azena.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:25:29:96:11:2e:1a:16:53:30:e8:8b:f6:67:e1:1f:43:f9 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=azena.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:29:96:11:2e:1a:16:53:30:e8:8b:f6:67:e1:1f:43:f9
Serial Number (int): 361094868843925203846790355930545123181561
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:89:38:d1:27:e3:d8:de:d2:15:53:51:12:5e:e1:7f:fe:d1:43:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:30:15:ee:55:42:87:6d:db:42:d2:87:f2:e8:6d:9e:24:da:a6:7f
Fingerprint (sha256): 01:48:a7:44:f2:10:16:5a:62:a0:a2:28:7f:e7:54:52:ab:5f:38:14:25:a8:e2:1f:b5:3d:c5:e0:80:4b:3a:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate azena.co.nz

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for azena.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.azena.co.nz
*.sy1work.pe.kr
azena.co.nz
mail.wfz.lci.temporary.site
sy1work.pe.kr
wfz.lci.temporary.site
www.wfz.lci.temporary.site

Other certificates including the domain name azena.co.nz

(limited to 100 certificates)
azena.co.nz
webdisk.mainscape.co.nz
dantesconstruction.nz
mail.wfz.lci.temporary.site
mainscape.co.nz
allaboutnz.com
thatotherangel.net
classictimberfences.co.nz
*.sy1work.pe.kr
azena.co.nz
mainscape.co.nz
azena.co.nz
azena.co.nz
azena.co.nz
allaboutnz.com
www.thatotherangel.copycat.co.nz

Certificate

The complete raw certificate details for azena.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2r4uc7URWkTjQMvAG1E
TorSdC5OplWN74MwvKg9xDMyiJGDpa9XXJHICLWbwCaWrgZjN9/rM4hZHwjIo2dl
ClvKMZ5Z1SANqMuxRDoByFu6zeqEhQ4WKZbtrepM+EB4byDJTOD3VnUSkENPFTNf
xkb7okEM+XAHXRqYHbw7ySUYFN5lHxuHS7h5d4s3RZoIYrI1Uuj4mt8FSAJx/qsG
ERRujG+NoWbKaO1WRNf0w9DSLN8NI2umUyAfIPIFec7w2JJ3PL5ylpoTTHyaBX4k
V03v3lX7Ho2SiNkiKDV2FeJuEaQOoUjYC7f4MFGAAlxbtT4i61hsp5ngY7t7mcKJ
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361094868843925203846790355930545123181561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 06:38:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 06:38:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'azena.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22144453023730883111434418402065329247254694998510677522508951689645472162638022213607823648679494059681045093098787732488389763600396417841556557169793201157972673957908743003018902698845222986287356277970740332785606182296902831901612294880884964246823913835145813210843124793592252519864037781224718445486785472897030438445732150396929642253716379069596398857525900413037215669263148158411781859383711077847598994765731251936720671541796085501407852268049335865857698564028103111874581833096779427790430115206237527765354542075580879491863272287493568395625640720999939816869741226295902141310884335661603237300669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db8938d127e3d8ded2155351125ee17ffed14313
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sy1work.pe.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wfz.lci.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sy1work.pe.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfz.lci.temporary.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wfz.lci.temporary.site'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c621cc36e000004030047304502202cc742ad59be790b8810dced2f4faf78c025ee4223cea3aa29be0a5004deeb600221008501099bf7a27767ecfaa9dc3d3a5dfa0449490dbb8d7a77a5e9c5aaf077c77700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c621cc3d10000040300473045022100b9c4edd1dbde7d1277d355128c09c5355eda78a662c42a8a9a586d7817b4c06102207da38f5e71de493428d1987c765fe94f85c6115bca892a845620a8da2d041947
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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