loadbalancer-demo.nsw.education

- NSW Department of Education -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1a:af:3d:d9:39:96:29:01:36:61:97:b1 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSW Department of Education

Organization: NSW Department of Education
State / Province: New South Wales
Locality: Sydney
Country: AU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:af:3d:d9:39:96:29:01:36:61:97:b1
Serial Number (int): 8258464345236000127601186737
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 04:26:5c:cb:4b:1d:78:fb:87:6b:af:17:e8:3d:c2:59:cc:7e:50:dd
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e7:d7:70:3b:0d:d2:c9:12:d6:54:2b:6e:3d:51:4d:73:12:08:f7:1a
Fingerprint (sha256): 1f:b8:a1:a0:55:fa:9c:87:77:f5:fa:5b:20:cd:1d:54:a8:bd:01:b8:a4:88:37:07:bc:bf:ea:d2:23:91:48:61

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate loadbalancer-demo.nsw.education

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer-demo.nsw.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loadbalancer-demo.nsw.education

Other certificates including the domain name nsw.education

(limited to 100 certificates)
ocp-registry.nsw.education
uams-impl-uams.cloudapps.dev.nsw.education
msacache.nsw.education
dev-lb-host0001.nsw.education
dl0992kfkab001.nsw.education
console.obs.dev.nsw.education
tl0992kfkab001.nsw.education
policyarchive.education.nsw.gov.au
tower.nsw.education
ocp-console.dev.nsw.education
uams-front-end.cloudapps.test.nsw.education
pw0992aufm0001.nsw.education
test-lb-host0002.nsw.education
msabp.cloudapps.nsw.education
vcenter.cloudapps.dev.nsw.education
pl0991kfkac0002.nsw.education
cirrus.dev.nsw.education
vault.nsw.education
build.det.nsw.edu.au
uams-front-end-demo.cloudapps.dev.nsw.education
jenkins-ci.cloudapps.dev.nsw.education
pw0991vcutil01.nsw.education
tower.nsw.education
cirrusdb-old.dev.nsw.education
tower.dev.nsw.education
sapcc.prd.dmz.sap.nsw.education
ds6test.nsw.education
sssss.nsw.education
lb-https-test.nsw.education
registry-console.registry.nsw.education
uams-front-end.cloudapps.nsw.education.nsw.education
cirrusdb.nsw.education
cirrus-api.nsw.education
loadbalancer-demo.nsw.education
tower.dev.nsw.education
cirrus.local.nsw.education
cloudapps.nsw.education
admin-console.dev.nsw.education
dl0991af5v0001.nsw.education
msadb.cloudapps.dev.nsw.education
lb-https-test4.nsw.education
prebwadmin.det.nsw.edu.au
vault-dev.nsw.education
pl0991syslog01.nsw.education
uams-front-end-uams-service.cloudapps.dev.nsw.education
tower.nsw.education
nexus.det.nsw.edu.au
cirrustest2.nsw.education
cuattestlb0005.nsw.education
pl0991syslog01.nsw.education
IAPMWebService.det.nsw.edu.au
scm.test.nsw.education
illumio.nsw.education
uams-front-end.cloudapps.nsw.education
msapr.cloudapps.test.nsw.education
tl0992kfkac001.nsw.education
vcenter-citrix.cloudapps.dev.nsw.education
registry-console.dev.nsw.education
bwadmin1.test.det.nsw.edu.au
scm.nsw.education
uams-impl.cloudapps.test.nsw.education
pl0991syslog01.nsw.education
tower.dev.nsw.education
splunk.nsw.education
api-cirrustest.cloudapps.nsw.education
ql0992kfkab001.nsw.education
msaapi.cloudapps.test.nsw.education
proxy.nsw.education
ql0992kfkac003.nsw.education
loadbalancer-demo.nsw.education
forms-dois.cloudapps.dev.nsw.education
sapcc.pre.dmz.sap.nsw.education
matrix.test.nsw.education
dl0991pmprom01.nsw.education
uams-impl.cloudapps.dev.nsw.education
test-lb-host0001.nsw.education
quay.cloudapps.dev.nsw.education
msaltadb.cloudapps.test.nsw.education
dl0475duat7777.nsw.education
tower.dev.nsw.education
samlsigner.dev.det.nsw.edu.au
dl0992kfkac001.nsw.education
build.det.nsw.edu.au
dl0991kfkab205.nsw.education
cloudapps.dev.nsw.education
ql0992kfkac002.nsw.education
console.obs.test.nsw.education
sapcc.pre.dmz.sap.nsw.education
testcertrevoke.dev.nsw.education
matrix.pre.nsw.education
dl0992kfkab202.nsw.education
dl0991cuat9013.nsw.education
pl0992syslog01.nsw.education
sapcc.prd.dmz.sap.nsw.education
pl0992syslog01.nsw.education
tower-proxy.nsw.education
dl0992kfkac002.nsw.education
srhtestlb456.nsw.education
pw0991scordws1.nsw.education
pl0991kfkab0001.nsw.education

Certificate

The complete raw certificate details for loadbalancer-demo.nsw.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte7TsQzEDcvZbtIpgVBG
Ql4dqWDGXT9AdCO6pMUyHkqhTXwIyWslzzANH5Bmyhu+7pi3hvy8fyV5DaQ8pYHs
p71vd9tsi1gZxBg96oMqVxZz0d3IB0DxMrKULFYYfJ+emPJ9HHwrkJSC8vaWGCK/
XvuKoXLdL1kh05Mb/WSGXXRPbEphKq/ymCq1QVUp2GOd6wMbksFZhw+c5rVdR21E
OG+j0DqxZuXWrcs/VYvpgL5f9BUTUAGJUUvAKAK/JwhVaFiSeNqwlCDqKRY2CuYm
CU9vLX/kwfXQEIXPtc2UngAFVNhPacovaqnMY18OKNg1mr0LIzaB6Fk8Dq5iwIA2
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8258464345236000127601186737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 12:21:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-17 12:21:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSW Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer-demo.nsw.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22966903142610623857831643090154482321374079501974670123421400653455129428326365429133687764928521754539741892543788808218012710000568318992893692349366409229861140105737992637569838983426028522039764495514112498892728176323054401568630517992319786234043000962205073469903297062321090568566598232398987944772418855681444088957985817883502184544385828090105961410204263385309219711314012153312996143367438275707378400202541630608699586006361468988424943863511703399979662517270778933126039237009710285303627206363096067221986861363865411084528130335892820803707660217654491664867510917529262522745989978751579468084869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer-demo.nsw.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04265ccb4b1d78fb876baf17e83dc259cc7e50dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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