*.chorus.co.nz

- Chorus New Zealand Ltd. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:9c:64:c2:af:95:1f:b2:c4:4b:53:e8:8d:80:d2:8f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Chorus New Zealand Ltd.

Organization: Chorus New Zealand Ltd.
Organization unit: IT Services
State / Province: Wellington
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:9c:64:c2:af:95:1f:b2:c4:4b:53:e8:8d:80:d2:8f
Serial Number (int): 11445865941774809384488973948384498319
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9f:3a:b4:4c:51:b2:b7:23:ea:cf:83:23:d8:94:59:82:62:98:79:1e
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): ac:5f:64:72:a1:7d:3d:eb:b4:da:2f:0e:63:7a:50:95:88:ba:cf:5f
Fingerprint (sha256): 07:5d:d8:d2:1f:65:84:a4:a7:b1:84:b9:21:60:fb:d3:02:14:05:39:39:0b:7e:b1:0f:90:d3:5f:ba:1f:5c:25

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.chorus.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.chorus.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chorus.co.nz
chorus.co.nz

Other certificates including the domain name chorus.co.nz

(limited to 100 certificates)
activate.chorus.co.nz
statuspage.io
apistatus.ppe.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
aic.status.akamai.com
q.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
fibrelab.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
customer.chorus.co.nz
statuspage.io
com-eks.infralab1.aws.chorus.co.nz
statuspage.io
statuspage.io
api.sandbox.chorus.co.nz
statuspage.io
tech-mate.chorus.co.nz
statuspage.io
checkmate.chorus.co.nz
statuspage.io
statuspage.io
aic.status.akamai.com
statuspage.io
*.chorus.co.nz
apistatus.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
aic.status.akamai.com
statuspage.io
statuspage.io
statuspage.io
aic.status.akamai.com
www.ssp.chorus.co.nz
statuspage.io
emma-b2b-ws.chorus.co.nz
statuspage.io
statuspage.io
*.chorus.co.nz
statuspage.io
webmail.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
tech-mate.npe.chorus.co.nz
statuspage.io
payments.chorus.co.nz
app.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
apistatuscomm.chorus.co.nz
statuspage.io
aic.status.akamai.com
idem.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
apistatuscomm.chorus.co.nz
apistatus.chorus.co.nz
statuspage.io
statuspage.io
chorus.co.nz
statuspage.io
statuspage.io
wac-hlz-ext.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
data.chorus.co.nz
apistatuscomm.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
apistatus.chorus.co.nz
statuspage.io
statuspage.io
future.chorus.co.nz
statuspage.io
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for *.chorus.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11445865941774809384488973948384498319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chorus New Zealand Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chorus.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909647023979137567234543958162622959147350626763886828331084742121928917613244874226216935799321125998042365579356795849010524031628357334780806622627996664668077812253215438245407231796119765969998991206294296935946872450919040296992687831467882370538855445443932950057042275106340728285480064045392368612930951635327121575457050243295823998231363494597140871457309423590995973446318148428334985752538282717377069214378901574004333831366110060877816200107322555518056324723205868312353239980715613528348822623575570830836483142585996274658177118967060605939698843045890592157715780542345458249970740379264271102897212770068669536520154609078586749146178571108339209586323485830886637638612262999211333256294229175331977108741385776774288319300477748429964386861862135852734706834003464694763672626483257236048949027125143474852958438679494292795979926475376084980997960344904644971261010652607186284118221481889607221444374773058809546919470907952121444749983179656113036935631080844371912010997082534493262117985733417577586096896315247216606104852162421529012820176579600646125278020477192531173046563378200325141034452463350764107477513166893155952081564379158306460899514388474286930831389528834325250755386267422721325361270009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f3ab44c51b2b723eacf8323d89459826298791e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chorus.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chorus.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000fdd91e7ba955d5b0f5a924cc4bb29a5c960133f7a9a19173ebe5baf22ea7c64afba758ab78f051e43bf7b972c0c40ff746579daa20bca0959b56eb49dea75a898b4e0e539c52bbaffb619e7cb91a859502ee889e4f554a8cd8f7c446bbbf520ac47eec62dc5d501261826a81b674f5e9368e4bab529b9b8648b0e349ba7ea91e361418a983a33159af2202f55dd343942bdbd2312be2aab7531b5122aef3fa695253e126838e37a7f075320b0b0e433919287033753b8c5d1a64df71b18b7142863df372b5e150a4f547e6993c1f0efb6f48ce0211f464cd93b868a44a27165b16a41c8cb6670f808147b4ffce1f63ee914f46d78cd82238882affaa376b3d7