winapps.trinity.edu.au

- University of Melbourne -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 4a:31:20:97:ad:01:bc:24:f1:b7:19:49:50:ea:21:2f:0d:a1:bf:d0 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Melbourne

Organization: University of Melbourne
Organization unit: IT
State / Province: Victoria
Locality: Melbourne
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:31:20:97:ad:01:bc:24:f1:b7:19:49:50:ea:21:2f:0d:a1:bf:d0
Serial Number (int): 423560892761444798304464130157841677678058520528
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4f:6a:77:1d:5a:09:21:11:75:b3:c9:58:cb:ba:4d:0c:a3:53:04:0d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): cf:39:2a:6d:9c:69:70:30:71:84:ea:05:80:03:69:99:85:7b:d9:75
Fingerprint (sha256): df:59:5f:ad:88:48:2e:46:32:bc:5c:da:2a:c5:58:7d:a8:8c:5e:59:ec:53:c0:d5:24:62:fe:ba:db:58:07:17

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate winapps.trinity.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winapps.trinity.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winapps.trinity.edu.au

Other certificates including the domain name trinity.edu.au

(limited to 100 certificates)
ctxnsg01.trinity.unimelb.edu.au
gallery.trinity.edu.au
*.trinity.edu.au
casper02.trinity.unimelb.edu.au
ldap.trinity.edu.au
texas.trinity.edu.au
tcole-qa.trinity.edu.au
texas.trinity.edu.au
portal.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
storefront.trinity.edu.au
tcole.trinity.edu.au
wiki.trinity.edu.au
manage.trinity.edu.au
mrbs.trinity.edu.au
rt.trinity.edu.au
wiki.trinity.edu.au
*.trinity.edu.au
portal.trinity.edu.au
texas.trinity.edu.au
tcole.trinity.edu.au
ezproxy2.trinity.edu.au
cacti.trinity.edu.au
director.trinity.edu.au
*.trinity.edu.au
*.ezproxy.trinity.edu.au
texas.trinity.edu.au
mail.trinity.edu.au
wiki.trinity.edu.au
sts.trinity.edu.au
netscaler.trinity.edu.au
internal.trinity.edu.au
ios.trinity.edu.au
portal.trinity.edu.au
mx.trinity.edu.au
monit.trinity.edu.au
mrbs.trinity.edu.au
mypersonalhealth.trinity.edu.au
portal.trinity.edu.au
webprint.trinity.edu.au
ezproxy.trinity.edu.au
casper02.trinity.unimelb.edu.au
cacti.trinity.edu.au
sts.trinity.edu.au
winapps.trinity.edu.au
tcole.trinity.edu.au
*.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
mail.trinity.edu.au
sts.trinity.edu.au
*.trinity.edu.au
test-rt.trinity.edu.au
rt.trinity.edu.au
winapps.trinity.edu.au
internal.trinity.edu.au
rt.trinity.edu.au
img.trinity.edu.au

Certificate

The complete raw certificate details for winapps.trinity.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5K5kIPJko6P4y38h4ar
sMqbqoH8gxgqmpisbHWdq1QWdCpa6zeDZEejtnvWZWJNZU5Kfn+czEF5nEoPbQe1
qQcC+XButVtFnIaz1Yqanvc7PIGPID7RHU9ocM8pjRP9vZuRaXqXtHhG1QrjCL18
VkUAVKCdZHEwOi7Xiihly8ILCEmpCMVnBxJGbMmmYthqSx8ZRqh7Ik+OU1f2Hzic
oYky5oIEGfoKcs5L2iNeo7N1/qEPLBQcQW9IC9rikuAHcvwJr595MF2atAYH28Bb
RoCsF9N83B44VgWQRizHUqQN1bzVDTU6v8pThnMF7f9Lwk92FXvW/Sl3mSwoQwT3
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423560892761444798304464130157841677678058520528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 02:20:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-23 02:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'winapps.trinity.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21154149655096732875103110128894995368730159135873214611106844899173832278839095715156323929414982043898831789403989678129799565034199730940906951396894199557964320250734269194560707357340080672077238374994077592077770979688443670802995242362931562647111602806929134858074037699683938614403284323796129904341683330615048945251502283565742686755938318016366518726382611797553662453685156440412352052415606430402444020674951029104732985871336922691593540500957917752359338054958951003211631112542029597167547112355851940786753038838861273892036486198570410787121853188499580319149569326473760220826148910298010992572407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winapps.trinity.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f6a771d5a09211175b3c958cbba4d0ca353040d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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