To know if it regards a secure or non secure version is simple, when the last number is a pair number it is the NON secure version, when its an unpair number it is the SECURE version.
To see which version is running there are multiple ways, "show boot", "show flash", "show sys-info verbose", ... Be aware there are two version numbers shown, one for the "diagnostic" image and one for the image.