www.redshift.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:e9:59:79:71:73:1f:84:a3:da:ba:50:e6:c2:3d:14:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.redshift.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:e9:59:79:71:73:1f:84:a3:da:ba:50:e6:c2:3d:14:ec
Serial Number (int): 373259648845946824239072906208138011415788
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:1b:d5:7a:bc:fa:b7:a9:d2:30:14:e5:31:12:fb:a4:4a:c4:eb:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:68:0c:ba:0c:36:f6:0f:87:fb:e8:a2:f1:e3:ef:45:22:fe:03:de
Fingerprint (sha256): 07:8c:1e:be:cf:55:b9:80:9b:6f:dd:72:f8:e3:ad:90:66:47:17:20:b0:ea:7f:8d:80:1e:dc:3c:94:17:9b:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.redshift.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.redshift.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.redshift.nz

Other certificates including the domain name redshift.nz

(limited to 100 certificates)
support.drsofa.com
support.utg-solutions.com
suporte-obot.outth.ink
redshift.nz
www.redshift.nz
lgbttazewell.teamjpindustries.com
support.getuscrm.com
support.getuscrm.com
support.roomnet.com
redshift.nz
help.tkdscore.com
redshift.nz
support.drsofa.com
smtp.printstop.co.nz
support.btspro.net
link.redshift.nz
support.cucucovers.com
www.redshift.nz
support.vincebaron.com
help.vibrantsupport.com
support.discountsolo401k.com
suporte-obot.outth.ink
faq.wby.io
support.liverton.com
designawards.redshift.nz
support.mig.business
www.redshift.nz
support.swvweb.nl
www.redshift.nz
soporte.zignal.mx
suporte-obot.outth.ink
support.ridvy.com
suporte-obot.outth.ink
support.infotelvn.com
www.redshift.nz
support.thepersonalisedgiftshop.com.au
suporte-obot.outth.ink
designawards.redshift.nz
designawards.redshift.nz
support.themarketinfluencers.com
suporte-obot.outth.ink
faq.wby.io
tickets.taskai.co
support-ar.smartkargo.com
suporte-obot.outth.ink
support.saaspass.com
suporte-obot.outth.ink
admins.indianaacs.org
support.roccospace.com
www.redshift.nz
suporte-obot.outth.ink
designawards.redshift.nz
redshift.nz
support.hospiville.fr
suporte-obot.outth.ink
support.clubcaddie.com
redshift.nz
www.redshift.nz
suporte-obot.outth.ink
shomadhan.shohoz.com
designawards.redshift.nz
support.connect.jenie.com
support.codetrimmer.app
www.zacousticsupport.com
designawards.redshift.nz
support.produhktiv.com
help.redshift.nz
kundenservice.kaputt.de

Certificate

The complete raw certificate details for www.redshift.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373259648845946824239072906208138011415788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 01:13:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 01:13:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.redshift.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778049746917367884125861215207341875383652682111719663163744236864944718235922508980693610207967893552597389701464847243397485244754767096267691227313686949756936699361695858114408081594806724503762054608607225541838112510698777411514916952356325593343230629830698315850300476281171711158119254326181085555255582674641984982285314179313722670013638256836334711120821222822709227172064645735302301852267297106968276697117243377519489039596025543364890334760394129338326939552512900386172481671857669666057587766425902059167842116739506325001667818535462762214001475306987791386104994381866114828756113880202809592997145956109622494745313654644932604700885393462135903212244871373821572119539240356790489003495305001270048297056883301482245844695695368266881547261584024932442341948925003997410558637975413569474176259334675501023784396501522426638666517261594655758506405198677699795146222037993264503509366940439495332300243684653566183995732678165786433712708400505250747551047367423417743853196214522278543144543805695703614599606573378699419683624200390242569740168335427710444845949605752634937201529488149215604314076045027989868258763063833912224234392655301127516547498027962472499712840528466389931146768735838403997051038489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b91bd57abcfab7a9d23014e53112fba44ac4ebab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redshift.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001715cb6525d000004030046304402205e5dd6effefb71f3c1a1e96a7884925741e3116208aeb3a686c2262cf0af8d7c02202c76afaa055941f650a9e388eb6b7653881e2708ca9febebe3e66853184fbba500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001715cb652990000040300473045022002fef4adbc54a740368c4873f16183274f74c19851ced4876f890d84bd1c2f77022100dd9c90c9bc124fc7835ca2b5e0964d891e0ab8ea99c9a015a16b681ce1e701f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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