zend.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:e7:e8:18:ed:4a:d5:20:9d:a5:59:a3:0d:3d:08:2f:27:72 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zend.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e7:e8:18:ed:4a:d5:20:9d:a5:59:a3:0d:3d:08:2f:27:72
Serial Number (int): 427362880808784396793593235525501558138738
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:2d:8b:de:ca:56:6d:0b:1d:9b:f8:08:1b:4a:1e:6c:88:78:6a:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:3f:02:a3:8b:72:8e:d9:98:4b:bc:e4:2d:03:6b:e2:87:a4:c8:60
Fingerprint (sha256): 01:32:c5:b2:3a:a4:a0:cf:7a:9b:84:f2:26:37:ed:e9:40:07:cd:8a:d2:9b:5d:86:0f:52:39:12:92:93:64:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zend.co.nz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zend.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

couriersolutions.co.nz
www.couriersolutions.co.nz
www.zend.co.nz
zend.co.nz

Other certificates including the domain name zend.co.nz

(limited to 100 certificates)
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz
zend.co.nz

Certificate

The complete raw certificate details for zend.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISBOfoGO1K1SCdpVmjDT0ILydyMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDUwNTE2NDNaFw0yNDAyMDMwNTE2NDJaMBUxEzARBgNVBAMT
CnplbmQuY28ubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WR0V
adVEKYHqgRtWQHMJG+pN0sJqNBkuxb2hwOFbW2BlbZJbGzniiV/LXcU91U+EPmv+
b3TQjfpLXNkZlRwxmSJIBRXuuuihe2CiGXqfwH/kdiKN6SH73gWQBkKLu+GdyaX2
vukagN8N1Nw5KBn3gZq/snYzsmzwT6wQhnOhJ4VUicFzcYBQBW1oA30Cucfri0Hw
XctiLdcG+jytG5Ezj1e1ZFqevcJ2xOxI4zux/d4NDU5o9SHoLskOfKYoYjTytibW
lAnd3uwf/K9xKUKMPZST3mvPaqbTGo9TvIlzDA8Mgq8maOS0o+Fyi2kjHiMahtgA
ZJCC5OlURCi316g9AgMBAAGjggJPMIICSzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FEMti97KVm0LHZv4CBtKHmyIeGoCMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMFkG
A1UdEQRSMFCCFmNvdXJpZXJzb2x1dGlvbnMuY28ubnqCGnd3dy5jb3VyaWVyc29s
dXRpb25zLmNvLm56gg53d3cuemVuZC5jby5ueoIKemVuZC5jby5uejATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi54gXeoAAAQDAEcwRQIgKqQntDlp
WKSHbdKDwNKPK21Y6DWCaFL3KjjjokMX/VMCIQCHucr//U/RHYx7lH6r6Gknz5dv
tZejbqBjyzqgqQjDcwB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABi54gX9QAAAQDAEYwRAIgIaPAxgZWIZPZISMIjpPNBpIPXypLcszuhd4wqI6d
iigCIFDrnK5gyFHP4/P4Mtr4CDc1e3rKcqmm5xsGWUOEj4NKMA0GCSqGSIb3DQEB
CwUAA4IBAQBfYm3dv5ZiJUqe6C5NQb3xp2CqDkgzEP+gSN3J64fiP519rw2DJt5l
HPHYrjELpTtAogZ3ByeJYznv3VG+snAMh2PljNaUrj3MQsyh6bbVw0YE7hUivnx7
wLYe+0FxwEzgDnto4ATs2vIUqxXPkeKbKlMBW3fPGh9Nsx7W7zPv1kz1+n69XFfd
5gcrVS07fEEv399i6a1sX74+xReYmQrTTamSeMc8trV1rLU6Jg1evWQgQXJu6wtY
H6Hh6034CyIwVg8vdjk4BZ3n0myBPSvahfCVWXUftU9n15xQBol1/W8CtQKrnvzE
g/2YK/yK50xBf8ILaXJAzwZkqihKEhy1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFkdFWnVRCmB6oEbVkBz
CRvqTdLCajQZLsW9ocDhW1tgZW2SWxs54olfy13FPdVPhD5r/m900I36S1zZGZUc
MZkiSAUV7rrooXtgohl6n8B/5HYijekh+94FkAZCi7vhncml9r7pGoDfDdTcOSgZ
94Gav7J2M7Js8E+sEIZzoSeFVInBc3GAUAVtaAN9ArnH64tB8F3LYi3XBvo8rRuR
M49XtWRanr3CdsTsSOM7sf3eDQ1OaPUh6C7JDnymKGI08rYm1pQJ3d7sH/yvcSlC
jD2Uk95rz2qm0xqPU7yJcwwPDIKvJmjktKPhcotpIx4jGobYAGSQguTpVEQot9eo
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427362880808784396793593235525501558138738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-05 05:16:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 05:16:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zend.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23271791671654825147876144641194212119324234071870448890011713931670602645252383501508892230130503922225519842984614110222876890163768338512084089442269474682771290843223458763437037196635034551424401811518956593145552499012748932499090182388613935158639332386481511431449061738420668658887796986486591975819718904125734192456943044572167243273641450048680081293782186640003305847821711422460703793546060924245892537280183810786983601144329098993945363049711275688714521737452741800426092919469830588638510151333912949685988741815407121494385610794169867317097802647531125961868016818633101558044966929792198776432701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							432d8bdeca566d0b1d9bf8081b4a1e6c88786a02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couriersolutions.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.couriersolutions.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zend.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zend.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b9e205dea000004030047304502202aa427b4396958a4876dd283c0d28f2b6d58e835826852f72a38e3a24317fd5302210087b9cafffd4fd11d8c7b947eabe86927cf976fb597a36ea063cb3aa0a908c3730075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9e205fd40000040300463044022021a3c0c606562193d92123088e93cd06920f5f2a4b72ccee85de30a88e9d8a28022050eb9cae60c851cfe3f3f832daf80837357b7aca72a9a6e71b065943848f834a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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