*.a2i2.ai

- Deakin University -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 18:4b:83:7e:80:da:1b:ae:91:13:9c:79:d4:af:ee:53:e7:6d:78:e8 was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deakin University

Organization: Deakin University
Organization unit: eSolutions
State / Province: Victoria
Locality: Burwood
Country: AU

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 18:4b:83:7e:80:da:1b:ae:91:13:9c:79:d4:af:ee:53:e7:6d:78:e8
Serial Number (int): 138699789145970903579056171236659471759331653864
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 2e:f0:88:19:4f:f9:75:a1:79:72:27:48:82:08:c1:cd:8a:5d:5a:10
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 60:84:16:2d:7a:1e:bd:20:b0:22:57:ba:4b:c5:98:1a:28:1e:7d:b1
Fingerprint (sha256): e4:d2:4b:ed:ff:e6:2e:c9:98:29:f6:cd:87:1f:af:64:22:b8:6d:87:3e:3c:8b:ef:96:73:41:2c:f2:47:72:8d

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate *.a2i2.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.a2i2.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a2i2.ai
a2i2.ai

Other certificates including the domain name a2i2.ai

(limited to 100 certificates)
*.a2i2.ai
*.a2i2.ai
demo.a2i2.ai
designer-app.webprofusion.com
demo.a2i2.ai
*.a2i2.ai
10mado.jp
*.a2i2.ai
bazikus.de
*.a2i2.ai
*.a2i2.ai
www.openbridge.co.kr
*.a2i2.ai

Certificate

The complete raw certificate details for *.a2i2.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hE+tJ1zjuEeAEE3Psf8
QQgPbUIRhqbY6zu2adXUjq3mLETPp+OOpJEJbywE6B/NxkNHyW7ssZS+Rtrxu6wz
H2rKeTm8lLL6cOdLmQHdx5SgCTN/CZ9weYbyMByeddroEDjaC5ryksMUA8T0unDY
maJ+9ER8cAV49mp5nB7m373Y98WvvfrxHskQtXMQ6sn8uarfAfvcB6AuGZpbx2fS
7VZYt2Hel0spoOR3gJeXk0ulimZOLebc+yns3myCiQrHIk2YCvYlenTwN/eVJCIl
AorqwpYulzIAOC8V2IWpJbgZwEXtocCewEuglTK40PViMpdxBuss8ZwcVmLC1F2L
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138699789145970903579056171236659471759331653864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 03:50:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 04:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Burwood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deakin University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eSolutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.a2i2.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26518547841436735146191457906979707061787278106334316801262019026848327420564779801796596462630674412375827628594628882466614690236511216373889518387541569668515022011453197989851638884510952143161944805406548694599682965667549413301955758558136108409299767232221972924209379989552828723548570038962722458051318599904598967370692809487218003334527731728874312126020826738797130126169262903719552533187284242811853476235412639363012791494815861297718011791402262760747115024018785762576089352104127288215134554800394381428144766622945750180674265680553733785084988336221225592375872803726069270927222418647559268305893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a2i2.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2i2.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ef088194ff975a1797227488208c1cd8a5d5a10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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