www.oni.co.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:24:7b:04:09:48:af:b8:7b:f0:94:15:bf:20:c6:5a:06:e0 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.oni.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:24:7b:04:09:48:af:b8:7b:f0:94:15:bf:20:c6:5a:06:e0Serial Number (int): 273750539005404000454481443982293115471584
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2d:a2:41:b8:77:68:73:49:66:b5:4f:65:ac:82:f5:af:3d:d5:ab:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d0:11:b4:99:2c:c8:f4:ba:44:00:33:14:86:7c:d7:85:52:d0:3b:96
Fingerprint (sha256): 09:24:9f:c1:d9:d1:ab:c2:ab:a4:c6:2c:b4:f7:f0:ae:2b:a6:41:77:0f:8c:20:1d:7c:fc:a8:a3:7b:69:b6:40
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.oni.co.nz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.oni.co.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.oni.co.nz
Other certificates including the domain name oni.co.nz
(limited to 100 certificates)
oni.co.nz
www.message.watch
www.oni.co.nz
creativelasersystems.in
speakuprzn.ru
www.oni.co.nz
www.oni.co.nz
oni.co.nz
oni.co.nz
oni.co.nz
oni.co.nz
console.work.cdlbox.app
www.flatz.app
www.oni.co.nz
www.oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
www.oni.co.nz
hubertspringer.pl
www.oni.co.nz
oni.co.nz
www.oni.co.nz
test-portal.oni.co.nz
oni.co.nz
www.oni.co.nz
forojuanfe.appsiste.co
oni.co.nz
brain.bimedoc.com
oni.co.nz
www.oni.co.nz
www.oni.co.nz
aquariusbeauty.co.uk
oni.co.nz
www.associationsaintraphaelantony.com
oni.co.nz
www.oni.co.nz
oni.co.nz
creativelasersystems.in
oni.co.nz
oni.co.nz
oni.co.nz
fcbeauty.s-match.jp
oni.co.nz
www.oni.co.nz
www.ooowl.jp
hubertspringer.pl
oni.co.nz
oni.co.nz
wallet.verified.network
oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
www.oni.co.nz
www.oni.co.nz
aquariusbeauty.co.uk
oni.co.nz
oni.co.nz
www.oni.co.nz
jasig.org
www.oni.co.nz
oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
site.featsapp.com
oni.co.nz
app.feriadeteatro.com
www.oni.co.nz
speakuprzn.ru
www.message.watch
www.oni.co.nz
creativelasersystems.in
speakuprzn.ru
www.oni.co.nz
www.oni.co.nz
oni.co.nz
oni.co.nz
oni.co.nz
oni.co.nz
console.work.cdlbox.app
www.flatz.app
www.oni.co.nz
www.oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
www.oni.co.nz
hubertspringer.pl
www.oni.co.nz
oni.co.nz
www.oni.co.nz
test-portal.oni.co.nz
oni.co.nz
www.oni.co.nz
forojuanfe.appsiste.co
oni.co.nz
brain.bimedoc.com
oni.co.nz
www.oni.co.nz
www.oni.co.nz
aquariusbeauty.co.uk
oni.co.nz
www.associationsaintraphaelantony.com
oni.co.nz
www.oni.co.nz
oni.co.nz
creativelasersystems.in
oni.co.nz
oni.co.nz
oni.co.nz
fcbeauty.s-match.jp
oni.co.nz
www.oni.co.nz
www.ooowl.jp
hubertspringer.pl
oni.co.nz
oni.co.nz
wallet.verified.network
oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
www.oni.co.nz
www.oni.co.nz
aquariusbeauty.co.uk
oni.co.nz
oni.co.nz
www.oni.co.nz
jasig.org
www.oni.co.nz
oni.co.nz
www.oni.co.nz
oni.co.nz
www.oni.co.nz
site.featsapp.com
oni.co.nz
app.feriadeteatro.com
www.oni.co.nz
speakuprzn.ru
Certificate
