sts.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6d:66:99:28:7c:bc:75:fd:e1:f3:10:9e:82:f9:cf:8a:c4:1f:88:dc was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
Organization unit: IT
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:66:99:28:7c:bc:75:fd:e1:f3:10:9e:82:f9:cf:8a:c4:1f:88:dc
Serial Number (int): 624568011986893684300435631789807106486194637020
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5f:71:35:d9:7e:8b:de:ab:4f:3a:ec:2a:17:78:a7:e5:72:92:96:87
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 96:54:e7:b7:38:55:77:7a:7e:1a:d0:43:47:72:45:97:93:b3:97:59
Fingerprint (sha256): 8d:e5:1b:b0:db:97:33:88:87:b6:81:26:93:14:ec:d2:ce:62:50:87:3e:1b:47:59:cf:50:8b:dc:32:e8:48:19

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate sts.trinity.edu.au

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.trinity.edu.au
adfs01.trinity.unimelb.edu.au
adfs02.trinity.unimelb.edu.au
adfsproxy01.trinity.unimelb.edu.au
adfsproxy02.trinity.unimelb.edu.au
enterpriseregistrations.trinity.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for sts.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS60+U9IoQqR5mwFtYJH
DTGzStOEfPnDotFDbUfAfbacsuKwoWtzL5q+U2a8QkfKbFmNxlh6PEQhZPJG+ToB
UT3acKOVMrW9OE/FVmsXUthIREHuISbBL3grDGDrG968IIE7vWleJJo7jhcdTsCV
QQAxaDL71NlNWO2vb/EvpwyNNiChV+tT5DMZWfXmxcYj8bi0JZ47tqxJCxtzl/ZW
HznDj5iuQd4HzHS2uUcTGS5v3KrVASuZccvX3Fyg8ukIpls/82pSL45azJLSYbWk
qTnA4JRuKrLiMPq9T3h3Zp93wTJWWbADtPKjYbitbA2bsCj6cWVSyiRp6TOzEJqR
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 624568011986893684300435631789807106486194637020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 05:05:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 05:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sts.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24891978123500472576912585911531627733812416327154158359170569889164422194704571282231013843216730963996345368599864304062137490146973100320339007493563898576440030194872579782473104389622710511284910241374530463891476569082964908334190703367483086872595479275633209799800789855174279498727080516738839843001914087799384091686470496700795317326471967430507492409968382203957009292313088229011354090475328596810725682580666950800502895511398131439760295624277918225323329809345465946262979137497800769763102134978661615067831718334718576565277463793803799740210036486684482370527953195281513291584757178490422919074099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.trinity.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs01.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs02.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy01.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy02.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistrations.trinity.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f7135d97e8bdeab4f3aec2a1778a7e572929687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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