*.healthbasedbuilding.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:83:58:4c:33:b9:61:dc:b2:a8:94:7e:67:37:39:79:f0:d1 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.healthbasedbuilding.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:58:4c:33:b9:61:dc:b2:a8:94:7e:67:37:39:79:f0:d1
Serial Number (int): 306031215589204386601987142244817115410641
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:7f:ed:44:73:b4:07:f7:6e:fc:1b:40:78:4f:7f:15:a1:c6:58:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:60:47:11:4b:36:97:66:1f:e0:23:f7:a5:91:60:d0:35:af:3a:93
Fingerprint (sha256): 01:14:11:5b:37:8f:c1:8c:0d:5e:32:d2:c6:90:f4:12:a9:3a:1e:51:b7:61:47:5b:08:75:72:96:72:af:b2:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.healthbasedbuilding.co.nz

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.healthbasedbuilding.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.healthbasedbuilding.co.nz
*.healthbasedbuilding.com
healthbasedbuilding.103.250.232.52.nip.io
healthbasedbuilding.co.nz
healthbasedbuilding.com
mail.healthbasedbuilding.103.250.232.52.nip.io
www.healthbasedbuilding.103.250.232.52.nip.io

Other certificates including the domain name healthbasedbuilding.co.nz

(limited to 100 certificates)
*.healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
mail.healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.com
mail.healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
mail.healthbasedbuilding.co.nz
mail.healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
mail.healthbasedbuilding.co.nz
www.healthbasedbuilding.103.250.232.52.nip.io
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
mail.healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz
healthbasedbuilding.103.250.232.52.nip.io
healthbasedbuilding.co.nz
healthbasedbuilding.co.nz

Certificate

The complete raw certificate details for *.healthbasedbuilding.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RiqCBeJ0ukw4n+vyApp
zKEOpTcaNCqTruq9T3Pb2VGlBhFZb1t0ZbGcpaSJI1nhTMDF5J9Y/Hepi8q6BVj2
3KTvq/xY7+FnlyGjTTDdZUOBPYax58Ib1Yk8kZUZ84Q/X3z8NL/DuobmOqTrB64G
3DYIgBNxEWyqpQDmh++tBISvTD9BaGuZpYce/sUxWpJgotZntUA2P/B7wSVlPnjX
DItGvs7krGekuk2Dyv/y7fOMJhqKQ2MULpgWjcx4R3B33g+lri4vYt6hOlW2kxCO
gaHKv84diUECnkT3cEJlzDhnfOTNXtRSYZV8LnI+T7Q3p7emN2cehJMqMYIUTmVc
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306031215589204386601987142244817115410641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 08:38:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 08:38:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.healthbasedbuilding.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29425687420492589303707470842249857643734654159552734423462810520942533799473299728677283518849131971480162904104803418032675484715517187429793265702224443898176983801506628807665906621761898532121937303702205010432938581209040231344543938130126297831930704766141958678018219910983800683268142106436453992731477576821933725343835401647306313659503921041623192695258794750936411568724964327871709991470246275334084602602303340024226007685910728880868694885269434457549675859162472978460705594536468449234692733101575662809473376382756554386111597388096952087546702933932891569219281278217624056822031049042673478753281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea7fed4473b407f76efc1b40784f7f15a1c65825
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthbasedbuilding.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthbasedbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthbasedbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthbasedbuilding.103.250.232.52.nip.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e74f9b96d0000040300483046022100e975f13a8e538a6f56a2d08e0fce6fab380eadfb8844da429ce52e216ad2f98302210081192f561448983b2fb80048225049e30600181e9c885845fe49f5ee3eaf27870076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e74f9c1350000040300473045022100a3a87e87d3e520ee95b47666b90c12d150e81d219cae45cb0b6ed3bef11b9f820220062826cf90caaedb6fb6db87514ec7376706af9a3cb440ae8f197fa82274c5c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a2f9b7da8366fc4d761a818f22f950ae7fcfee91f990ff6b22ebcee16b792583cc1b52afdd864a707dade43074fbd2b85ee7b47b5eabeb267c7c16547a4aec5d6d4f1da92cc71c22b2d77f5bebbacab8943bb7b1815d77a29c169a07f42b91ede7b2c5454206fb5b4181b920482934ffd8932cbcef755404abb60e6f2a810b02cfba1f3b9941dceb66591228b1692f6236f649ecdd840ecd90894fd847099e10e4ab0220116670238c89e1e511fc2e807c6f64123c7ef2f118e6f5ab0ff8ded422a8dc2300d53db7b562cbed67c088a2aab13093236fbf82b7357166f478ebbcaba2d370097ce7cd476167a86b2aa48ab0fb91a897427ba597b99b20e681abc