my.npe4.kaingaora.govt.nz

- Kainga Ora Homes and Communities -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:c2:ff:b7:eb:db:a1:4b:ab:a7:39:02:43:4e:4e:6d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kainga Ora Homes and Communities

Organization: Kainga Ora Homes and Communities
Locality: Wellington
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:c2:ff:b7:eb:db:a1:4b:ab:a7:39:02:43:4e:4e:6d
Serial Number (int): 7658632155677500970175997821049523821
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 86:80:c9:7b:44:2d:44:f5:b0:32:ef:d9:03:00:f6:c5:cd:de:91:d0
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8d:a4:e8:9b:7c:cc:09:00:9a:4b:6b:dd:29:36:0e:f3:10:3e:c3:8e
Fingerprint (sha256): 0b:e4:da:32:9f:79:4f:9e:12:99:f8:bf:49:26:f6:bd:29:ad:a0:2e:62:fb:f7:29:d7:38:a5:2b:12:79:63:50

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate my.npe4.kaingaora.govt.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.npe4.kaingaora.govt.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.npe4.kaingaora.govt.nz

Other certificates including the domain name kaingaora.govt.nz

(limited to 100 certificates)
my.npe4.kaingaora.govt.nz
careers.hnzc.co.nz
ucweb02.kaingaora.govt.nz
live.madeopen.co.uk
live.madeopen.co.uk
access02.kaingaora.govt.nz
iaf.portal.kaingaora.govt.nz
ucweb01.kaingaora.govt.nz
my.kaingaora.govt.nz
ciam.kaingaora.govt.nz
live.madeopen.co.uk
kaaingaora.govt.nz
kaaingaora.govt.nz
myaccount.firsthomepartner.kaingaora.govt.nz
access01.kaingaora.govt.nz
ciam.kaingaora.govt.nz
my.kaingaora.govt.nz
help.cloudpayroll.com.au
kaaingaora.govt.nz
ucweb01.kaingaora.govt.nz
live.madeopen.co.uk
live.madeopen.co.uk
kaaingaora.govt.nz
my.kaingaora.govt.nz
desk.aquion.com.au
kaaingaora.govt.nz
access02.kaingaora.govt.nz
careers.hnzc.co.nz
live.madeopen.co.uk
kaaingaora.govt.nz
access01.kaingaora.govt.nz
helpdesk.csxpi.com
live.madeopen.co.uk
mail.hnzc.co.nz
desk.mygpmptool.com.au
kaaingaora.govt.nz
careers.hnzc.co.nz
access02.kaingaora.govt.nz
zohosd.mbav.com.au
kaaingaora.govt.nz
live.madeopen.co.uk
kaaingaora.govt.nz
kaaingaora.govt.nz
my.kaingaora.govt.nz
live.madeopen.co.uk
my.kaingaora.govt.nz
kaaingaora.govt.nz
ciam.npe4.kaingaora.govt.nz
kaaingaora.govt.nz
my.kaingaora.govt.nz
live.madeopen.co.uk
live.madeopen.co.uk
kaaingaora.govt.nz
rawa.kaingaora.govt.nz
my.npe4.kaingaora.govt.nz
live.madeopen.co.uk
kaaingaora.govt.nz
ciam.npe4.kaingaora.govt.nz
ucweb02.kaingaora.govt.nz
my.kaingaora.govt.nz
hnzaadexpwe01.hnzc.co.nz
ciam.kaingaora.govt.nz
ciam.npe4.kaingaora.govt.nz
kaaingaora.govt.nz
ucweb02.kaingaora.govt.nz

Certificate

The complete raw certificate details for my.npe4.kaingaora.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7658632155677500970175997821049523821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kainga Ora Homes and Communities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.npe4.kaingaora.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 593100859467806551113934430995406350966341699529012786548585309295149754127259179406360009766166352665119627428588168727636306537916368481497483428774230266631828872771474205374138643543846641205203661674703659306099933269337812449013259912693204786581486185154274543652223560585331909487939804351891739749614080128687226263368573860302896214632954347507153771914788124138210918740386677384981956120869039398716308387592178220269110996760987572766334473160696390885200266199375262441047854964571855479387789817327344742780494665119081148726247460188132140087259191602971788316847225799488491504474615487495257387489060848475280432838416438875331136729078520054050457636125065007633914629612506045680497979460703791376802906075017776982379893841846437696881754509546890720931834083805473268194294324615854838084207102306984933583947654934779086448919836955816571897010065517459725929489359480100288635272529724532999790840652737907011018639556534565945692972619621692507487908533271820352210090983482988004590124492839909742153482257419103582249341791140699360420480370581547437313239134476629262536403422167208483089511675446148217005476355672051031039054919669055145108825975152723176145647169097634674829284804221638085557070259049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8680c97b442d44f5b032efd90300f6c5cdde91d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.npe4.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184a0cbba780000040300483046022100b4755fdc19e3760243dbbae18e696d4c6597cedd9561271f910a710ef52f03b7022100ae0b4ee5f235713148b5c03f979adacc5158f903eeaf6061cc41f991b69904eb007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184a0cbba3e0000040300473045022077406d1d84f15b972b077e05afb88dcfe295057fd2b9297cb2762fd3f0f489b9022100af9330c7b6783ebd1662d1b0a14cab6512ba8bcd7952e583630b6f744b98a62f007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184a0cbba7a0000040300483046022100e3e4b8a7a2b09924e75fc774e70ca8df3e30e7b7b58ad7284bd597a486c239f3022100f9b239f40831c367f79261d874133b6a578b3f5bca1d70752916495f0f593fa3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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