The complete raw certificate details for www.oni.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAyR7BAlIr7h78JQVvyDGWgbgMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMTcwNzIwMTZaFw0x ODA0MTcwNzIwMTZaMBgxFjAUBgNVBAMTDXd3dy5vbmkuY28ubnowggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFxOIZ7gx4jBNlaNuZWYxOvAoEUUV4QKi KgJzWnMZDE6C75Xqjf0SdY6yNQlv24MLWdYoh0cLmDOma4hgL9Y2xYMzo+2psyZP AWBSUKu7L3i/SLUS8uCznhjVd4XzB8E6KKW0bG6x6Ift6LhjHWs5XXdsQP2UyjaJ Cgfz0miFJL7uzRIA+wSgkpJbFUSYJfBBkVWfodDhoN8Tcyt6cabVzQFrpQYg20DU sMNkO8gMv+y9BsRzI45trEWjGocVQ5SW3KlNtxtddXhItzC1uzYmc5n7xBMtx9dx jpyOH27+PDKGb3cu4Fk3abRA+dZ9xkSjCaB0wiV1OElIpI8axB35AgMBAAGjggIN MIICCTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC2iQbh3aHNJZrVPZayC9a891asf MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INd3d3Lm9uaS5jby5uejCB/gYDVR0gBIH2MIHzMAgGBmeB DAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNh dGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFu ZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5 IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0G CSqGSIb3DQEBCwUAA4IBAQAR+pIcLLRFWIsliB5sdMTjccDPOU0qVCf+wuLTvHAt A2jsUCeOzJ/MFi8vSbLHMzH5H9qictJIc+KHsnIYHvEh22pW0sFOMQvNggnntwG8 x6IHbZ8Oxl3VJrEN0d963UwWDOQNfJrekuDji6VpRcA8IB7np+YwyzMd0Xuxuy1t 7fMPBiX0NPUJjnnhel5GLCGgRVN2BhSFrwmPNAHMUG9U1N6kMFrpdFWjIu9SeH5t 916VEJvl8vFmASu3o04g1DYMuf8spT3XW9fsAtCl+rsko47Xa2uXjfzNoBE+Y0zT YYr6sK6v/O78HHBfwIwPJcyb9MNjfciRvHFHqntA3T+X -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRcTiGe4MeIwTZWjbmVm MTrwKBFFFeECoioCc1pzGQxOgu+V6o39EnWOsjUJb9uDC1nWKIdHC5gzpmuIYC/W NsWDM6PtqbMmTwFgUlCruy94v0i1EvLgs54Y1XeF8wfBOiiltGxuseiH7ei4Yx1r OV13bED9lMo2iQoH89JohSS+7s0SAPsEoJKSWxVEmCXwQZFVn6HQ4aDfE3MrenGm 1c0Ba6UGINtA1LDDZDvIDL/svQbEcyOObaxFoxqHFUOUltypTbcbXXV4SLcwtbs2 JnOZ+8QTLcfXcY6cjh9u/jwyhm93LuBZN2m0QPnWfcZEowmgdMIldThJSKSPGsQd +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273750539005404000454481443982293115471584 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-17 07:20:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 07:20:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oni.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21850606106835097722846050675638800535454429281868919113600747950416237107380035638312799381453895756012620081470433116395230495079098645769126013079363693609858205089057263510989284572152031499430172265676979114681550804895700153240779721854360204890656057968045426879434351596023080020613064384665669337911809804133251256886788911051502256205013827723302952226078616439731023130504882026181584097519341342835275569816693613887722327556590037166037155893868172419450210495855851269267501626302237666499674741844144132585629238913312194958243847223587800973634404920276595603857045901842829786453815698803059614555641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2da241b87768734966b54f65ac82f5af3dd5ab1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oni.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0011fa921c2cb445588b25881e6c74c4e371c0cf394d2a5427fec2e2d3bc702d0368ec50278ecc9fcc162f2f49b2c73331f91fdaa272d24873e287b272181ef121db6a56d2c14e310bcd8209e7b701bcc7a2076d9f0ec65dd526b10dd1df7add4c160ce40d7c9ade92e0e38ba56945c03c201ee7a7e630cb331dd17bb1bb2d6dedf30f0625f434f5098e79e17a5e462c21a0455376061485af098f3401cc506f54d4dea4305ae97455a322ef52787e6df75e95109be5f2f166012bb7a34e20d4360cb9ff2ca53dd75bd7ec02d0a5fabb24a38ed76b6b978dfccda0113e634cd3618afab0aeaffceefc1c705fc08c0f25cc9bf4c3637dc891bc7147aa7b40dd3f97