*.laneneave.co.nz

- Lane Neave Trustees Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:2c:a0:21:c8:2c:7d:af:b5:3d:0b:b8:89:bd:03:be was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lane Neave Trustees Limited

Organization: Lane Neave Trustees Limited
Organization unit: LN
State / Province: Canterbury
Locality: Christchurch
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2c:a0:21:c8:2c:7d:af:b5:3d:0b:b8:89:bd:03:be
Serial Number (int): 16182444873211258365874235124129530814
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bf:a1:33:f6:73:31:d9:d3:c8:9b:95:0c:4e:78:91:e1:c8:91:40:40
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 30:d8:1c:8e:a3:b3:04:5f:1b:39:63:71:e5:03:ef:84:d1:86:61:e5
Fingerprint (sha256): 00:ff:fc:bc:e3:da:22:49:d5:a3:fe:7e:e9:e0:a7:03:57:00:9c:90:d2:61:9c:00:28:2d:6c:71:b7:54:c6:7d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.laneneave.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.laneneave.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.laneneave.co.nz
laneneave.co.nz

Other certificates including the domain name laneneave.co.nz

(limited to 100 certificates)
smtp.laneneave.co.nz
dictation.laneneave.co.nz
*.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
citrix.laneneave.co.nz
*.laneneave.co.nz
smtp.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
citrix.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
*.laneneave.co.nz
smtp.laneneave.co.nz
dictation.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
clinet.laneneave.co.nz
smtp.laneneave.co.nz
dictation.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
*.laneneave.co.nz
storefront.internal.laneneave.co.nz
clinet.laneneave.co.nz
www.laneneave.co.nz
*.laneneave.co.nz
www.laneneave.co.nz
smtp.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
*.laneneave.co.nz
citrix.laneneave.co.nz
laneneave.nz
laneneave.nz
smtp.laneneave.co.nz
laneneave.co.nz
citrix.laneneave.co.nz
laneneave.co.nz
smtp.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz

Certificate

The complete raw certificate details for *.laneneave.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16182444873211258365874235124129530814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lane Neave Trustees Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.laneneave.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 607823939157113141557799226078633083419351689055098437376673556329513557452799176519884661750184080589289345277172668446133539482406055262260675916239060495966130592557076109639895454431956996127874548002415429746408731647909341144407893877315360753298416922674070998213982521524471012956231600279295703184396122442670876533910566460240139488633241942430008537431620127443467094230329054121973022718655987668591212816229246223432860914519442841003596706079466935158180451149359937869952556439732755967227972482921464041112527969791366441130552133550563427983157189509299131075441958048170217317089499574725300677117772552868669414003582350307600715916169375139931041828051682488800617895013421412296121434783467096550904210426207108148985773967145576689910678950503270377015619014053232042305600992596607723298080914159900413026471693409617450696968047080339762338807872725736308934693553567553462801472187942507880292302432895609448627394474176403135461572947340621592696725539592395185891357096957415123940365107226386163919733387822953464570217152494849023787009347855350064792851167831660609018119298792577507786595503658849091535572606145000094561988747126110522161754371377859571770549089248431672283717872683499218140839570621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfa133f67331d9d3c89b950c4e7891e1c8914040
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laneneave.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laneneave.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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