webdisk.mainscape.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:0d:66:b0:fa:8c:ff:e6:2f:24:2d:3a:48:b5:27:33:70:e2 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webdisk.mainscape.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:66:b0:fa:8c:ff:e6:2f:24:2d:3a:48:b5:27:33:70:e2
Serial Number (int): 353009314678603890778194411680140258144482
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:83:2a:c9:fc:65:35:1f:d2:1d:de:19:7b:11:c7:83:f4:48:35:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:d0:87:9d:bd:c5:97:82:56:0d:0c:5a:c0:ee:c5:99:a1:de:0b:94
Fingerprint (sha256): 09:a2:c5:35:c1:db:9f:56:ca:db:7c:12:79:fc:82:c7:02:f9:b9:de:ac:68:bc:28:fd:36:4f:3d:14:15:66:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webdisk.mainscape.co.nz

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webdisk.mainscape.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.azena.co.nz
azena.co.nz
azena.copycat.co.nz
cpanel.mainscape.co.nz
cpcalendars.mainscape.co.nz
cpcontacts.mainscape.co.nz
mail.mainscape.co.nz
mainscape.copycat.co.nz
thatotherangel.copycat.co.nz
webdisk.mainscape.co.nz
webmail.mainscape.co.nz
www.azena.copycat.co.nz
www.mainscape.co.nz
www.mainscape.copycat.co.nz
www.thatotherangel.copycat.co.nz

Other certificates including the domain name mainscape.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for webdisk.mainscape.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv93HgQKW/LTwjIrBpoHM
G0//EtN/lkof38cxVIs1XcreKtWie/8PX7HIKsI/VYmXXvHZeAUb9sOh6LkJdt1u
8ZV+mTx3xfz9zoSeF5i0TyJqgBIrkDEAp58LkeJ7yxd79OZYJSLNIAI/2qWLKNTE
iyI0sZAioL7E6bdzQX9BLdVGXg43l4daTm94yFu6F1RMG9vQ0PxUAxzxW626DG6r
duopzdF7xJ7tbO5zl6T3lJ/fffDE0tJ8WBYK54sV3558NLPkvdynar1mhypXfxhW
WggJslxJ103TpMtDxLUSliVLVto6EywswEutVitxRp8X9HhNXmTV7JBCNwir0NX1
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353009314678603890778194411680140258144482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 21:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 21:44:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webdisk.mainscape.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24220879703438269445584879320059819921766603297333571039214230832590301736032514429630598228028706005114019694927771029701434365604116775559660026201196237087649420280521692495134506058701733290942328095855601304552189152688692818406876661274417018351754940661551626716423846248448024972225054590511596077802240458716894801865241130525948742448027376635091120059242314403097469833140575687160261332922755546043561142725494927548052964850205329694114495309994627891697304951347494184068889308081023327672669872451817856854443294202808886824400771269955757121791975000224466306463451282416987977107127124668975519495651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4832ac9fc65351fd21dde197b11c783f44835a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azena.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainscape.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatotherangel.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azena.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainscape.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatotherangel.copycat.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895bb9b3720000040300463044022077ea95b252ad374627813310bd75d373a3d9de0efa79d6752dcf84a9fa80862b022061e2ddbdfdbd34457344eb299060c4d8d1bed8edd74e581dc9adf2e7411fd36e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001895bb9b3b100000403004730450220736babf8b1e616d43fe3b9218f62c403c34cbad9a559d950abe6c319b627c43d022100abd83134c087744f23ec22b727fbde2bcd368d89c3ed71fa30d8b860bd5c350d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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