redshift.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:69:60:94:9e:d3:13:28:fb:d5:b2:fc:63:eb:ac:ba:a1:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redshift.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:60:94:9e:d3:13:28:fb:d5:b2:fc:63:eb:ac:ba:a1:bb
Serial Number (int): 297194883890853483110762953617831353819579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:cd:d3:c9:6a:ac:73:e7:9e:0c:79:1b:9d:9e:1b:04:65:23:b9:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:6a:9e:06:57:2b:8b:e5:6a:6c:d3:06:d7:6a:ce:1b:c5:70:a9:87
Fingerprint (sha256): 06:89:66:ae:e8:3d:64:87:f4:c4:b3:6f:3d:35:17:ce:79:60:a9:f1:77:6d:3c:7c:de:84:d2:d9:81:8d:40:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redshift.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redshift.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redshift.nz

Other certificates including the domain name redshift.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for redshift.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297194883890853483110762953617831353819579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 01:09:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 01:09:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redshift.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731798748637707086543139154316926210159744606866917729404992349107958075392077364865026180519786380443725673968013776509459531295409493342321054790206470046826580972410583060922919929497918215568735282189604786356364441042026080870043563127888995291163683907992832878433866841245386464735582158811376443408663662144387690142566006230393357001866452489855447445092270011449541161274527444483018562977805783996113640007311197103686389066456545094197872477044937725607275308660892681999176776273226529589006876657560426047267695886993263138532608712699796059541396114200801434288465337072895554929633638538490181203107807246639118808369013326156459911514996301992247052138646774204511360847464338643626405380792010317413857863231857232651993839077850274042027856474895077261949646477498640617201263214792163256937375414178937200366485723563898738874517944341595049378523326929924131406053963380083027954503457894028017790129310796974609334148594051307930771790186682226333372679224018222794532255902018990398478650554917326169924845400107431172167158130394251130144241121224533023905764677351062103848308495116993489413363150035389824537180351498251303359295128528122362774218997127314506178110676399591357982095001352387568693239836377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdcdd3c96aac73e79e0c791b9d9e1b046523b976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redshift.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186c947f98000000403004730450221009dc945befb96a5f87062074de64b67ce108a96431f4a94a309ac895b888bd9fe022071f49598f4209c74036e262b9ba21a62d9b9be96034abe6574ad3f1afb17f330007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186c947f9a50000040300473045022100c011a10f4a28ba782cbbdf12a59802b4b257c844e33b2853b1e63c2ecee8ffac02206ae76c56acb2e73c407b7693833945eda59d010e8b89112c81d4fba2cebf8d00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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