*.stuff.co.nz

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 12:75:81 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=ga7KnFbxEX0V11zSFekk3fxVhbfCdq0S,CN=*.stuff.co.nz,OU=GT20729726+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:75:81
Serial Number (int): 1209729
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: dc:6a:dd:10:49:c4:6e:5a:76:a1:02:91:55:83:e6:71:4e:06:b8:60
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): ea:5b:bf:1b:c5:cf:f4:4f:33:1f:1b:d8:08:ab:c2:9e:1a:b3:06:6f
Fingerprint (sha256): 07:6b:26:21:d5:72:2b:03:e0:ac:c7:fd:2b:02:b4:6b:d8:84:95:75:83:f5:c4:2a:ef:ce:fd:e5:be:1c:13:8b

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.stuff.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stuff.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stuff.co.nz
stuff.co.nz

Other certificates including the domain name stuff.co.nz

(limited to 100 certificates)
*.stuff.co.nz
deaths.stuff.co.nz
composer.contentstaging.shift21.ffx.nz
popshop.stuff.co.nz
t.comms.stuff.co.nz
coupons.stuff.co.nz
*.stuff.co.nz
*.stuff.co.nz
www.communications.stuff.co.nz
www.stuff.co.nz
coupons.stuff.co.nz
www.stuff.co.nz
social.stuff.co.nz
shop.stuff.co.nz
*.stuff.co.nz
*.stuff.co.nz
events.stuff.co.nz
www.stuff.co.nz
coupons.stuff.co.nz
stuff.co.nz
*.preprod.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
playwidget.stuff.co.nz
somniture.stuff.co.nz
somniture.stuff.co.nz
devices.play.stuff.co.nz
my.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
*.stuff.co.nz
www.stuff.co.nz
subscribers.theage.com.au
*.stuff.co.nz
prospective2.shared.global.fastly.net
*.fairfaxmedia.com.au
prospective2.shared.global.fastly.net
*.stuff.co.nz
stuff.co.nz
*.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
test.communications.stuff.co.nz
ssl470690.cloudflaressl.com
pressphotocomp.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
www.stuff.co.nz
prospective2.shared.global.fastly.net
www.stuff.co.nz
*.stuff.co.nz
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
analytics.stuff.co.nz
prospective2.shared.global.fastly.net
somniture.stuff.co.nz
*.preprod.stuff.co.nz
shop.stuff.co.nz
*.preprod.stuff.co.nz
prospective2.shared.global.fastly.net
deaths.stuff.co.nz
www.communications.stuff.co.nz
www.stuff.co.nz
*.stuff.co.nz
prospective2.shared.global.fastly.net
*.idm.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
pressfanzone.stuff.co.nz
www.stuff.co.nz
*.preprod.stuff.co.nz
shop.stuff.co.nz
*.stuff.co.nz
events.stuff.co.nz
*.stuff.co.nz
stuff.co.nz
shop.stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
ssl470689.cloudflaressl.com
www.communications.stuff.co.nz
somniture.stuff.co.nz
stuff.co.nz
*.stuff.co.nz
deaths.stuff.co.nz
stuff.co.nz
knowthecrew.stuff.co.nz
prospective2.shared.global.fastly.net
play.stuff.co.nz
popshop.stuff.co.nz
www.stuff.co.nz
shop.stuff.co.nz
*.preprod.stuff.co.nz
stuff.co.nz
www.stuff.co.nz
www.stuff.co.nz
playwidget.stuff.co.nz
prospective2.shared.global.fastly.net
*.stuff.co.nz

Certificate

The complete raw certificate details for *.stuff.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R1AIfOWs+3DySENKIn0
jdFKGHw61X+VpisvW5lXHWakkTreOEObSQJ3cCbAN55KMpdb0Ji9s0NBw0cxXSCL
3SfcD0VN0hOa4QV7VdYNKQW+DszE+lM9Uyew2n9acfvb5AIkdQjj6BJZubewDew5
X2SRwu0xUAn30Y7M2axvYwFgqJYe12pX8rYLN2xG36OV9svFMfKhadZfsInaGC6q
/OHOOeth+r15zB63H6daenu4pEeZMmqaFrNsigvAshfq20Mv7A2q0VAvOMJnCAVD
+X7eGHLfpEfMnmk/b3Nq/QXk3igj3PZdd2efDDhR+vfjTSvNThg01wOBYP6DQy1E
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1209729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-27 10:51:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-22 17:01:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ga7KnFbxEX0V11zSFekk3fxVhbfCdq0S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT20729726'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stuff.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27913089365542527061960400781025092119933881019051724882694578482063490801867648971551181195185235528325069211623226859866703102637642499215280840545562212841335523357063281855026656407442488728203913834465063413061885483725735286863452236874097245654921802623778399075566185661427160717085522576916432520969419888884012563630895778954341269227005119587148240319702543932965060525448196985043201695980427396986154939536959855739136830506782744931012859963730173069083743844504214656211668743799537577797999974394243183030560203225391545644483473354863624615136212819301359991834805327680318534354053606550046501586037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuff.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuff.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc6add1049c46e5a76a102915583e6714e06b860
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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