970868118689072265501266462843405972029719275855833307221813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcole-qa.trinity.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca3c09dcb928e77e414722255b7aa9c4dac402ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005a4c6eb622986de0ea478da403f3748c9eec50a57704da58edfbce60661f608de19a3069f9f6d2eb94c725bb1b1df8439ab0966e80f32d0eb54634ccce75f9abc010815a7954104dbba058fb765772d0791ebb4d126410fe83e47e700821bf1cb4637cf6de8d4cee526ca782304879c2dbfae5918124c93020ce23c371e662cc9a2dc4553820086cd1e95c6c788773c4b0b080e7c38b5d81de7201ec4009da4f69f25f8687224768417d66a9e0e6b7163d9f0f579f4ef63878afcb6e01fba9c6331b1ec5457c38a8abc7d428d50bf5569c2e387a316704f1cd90f453c273584129bda66a28dea49e600e60b0837509b9ab5680ae0bdf95bafaf8e728434741c986fa524de6557ab66681aaab09ed2986f96d7dfd5384082eb8ae52b95eb0bd4c4acd6f68ffb65f91fe75ff2269f6cad74c46bfe4326ef8081a8d29541cfd2b84d8b0df23ec183fa1b07e37dff283f901ff7b5510edb8e0a85672877ed18ad3dadabae785ab49786bec2e772d5d8bddf0e42e6f42c4d65ac7bb57a7dc0199739a32468631f2a3d927340e68df594286b377b038032d9655f96dedd0137f1d28297e97ddb0db4eb07aeaa9257515db038b2279d8d6854db813bdd758d7953f3284f1a434cf4c1fb68216af7f3d2d5065621343052de8f2a3504c915e8bf70f4cd07dd04172ea1510d5a6a89060bf845ff741860853c2e0d127b0db49a4e830552b