ptlycert9.ptly.com

Issued by R3

About this certificate

This digital certificate with serial number 04:14:5c:4b:f7:0f:1b:08:ce:27:df:cc:4d:2d:c9:f0:81:ec was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ptlycert9.ptly.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:5c:4b:f7:0f:1b:08:ce:27:df:cc:4d:2d:c9:f0:81:ec
Serial Number (int): 355377474474288319508033718047546039894508
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:6b:dd:54:a9:c9:e8:74:36:1e:b6:2e:7f:1a:af:98:12:15:85:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:a3:6f:73:00:16:29:b8:a1:a4:ba:45:6b:3a:b5:c0:d0:1f:3d:cb
Fingerprint (sha256): 09:cd:12:0d:cd:83:4d:02:97:37:c2:b9:14:7a:3a:2d:93:7d:24:c6:c7:33:df:b5:8d:c4:58:52:91:62:f2:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ptlycert9.ptly.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ptlycert9.ptly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.rangitoto.school.nz
community.westlakegirls.school.nz
community.woodford.school.nz
connect.liston.school.nz
mccoba.org.au
pastparent.lauriston.vic.edu.au
ptlycert9.ptly.com
shieldandheart.org.au
students.stmc.uwa.edu.au

Other certificates including the domain name ptly.com

(limited to 100 certificates)
wcobu.com.au
ptlycert7.ptly.com
eu.ptly.com
ptlycert15.ptly.com
ais-alumni.be
ais-alumni.be
ap.ptly.com
ptlycert3.ptly.com
ptlycert9.ptly.com
ais-alumni.be
thebluecoatoldscholars.co.uk
hutchins.ptly.com
ptlycert18.ptly.com
maristevents.ptly.com
maristevents.ptly.com
ptlycert7.ptly.com
eu.ptly.com
*.ptly.com
ap.ptly.com
tocalalumni.ptly.com
hutchins.ptly.com
ptlycert16.ptly.com
ptlycert5.ptly.com
ptlycert16.ptly.com
ptlycert9.ptly.com
ptlycert15.ptly.com
eu.ptly.com
eubeta.ptly.com
ptlycert2.ptly.com
*.ptly.com
ptlycert4.ptly.com
ptlycert18.ptly.com
ais-alumni.be
tocalalumni.ptly.com
ais-alumni.be
lowtherhall.ptly.com
ptlycert15.ptly.com
*.ptly.com
ap.ptly.com
demo.ptly.com
ptlycert2.ptly.com
ap.ptly.com
cert0.ptly.com
cert4.ptly.com
ais-alumni.be
maristevents.ptly.com
asba2017.ptly.com
ptlycert16.ptly.com
ptlycert3.ptly.com
demo.ptly.com
2019asba.ptly.com
ap.ptly.com
cert3.ptly.com
eu.ptly.com
*.ptly.com
ptlycert18.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert8.ptly.com
apbeta.ptly.com
ais-alumni.be
eubeta.ptly.com
maristevents.ptly.com
ptlycert17.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert16.ptly.com
asba2019.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert21.ptly.com
ptlycert1.ptly.uk
ptlycert15.ptly.com
cert1.ptly.com
ap.ptly.com
ptlycert12.ptly.com
ap.ptly.com
emmanuelevents.ptly.com
eu.ptly.com
ptlycert8.ptly.com
ptlycert14.ptly.com
cert0.ptly.com
ptlycert12.ptly.com
myhills.net.au
eu.ptly.com
maristevents.ptly.com
cert1.ptly.com
ptlycert4.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert1.ptly.com
ptly.com
ap.ptly.com
ptlycert7.ptly.com
cert5.ptly.com
cert1.ptly.com
ais-alumni.be
maristevents.ptly.com
internet-alumni.com
cert3.ptly.com

Certificate

The complete raw certificate details for ptlycert9.ptly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj4QlYX3Qdr1vI0gd/VS
IVDcaztT74wp8m2tMyos+qn125+lA/poUk95JgdjXsnn+oudbVYMBwVb4pJDl34Y
9NiPXAFkgyqx+CrARmaku9zl/HDfRw7MhzeBArl4+fQdBvRnhqnvB/f+rZfTYdK/
YzwikVvSAgN/3LYS+E7wP++69cul9J9DlR87pGnwItoYOZY7PM4G+ZaFNzE34sdb
zf/MVGVRNjVEqHj3ktYEXBJyvOoOV1gUOz2K531LH3U4fZLBTlIeijOJxeqNhmcS
3nE5HFKorRaEYgtZD8D62xBxPZjZdyA/zib1YtEhA3PsKKFB/6zrsjTv8zBfTOvZ
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355377474474288319508033718047546039894508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 01:08:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 01:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ptlycert9.ptly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21491117128684159575017940779192152356051859360566854860256412158354971903014858133701075510426315472108923266461751466741294004203979460482839542281503434099410331510687556290813828719035325717909435045310146871815514875893943624240782264468235180501657584700923682583810799730896587259774759924564742839161675789398223183525958018359210483940271413320433058561525519838686132074321133551685535899301369380202567645330137388495912547438169733369981314977538838230291444628144133577637409770617409458094028498138978890327990332698775041556805401397475038425023254034053814186181443950783779412170503602198604696770993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							396bdd54a9c9e874361eb62e7f1aaf98121585a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.rangitoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.westlakegirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.woodford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.liston.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccoba.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastparent.lauriston.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptlycert9.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shieldandheart.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students.stmc.uwa.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce6d3b0fd0000040300473045022100e1fb4c3f3bc4fe6e5970e09f4a07ea74c108d6481c29ec968e57d2c637f685f602201b62a17c37457a4bb4cfc79cf42f821f5e127200793706639586caca3344bac600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce6d3b107000004030047304502201fe1ff6724d4949e77d2b6287e8e744b618988ffb9aeec74412c0cf81f7797e1022100f46962a79e313a75ba2cf4ffd48b7049a132df545730290361239b454898be4e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052ae395b655f6d255e1d51ac87277d5fd0aec9a38b9710609bb3c06d514bbbcb00ba89eb4df2405e8f004c265425fb5ca71a4c15a2cc46e7c84889d62f295198aec45216e5f77f99fc91a94b3c1a3f39d6c29e3846e25093fe4a0be4bfaede80d5d417863e344a3038daa248c70562a6d571d68ac2d0609d33b4ca5e3c644a98b6d48ded1ee44b6536450bb5d34176e2dc26b171ae539ac22ce5b7b1c63959063316f3a8d6314f98116c17db062e0ac33239bc9be937f3cf78919a1a35522f02c72401f5818fa6751319a42eb7cacbe08c7e5a674fbe93b956bc46b2bf98d18adbeb3f1291ef81fb18a5fb028cb34a2e22893e08e26719568edfc5ea89d753a2