scm.nsw.education

- NSW Department of Education -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0a:35:6f:f1:8f:6f:dc:b2:32:9e:a6:29 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NSW Department of Education

Organization: NSW Department of Education
State / Province: New South Wales
Locality: Sydney
Country: AU

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:35:6f:f1:8f:6f:dc:b2:32:9e:a6:29
Serial Number (int): 3159451805333668655878022697
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: d4:77:0c:fc:b7:ff:f6:9a:b6:cb:22:64:63:ba:3e:2e:83:c1:84:fc
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fd:3f:78:16:be:04:28:4d:57:44:92:92:32:49:ba:e6:20:83:99:2d
Fingerprint (sha256): 33:d5:fe:10:59:c3:f4:02:7b:7f:04:18:db:c4:f8:8c:b1:7a:44:9b:0a:49:74:c3:98:92:8f:72:c9:e9:67:fe

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate scm.nsw.education

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scm.nsw.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scm.nsw.education

Other certificates including the domain name nsw.education

(limited to 100 certificates)
ocp-registry.nsw.education
uams-impl-uams.cloudapps.dev.nsw.education
msacache.nsw.education
dev-lb-host0001.nsw.education
dl0992kfkab001.nsw.education
console.obs.dev.nsw.education
tl0992kfkab001.nsw.education
policyarchive.education.nsw.gov.au
tower.nsw.education
ocp-console.dev.nsw.education
uams-front-end.cloudapps.test.nsw.education
pw0992aufm0001.nsw.education
test-lb-host0002.nsw.education
msabp.cloudapps.nsw.education
vcenter.cloudapps.dev.nsw.education
pl0991kfkac0002.nsw.education
cirrus.dev.nsw.education
vault.nsw.education
build.det.nsw.edu.au
uams-front-end-demo.cloudapps.dev.nsw.education
jenkins-ci.cloudapps.dev.nsw.education
pw0991vcutil01.nsw.education
tower.nsw.education
cirrusdb-old.dev.nsw.education
tower.dev.nsw.education
sapcc.prd.dmz.sap.nsw.education
ds6test.nsw.education
sssss.nsw.education
lb-https-test.nsw.education
registry-console.registry.nsw.education
uams-front-end.cloudapps.nsw.education.nsw.education
cirrusdb.nsw.education
cirrus-api.nsw.education
loadbalancer-demo.nsw.education
tower.dev.nsw.education
cirrus.local.nsw.education
cloudapps.nsw.education
admin-console.dev.nsw.education
dl0991af5v0001.nsw.education
msadb.cloudapps.dev.nsw.education
lb-https-test4.nsw.education
prebwadmin.det.nsw.edu.au
vault-dev.nsw.education
pl0991syslog01.nsw.education
uams-front-end-uams-service.cloudapps.dev.nsw.education
tower.nsw.education
nexus.det.nsw.edu.au
cirrustest2.nsw.education
cuattestlb0005.nsw.education
pl0991syslog01.nsw.education
IAPMWebService.det.nsw.edu.au
scm.test.nsw.education
illumio.nsw.education
uams-front-end.cloudapps.nsw.education
msapr.cloudapps.test.nsw.education
tl0992kfkac001.nsw.education
vcenter-citrix.cloudapps.dev.nsw.education
registry-console.dev.nsw.education
bwadmin1.test.det.nsw.edu.au
scm.nsw.education
uams-impl.cloudapps.test.nsw.education
pl0991syslog01.nsw.education
tower.dev.nsw.education
splunk.nsw.education
api-cirrustest.cloudapps.nsw.education
ql0992kfkab001.nsw.education
msaapi.cloudapps.test.nsw.education
proxy.nsw.education
ql0992kfkac003.nsw.education
loadbalancer-demo.nsw.education
forms-dois.cloudapps.dev.nsw.education
sapcc.pre.dmz.sap.nsw.education
matrix.test.nsw.education
dl0991pmprom01.nsw.education
uams-impl.cloudapps.dev.nsw.education
test-lb-host0001.nsw.education
quay.cloudapps.dev.nsw.education
msaltadb.cloudapps.test.nsw.education
dl0475duat7777.nsw.education
tower.dev.nsw.education
samlsigner.dev.det.nsw.edu.au
dl0992kfkac001.nsw.education
build.det.nsw.edu.au
dl0991kfkab205.nsw.education
cloudapps.dev.nsw.education
ql0992kfkac002.nsw.education
console.obs.test.nsw.education
sapcc.pre.dmz.sap.nsw.education
testcertrevoke.dev.nsw.education
matrix.pre.nsw.education
dl0992kfkab202.nsw.education
dl0991cuat9013.nsw.education
pl0992syslog01.nsw.education
sapcc.prd.dmz.sap.nsw.education
pl0992syslog01.nsw.education
tower-proxy.nsw.education
dl0992kfkac002.nsw.education
srhtestlb456.nsw.education
pw0991scordws1.nsw.education
pl0991kfkab0001.nsw.education

Certificate

The complete raw certificate details for scm.nsw.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NDISx2/IWyJMrfUVc5Z
3KDGYlzBgfvxnFgJNRCnD4zBlwwJj1HU+lQYxPUNZr85BHp3EgcVyN5f8osSV5G4
D3ZedAJ7ZwkCdkJaV4GdjT3HCNFLdmPmtwH43232HeA+J6c+Re2I5XhFCx1WaKQw
pmN4FPofXKFg1bw7xKmw5xXKbviTXfIUBLrgQnEEHH8aAlR6xjRbNGvzrrxpJecY
qOF5Xm1XpjdFt5INuwPCvVwrdq0QRC/GgYWwbE3iM0rOtXyzyEZNEAnI4zUIHr0/
Q78ZoEHlOI0cQ+pdIG5xvWRUXlMSubglrzB7TJFDirh3Zymu9jsJ0dMH8MqXzrM7
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3159451805333668655878022697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 03:06:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 03:06:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sydney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSW Department of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scm.nsw.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29895194408711690268807637886619184869975191761287589163123479009493569119559778952788258569185827859460335957355706936906740074786079691596774118515100706723975622089728089539978763073623705229545565310350086341516956354234880007658130886821392183211919102926332433994076170438230936417170091355029691699140539635348171721024874286108175374313605298592551705403149384518305703059900699889470669014155686134799604279276861876091364980122444085292012655746315780489968183207865583085804244301646806003580863669202461210236736402209906621217552427223481394071885089877502134164065570198997169488056987745671543495277481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm.nsw.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4770cfcb7fff69ab6cb226463ba3e2e83c184fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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