dev.horizons.govt.nz

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0b:48:7c:64:b2:94:eb:42:4f:37:2f:0c:c5:5e:3f:ea was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.horizons.govt.nz

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:48:7c:64:b2:94:eb:42:4f:37:2f:0c:c5:5e:3f:ea
Serial Number (int): 14997876324324050173581455579278098410
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:2e:79:b5:1c:82:e6:ef:ac:4c:8b:cc:57:6b:67:a2:05:5b:ec:c3
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): ac:7e:71:d5:b1:e4:a8:8d:f0:30:6c:47:73:68:97:35:9d:53:ba:53
Fingerprint (sha256): 0b:17:af:2a:c3:08:34:15:61:ab:77:3d:f8:46:d0:e7:7c:38:ec:82:16:b6:e3:0c:be:1a:72:00:5b:31:f9:68

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev.horizons.govt.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.horizons.govt.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.horizons.govt.nz

Other certificates including the domain name horizons.govt.nz

(limited to 100 certificates)
support.canterbury.qld.edu.au
theportal.horizons.govt.nz
helpdesk.grv.org.au
www.horizons.govt.nz
remote.horizons.govt.nz
dev.horizons.govt.nz
dev.horizons.govt.nz
*.horizons.govt.nz
envirodata.horizons.govt.nz
servicedesk.yooralla.com.au
servicedesk.cockburn.wa.gov.au
servicedesk.yooralla.com.au
helpdesk.thescapegroup.com.au
servicedesk.yooralla.com.au
portal.thescapegroup.com.au
servicedesk.bluechipit.com.au
servicedesk.yooralla.com.au
www.horizons.govt.nz
esm.parracatholic.org
test.barkuma.com.au
theportal.horizons.govt.nz
helpdesk.grv.org.au
envirodata.horizons.govt.nz
servicedesk.yooralla.com.au
envirodata.horizons.govt.nz
help.cygnetwest.com
support.calvary.qld.edu.au
www.horizons.govt.nz
help.cygnetwest.com
servicedesk.yooralla.com.au
esm.parracatholic.org
www.horizons.govt.nz
servicedesk.eqt.com.au
help.cygnetwest.com
www.horizons.govt.nz
support.calvary.qld.edu.au
servicedesk.eqt.com.au
servicedesk.eqt.com.au
www.horizons.govt.nz
envirodata.horizons.govt.nz
servicedesk.yooralla.com.au
helpdesk.grv.org.au
envirodata.horizons.govt.nz
esm.parracatholic.org
servicedesk.yooralla.com.au
servicedesk.yooralla.com.au
theportal.horizons.govt.nz
support.canterbury.qld.edu.au
servicedesk.hrha.org.au
envirodata.horizons.govt.nz
theportal.horizons.govt.nz
test.barkuma.com.au
servicedesk.yooralla.com.au
servicedesk.yooralla.com.au
remote.horizons.govt.nz
dev.horizons.govt.nz
servicedesk.yooralla.com.au
help.cygnetwest.com
support.calvary.qld.edu.au
test.barkuma.com.au
wireless.horizons.govt.nz
servicedesk.yooralla.com.au
envirodata.horizons.govt.nz
remote.horizons.govt.nz
support.calvary.qld.edu.au
servicedesk.bluechipit.com.au
test.barkuma.com.au
helpdesk.thescapegroup.com.au
envirodata.horizons.govt.nz
*.horizons.govt.nz
servicedesk.bluechipit.com.au
esm.parracatholic.org
*.horizons.govt.nz
horizons.govt.nz
www.horizons.govt.nz
servicedesk.cockburn.wa.gov.au
dev.horizons.govt.nz
servicedesk.cockburn.wa.gov.au
servicedesk.yooralla.com.au
portal.thescapegroup.com.au
support.canterbury.qld.edu.au
dev.horizons.govt.nz
servicedesk.bluechipit.com.au
envirodata.horizons.govt.nz
wireless.horizons.govt.nz
servicedesk.yooralla.com.au
support.canterbury.qld.edu.au
remote.horizons.govt.nz
servicedesk.yooralla.com.au
www.horizons.govt.nz
servicedesk.cockburn.wa.gov.au
servicedesk.eqt.com.au
envirodata.horizons.govt.nz
helpdesk.grv.org.au

Certificate

The complete raw certificate details for dev.horizons.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ihbqnBWjDhQTIVV0su
sp6NUGC/hSxy66yYYVJsKbUw0K/ANY1qumv0SkwMcUmbrwEUVAXSl+XVQKsbZCDK
GTw4i8Mm5Cx+18PIvAW7K83z0rHHSvQHoYMhrZCOezwrJZWWarmSJlpgFm6OGuqw
h3rCHJlK+abnyrqHHd4BwiChKhtOq/Gzc0iHRaV27sfQ9GICKZwlcDwHl8b95/20
U8YO86+JbTncUKhwmQoa/aafE3SoajMQA29wOuKwoOuG3DlKw6OK5cW/gpvWG13B
f9rFhKLtGNbeU6oCpr7y078R7DqcYDEPSzCFzz7r1S+vD5l0iUdlf4wXE41Gz6DI
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14997876324324050173581455579278098410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.horizons.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21638345418491184061874129440063188890966040786194725820224144329573541506591218540614352659135076396624653211760103251637765217569565344497712738417813241246943343354057962830232223725640706900389479534793336770534831012722556265239563540820161843732459846983411303205565465426905307486698746788628669739113380211689318121762923042997184725703273602981009062810799299648392574667838517643414325013563098488703150650095282617794214326397539508027743987869243046110190628871920471822899571986313098058011202587072259806119611644393258027135187848136298975956833581100939402410457478231209423843827289627410437068867757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b2e79b51c82e6efac4c8bcc576b67a2055becc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.horizons.govt.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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