api.sandbox.chorus.co.nz

Issued by RapidSSL SHA256 CA - G2

About this certificate

This digital certificate with serial number 7c:b7:1f:24:02:67:3f:c4:61:c8:5f:fd:07:26:7a:a4 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=api.sandbox.chorus.co.nz

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:b7:1f:24:02:67:3f:c4:61:c8:5f:fd:07:26:7a:a4
Serial Number (int): 165775093410096795922151695369919429284
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12

Fingerprint (sha1): 2a:f6:c1:01:ed:01:0c:29:49:fa:03:37:88:6e:32:3f:28:21:28:5d
Fingerprint (sha256): 03:80:78:36:a9:c6:f2:4e:e5:59:68:a5:7a:75:25:67:bf:d3:11:f5:11:19:54:e1:63:f3:2c:2f:7f:67:5e:f6

Issuing Certificate URL: http://gs.symcb.com/gs.crt

Revocation information

OCSP Server: http://gs.symcd.com
CRL Distribution Point: http://gs.symcb.com/gs.crl

Check the revocation status for certificate api.sandbox.chorus.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.sandbox.chorus.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.sandbox.chorus.co.nz

Other certificates including the domain name chorus.co.nz

(limited to 100 certificates)
activate.chorus.co.nz
statuspage.io
apistatus.ppe.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
aic.status.akamai.com
q.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
fibrelab.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
customer.chorus.co.nz
statuspage.io
com-eks.infralab1.aws.chorus.co.nz
statuspage.io
statuspage.io
api.sandbox.chorus.co.nz
statuspage.io
tech-mate.chorus.co.nz
statuspage.io
checkmate.chorus.co.nz
statuspage.io
statuspage.io
aic.status.akamai.com
statuspage.io
*.chorus.co.nz
apistatus.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
aic.status.akamai.com
statuspage.io
statuspage.io
statuspage.io
aic.status.akamai.com
www.ssp.chorus.co.nz
statuspage.io
emma-b2b-ws.chorus.co.nz
statuspage.io
statuspage.io
*.chorus.co.nz
statuspage.io
webmail.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
tech-mate.npe.chorus.co.nz
statuspage.io
payments.chorus.co.nz
app.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
statuspage.io
aic.status.akamai.com
idem.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
statuspage.io
chorus.co.nz
statuspage.io
statuspage.io
wac-hlz-ext.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
data.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
future.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for api.sandbox.chorus.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165775093410096795922151695369919429284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.sandbox.chorus.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850354544752257815037453821659324693206867970796548429258530167360058225495157279458000611651092092782884161523152153413784350064260913135400206877390248874481505704662900745787078842622479723682075558080147236495415262584502193805350924819931025985637813103474274602750974513773921751677806120657802598694373235362870015041007451491287509783164617211544287301169570643856977362123860058708198869842078589948911347864205389467893534392014047633879064196507434876347800112484840643043855367302249244100764636290416112929164719481004958535905523275532450624087039442230971578677884711552739899694214953069234432619083179912471946469985086814527205010346084412567489190694088617885368262507679453655390394842535459667633675182882607332894334713198017722597654602267175665336911583521648723524307118953118505571753698665145751037969322207606189183128682847472051605704146209952221593030535717533545794758641942077242152620355213260005316293876753084410115847192979567734920782053312166531029251718460179272551953503140422611889527974248248842201100453269687859416182622365007157676543932261287742695447694196463957199216210459131828579783903715283368198470611046205594975000169112108238070421043428057668082207414441258240621044698932043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sandbox.chorus.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013148b9c6896edc0acc372837ca3b56c1bdbf1fd50ee1aca753092f404bbfe8141ffbdcf22f01682f66810dd2491eb000a2e233750f4e2717d184fd1d9c751777efc0b463733f0beadd408b3ed4d26045329badbca5b5eb138d9783a0e91ceca2c8988a745021c9cf0016694e0a2966c2080561cf6d8adc724096858ceb121a8f2fe0effaff3dbb62ffb80aaa48043cbc2bd891723865e46d5278ac4ede99b55c2a664261519d246a97b68e1014b614423d336c7cc21a164a3d74ec7037d7dbace18623f8ce281557ffc0d6224c61f818d4a558bc89b608b3603ef07acb9f54c4221a0002eb6bf5769a9bef5ed95040d2d8e04b413b0dd3f299dc7b62fc74072