*.chorus.co.nz

- Chorus New Zealand Ltd. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:04:2f:84:20:40:d5:61:13:39:5f:c1:c1:30:f3:60 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Chorus New Zealand Ltd.

Organization: Chorus New Zealand Ltd.
Organization unit: IT Services
State / Province: Wellington
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:04:2f:84:20:40:d5:61:13:39:5f:c1:c1:30:f3:60
Serial Number (int): 14643240882418936645377136013811446624
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d7:10:98:04:ac:34:e6:40:7c:f2:c3:aa:dc:ca:9b:08:e1:b4:88:5d
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): a5:bd:10:ae:d3:3e:7d:6d:b0:2a:44:e0:12:20:14:b5:a0:2e:cd:0e
Fingerprint (sha256): 05:12:28:9a:29:e4:99:b9:ab:c3:89:45:6a:d3:b1:fb:02:eb:7f:bd:e4:45:11:69:25:f1:f3:17:f3:0d:e8:60

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.chorus.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.chorus.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chorus.co.nz
chorus.co.nz

Other certificates including the domain name chorus.co.nz

(limited to 100 certificates)
activate.chorus.co.nz
statuspage.io
apistatus.ppe.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
aic.status.akamai.com
q.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
fibrelab.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
customer.chorus.co.nz
statuspage.io
com-eks.infralab1.aws.chorus.co.nz
statuspage.io
statuspage.io
api.sandbox.chorus.co.nz
statuspage.io
tech-mate.chorus.co.nz
statuspage.io
checkmate.chorus.co.nz
statuspage.io
statuspage.io
aic.status.akamai.com
statuspage.io
*.chorus.co.nz
apistatus.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
aic.status.akamai.com
statuspage.io
statuspage.io
statuspage.io
aic.status.akamai.com
www.ssp.chorus.co.nz
statuspage.io
emma-b2b-ws.chorus.co.nz
statuspage.io
statuspage.io
*.chorus.co.nz
statuspage.io
webmail.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
tech-mate.npe.chorus.co.nz
statuspage.io
payments.chorus.co.nz
app.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
statuspage.io
aic.status.akamai.com
idem.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
statuspage.io
chorus.co.nz
statuspage.io
statuspage.io
wac-hlz-ext.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
data.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
future.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for *.chorus.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14643240882418936645377136013811446624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chorus New Zealand Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chorus.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708788609819499725560616950821068577126404962905167893196250367267970434615791677449905811103943186076901425182777970679490943338843716727146579586386906142899473635393560573019961043983965013410352814935492587715394087972818341967756724567571230268745958308890330009634233217656882176892592748017673702361778335377243429080045183044833973401897815135770161158779996531493152555674857923983241942090927657430552405025243161662095461349369988490292919512851437181663323599128619123898059434363847751566969056007458259093940325839026656888520238728949094106825044417933678327459763225895579529354824219770833272933819554059973401774233335458903703054872270154531803782074106705026379504685842645134171293042427128526968952237170195945159507105004176228997729699302948291938669849414903000824149667642792549804739109227523401318502695367705020020621116802374671973663895965512736539234735797880864036310171161724949305550977525034937476686907067719090513144168842685318639759217721401003884109939260070759957385293503552370257001272615297666822562548515114556785194146460542240806612841767647523901936123024811846048539053107394119536843643703762371750094042677453322761314996123754165587418183669898722204580746118693706292880331158567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7109804ac34e6407cf2c3aadcca9b08e1b4885d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chorus.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chorus.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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