pay.wgtn.ac.nz

- Victoria University of Wellington -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:ba:8e:67:9b:53:9d:b1:b2:2e:85:90:50:bb:4b:84 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Victoria University of Wellington

Organization: Victoria University of Wellington
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ba:8e:67:9b:53:9d:b1:b2:2e:85:90:50:bb:4b:84
Serial Number (int): 16919391475842187974966687582595533700
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:f9:1c:8f:eb:24:a4:57:0c:ec:a9:3e:4d:62:ed:cf:5a:ba:1e:c9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 3f:5e:1a:0e:9f:3b:6e:17:9c:b2:c2:6d:10:a9:13:76:fe:81:e0:ee
Fingerprint (sha256): 09:12:5d:32:06:4f:82:4c:e6:08:48:18:df:4b:5e:01:c8:ce:b9:66:3b:3e:a2:78:77:05:00:a6:a3:13:f0:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate pay.wgtn.ac.nz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pay.wgtn.ac.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pay.wgtn.ac.nz
pay.victoria.ac.nz
pay.vuw.ac.nz

Other certificates including the domain name wgtn.ac.nz

(limited to 100 certificates)
o2.shared.global.fastly.net
website-status.ametek.com
ecs.wgtn.ac.nz
o2.shared.global.fastly.net
website-status.ametek.com
status.placepay.com
vpn.wgtn.ac.nz
o2.shared.global.fastly.net
pay.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
ojs.victoria.ac.nz
o2.shared.global.fastly.net
*.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
elements.wgtn.ac.nz
go.wgtn.ac.nz
loginb2ctest.wgtn.ac.nz
o2.shared.global.fastly.net
puaha.wgtn.ac.nz
nuku.wgtn.ac.nz
o2.shared.global.fastly.net
status.hykucommons.org
status-preview.wgtn.ac.nz
status.hykucommons.org
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
choose.wgtn.ac.nz
mobilityprint.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
researcharchive.vuw.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
www.wgtn.ac.nz
choose.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
people.wgtn.ac.nz
sms.wgtn.ac.nz
www.wgtn.ac.nz
o2.shared.global.fastly.net
status.hykucommons.org
sms.wgtn.ac.nz
vpn.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
puaha-uat.wgtn.ac.nz
o2.shared.global.fastly.net
printing.wgtn.ac.nz
ecs.wgtn.ac.nz
vpn.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
*.wgtn.ac.nz
o2.shared.global.fastly.net
printing.wgtn.ac.nz
o2.shared.global.fastly.net
ecs.wgtn.ac.nz
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
starrez-local.wgtn.ac.nz
*.wgtn.ac.nz
sms.wgtn.ac.nz
status.hykucommons.org
o2.shared.global.fastly.net
openaccess.wgtn.ac.nz
status-preview.wgtn.ac.nz
o2.shared.global.fastly.net
vpn.wgtn.ac.nz
website-status.ametek.com
choose.wgtn.ac.nz
o2.shared.global.fastly.net
status.hykucommons.org
status.hykucommons.org
o2.shared.global.fastly.net
status.placepay.com
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net
o2.shared.global.fastly.net

Certificate

The complete raw certificate details for pay.wgtn.ac.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyezYs3Rd69zzj4ELrEQq
N7PgCBSR3LdPvcHolvPPis+OjPmj1AOvVLFyUUpz34JGRvMs435xrZ5fO/tiezF0
ag6LbTQlNv8HxTScZVuwexVZkqNoxOrJWJTm/r44AWXCG2VocEgaxUnJPEVitPCV
0qEPmxrjmHv9vQopxHZn+XkzzZbTcgNi2YeJJ8ineE+ZXIzvJWjFfXJ62fUYxzTS
Smrq3dTRz9wrk81QYRKsHu+izVigKtKjg+6I4fjkz+ezHmx7McBjUA4Qkt5g8LpC
VEDjmfBJgd4PKY++6St6afcI7lA+79IX7tnWsJvrgQbZQzoALPO0VRcV5tYBMXjY
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16919391475842187974966687582595533700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria University of Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pay.wgtn.ac.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25490692654486420053842751819242762118154411574478324441280173581945926964950742159064288011819002284478374890556486207520441578685564328091385058839987135451166837809309726193311918277580679462582896986771817075008019153100080874726908997044641901382724719748024715901855832622269328230283703224829526449211078981249044806411476758829084882362209992203576778834684542174412968124547899971177293902032677527949506106324588123541889143241928859464938481905283812943018836768296472682294234991557205695382778208739506014939571364826924052721786198267042649277865898170444806984468116984283808847729716358021848290089061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10f91c8feb24a4570ceca93e4d62edcf5aba1ec9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.wgtn.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.victoria.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.vuw.ac.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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