sts.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 6d:66:99:28:7c:bc:75:fd:e1:f3:10:9e:82:f9:cf:8a:c4:1f:88:dc was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
Organization unit: IT
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:66:99:28:7c:bc:75:fd:e1:f3:10:9e:82:f9:cf:8a:c4:1f:88:dc
Serial Number (int): 624568011986893684300435631789807106486194637020
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5f:71:35:d9:7e:8b:de:ab:4f:3a:ec:2a:17:78:a7:e5:72:92:96:87
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 84:66:81:02:fe:40:94:ca:93:f8:95:7e:d0:87:7a:6c:6f:19:87:17
Fingerprint (sha256): c8:50:d7:48:67:de:97:bb:8b:3c:79:cb:6c:30:26:79:c1:a2:80:b0:f3:cd:da:80:62:c9:db:7c:ad:3c:db:86

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate sts.trinity.edu.au

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts.trinity.edu.au
adfs01.trinity.unimelb.edu.au
adfs02.trinity.unimelb.edu.au
adfsproxy01.trinity.unimelb.edu.au
adfsproxy02.trinity.unimelb.edu.au
enterpriseregistrations.trinity.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for sts.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS60+U9IoQqR5mwFtYJH
DTGzStOEfPnDotFDbUfAfbacsuKwoWtzL5q+U2a8QkfKbFmNxlh6PEQhZPJG+ToB
UT3acKOVMrW9OE/FVmsXUthIREHuISbBL3grDGDrG968IIE7vWleJJo7jhcdTsCV
QQAxaDL71NlNWO2vb/EvpwyNNiChV+tT5DMZWfXmxcYj8bi0JZ47tqxJCxtzl/ZW
HznDj5iuQd4HzHS2uUcTGS5v3KrVASuZccvX3Fyg8ukIpls/82pSL45azJLSYbWk
qTnA4JRuKrLiMPq9T3h3Zp93wTJWWbADtPKjYbitbA2bsCj6cWVSyiRp6TOzEJqR
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 624568011986893684300435631789807106486194637020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 05:05:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-02 05:15:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sts.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24891978123500472576912585911531627733812416327154158359170569889164422194704571282231013843216730963996345368599864304062137490146973100320339007493563898576440030194872579782473104389622710511284910241374530463891476569082964908334190703367483086872595479275633209799800789855174279498727080516738839843001914087799384091686470496700795317326471967430507492409968382203957009292313088229011354090475328596810725682580666950800502895511398131439760295624277918225323329809345465946262979137497800769763102134978661615067831718334718576565277463793803799740210036486684482370527953195281513291584757178490422919074099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.trinity.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs01.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs02.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy01.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy02.trinity.unimelb.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistrations.trinity.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f7135d97e8bdeab4f3aec2a1778a7e572929687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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