www.curtin.edu.sg

Issued by Trustico RSA DV CA

About this certificate

This digital certificate with serial number 70:bf:26:db:d7:48:b1:c8:12:d9:14:ce:20:5a:1c:11 was issued on by The Trustico Group Ltd.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.curtin.edu.sg,OU=Domain Control Validated+OU=Trustico Single Site

The Trustico Group Ltd

Organization: The Trustico Group Ltd
State / Province: London
Locality: Croydon
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 70:bf:26:db:d7:48:b1:c8:12:d9:14:ce:20:5a:1c:11
Serial Number (int): 149866052377050418549817623915641052177
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c5:b3:78:f3:51:77:da:2b:8b:3d:15:6a:42:b1:9b:c4:45:e0:c0:25
AuthorityKeyId: 5d:8a:d1:23:08:2f:e1:9d:81:ce:d9:2c:70:28:ba:97:1f:ae:18:35

Fingerprint (sha1): e1:34:48:ed:53:1f:db:21:ec:0c:7b:ac:c5:b7:b8:be:3b:89:44:02
Fingerprint (sha256): e3:30:47:a4:ba:59:0f:19:fc:d9:86:f2:28:5a:39:6c:49:2a:4c:4d:e5:05:ac:b3:0e:fb:f9:73:e9:31:b4:7f

Issuing Certificate URL: http://crt.comodoca.com/TrusticoRSADVCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/TrusticoRSADVCA.crl

Check the revocation status for certificate www.curtin.edu.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.curtin.edu.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.curtin.edu.sg
curtin.edu.sg

Other certificates including the domain name curtin.edu.sg

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.curtin.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W2rYoq4DkXgBju3YHVl
l2FbKJJNzqxjjYvY3yC5z8EFNxh2d3nSgAUtXq10zI8dcRkTY7Vwtd3QLYWzN+A0
tRQL2i8G22X7qgUqi6/IoJ3KLdpFT85ANeY6rGvquDbLToP3SIwTRF78b3lyAAj5
dVV5xt9H/1Ayi+aak5d3nXA9spXD0uPa3EVdPGbbpl+qwb5Ln5gdfrGiJCeQxMDn
3bUIW55LBMKSJHo8mBTjGfbR8/B6OQnYY5kJQ5pBnQwb5HopGg1aTEydL4Kycwa1
zqUV6qJDRAbTY7cXPCW0x9vKYvBq7EKrsEllnJ219G0I7gALH/xArF7mGlZweRER
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149866052377050418549817623915641052177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Croydon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Trustico Group Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustico RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustico Single Site'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.curtin.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26942838990191289595625228409131717139740035142584840606020394676320318699168891361608887518016859364858348176795081390662156212926373053068541569028384899505650698965718730578764866446449131506525638031137812198418508093804862689300461940364174697102848020278162915228131813153358252818290079608932143271580745431849768079723966262552925693746837229839863409528602937699823817338560705751890018174853437938067589472736816553688787351267023716208200525590424581681767459502989613018306832615502821912472418562616036596564167998283603795433159448072842820646680558084696689556109284545062535704947338371885884408664333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d8ad123082fe19d81ced92c7028ba971fae1835
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5b378f35177da2b8b3d156a42b19bc445e0c025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.58
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/TrusticoRSADVCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/TrusticoRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curtin.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curtin.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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