activate.chorus.co.nz

- Chorus New Zealand Ltd -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0f:af:ff:88:48:2c:3d:31:3b:de:28:c9:9a:44:90:f5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Chorus New Zealand Ltd

Organization: Chorus New Zealand Ltd
Organization unit: IT Services
State / Province: Wellington
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:af:ff:88:48:2c:3d:31:3b:de:28:c9:9a:44:90:f5
Serial Number (int): 20852254698832768460217695664280473845
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:22:c8:af:f0:17:76:f2:4b:33:ce:fb:14:18:c4:92:8b:71:67:c8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 5e:59:1b:2f:61:7b:c2:80:3f:7b:0d:76:6c:ac:87:cc:e5:03:ba:74
Fingerprint (sha256): 00:14:6d:6f:ca:e8:0b:b2:ba:6e:6c:7d:b6:b7:ca:52:5d:c9:15:18:e1:54:4a:e5:66:fd:8a:cc:87:d8:c0:dc

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate activate.chorus.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activate.chorus.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activate.chorus.co.nz
cvippxactapp01.chorus.co.nz

Other certificates including the domain name chorus.co.nz

(limited to 100 certificates)
activate.chorus.co.nz
statuspage.io
apistatus.ppe.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
aic.status.akamai.com
q.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
fibrelab.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
customer.chorus.co.nz
statuspage.io
com-eks.infralab1.aws.chorus.co.nz
statuspage.io
statuspage.io
api.sandbox.chorus.co.nz
statuspage.io
tech-mate.chorus.co.nz
statuspage.io
checkmate.chorus.co.nz
statuspage.io
statuspage.io
aic.status.akamai.com
statuspage.io
*.chorus.co.nz
apistatus.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
aic.status.akamai.com
statuspage.io
statuspage.io
statuspage.io
aic.status.akamai.com
www.ssp.chorus.co.nz
statuspage.io
emma-b2b-ws.chorus.co.nz
statuspage.io
statuspage.io
*.chorus.co.nz
statuspage.io
webmail.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
tech-mate.npe.chorus.co.nz
statuspage.io
payments.chorus.co.nz
app.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
statuspage.io
aic.status.akamai.com
idem.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
statuspage.io
chorus.co.nz
statuspage.io
statuspage.io
wac-hlz-ext.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
data.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
future.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for activate.chorus.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20852254698832768460217695664280473845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chorus New Zealand Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activate.chorus.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681684487986665065360297346277396235265469192617328933106606516051970405468956916964668097988322714794242967842248606040734713139439530229449058208855239636669357820189188719317750021533938267645584162808248308441843245763857379724975624653471149765461831969689978781696809982416984224244223593129618287985050621970138085060215095956179293906673531231136998502489409609052708201933325834724026255819394475661998784080298902862301236184300906586064173641890696793609502885448904051731365517521388647098816646818430767153954544473012479573612157610850237795855089711715260527503016026706159249443763663984990169740701187780080804279093690187489775389805106194063726830439989394338460942300566355164416759090061731845696442694361759506114007693448294300377833091903500072106617793886296738955615147379735878216382248879315470697736993158389670197659395271363839884489854238150553084559376073363251091202535810291304280454415916434370591938588753415998290793527826662668339539666806163235364276539178748010729341222603125470765560467250039947332781326506323623509990075765510322142187029889680984454526048592432165415846839794118901645381457214034811984430953076623160572600045979475281007051886315271157824346555970322751340309222463571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b022c8aff01776f24b33cefb1418c4928b7167c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activate.chorus.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvippxactapp01.chorus.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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