ngaitahu.iwi.nz

- Te Runanga o Ngai Tahu -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 45:b2:33:60:54:09:e7:b3:8c:c8:c0:a6:c8:f7:b1:af was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Te Runanga o Ngai Tahu

Organization: Te Runanga o Ngai Tahu
State / Province: Christchurch
Locality: Christchurch
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:b2:33:60:54:09:e7:b3:8c:c8:c0:a6:c8:f7:b1:af
Serial Number (int): 92642002584780497488947965296708661679
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): a7:81:04:5d:37:28:bf:52:b8:1e:1a:4b:7a:f5:46:97:2c:9b:c4:2f
Fingerprint (sha256): 17:09:32:55:d5:36:0c:3c:e0:88:84:b5:0e:bc:8c:52:ee:ee:04:27:69:29:b4:e0:23:57:0e:5b:41:08:c8:69

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate ngaitahu.iwi.nz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngaitahu.iwi.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ngaitahu.iwi.nz
hybrid.ngaitahu.iwi.nz
ngaitahu.iwi.nz
www.ngaitahu.iwi.nz

Other certificates including the domain name ngaitahu.iwi.nz

(limited to 100 certificates)
ssl388199.cloudflaressl.com
communitynet.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
leadersonline.ngaitahu.iwi.nz
webmail.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388198.cloudflaressl.com
ssl388199.cloudflaressl.com
*.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
tekereme.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
sni.cloudflaressl.com
ssl388198.cloudflaressl.com
communitynet.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
sts.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
www.mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388197.cloudflaressl.com
ssl388198.cloudflaressl.com
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
ngaitahu.iwi.nz
tekereme.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
sni.cloudflaressl.com
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
www.mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl388197.cloudflaressl.com
webmail.ngaitahu.iwi.nz
sts.ngaitahu.iwi.nz
*.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
webmail.ngaitahu.iwi.nz
ngaitahu.iwi.nz
ngaitahu.iwi.nz
ssl388199.cloudflaressl.com
mahi.ngaitahu.iwi.nz
mahi.ngaitahu.iwi.nz

Certificate

The complete raw certificate details for ngaitahu.iwi.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KLZ8EaLqfD2qRX5Ahty
KI4ibt3flFJqc+TcMP1QK1k99XYG32Rq8L9RiaINEvFs4kL1+n3m1lyAVthcJTSv
BxszwFZtbwGE+P1AbSyp+TAccN8DyW3wqLE5cTsx2tfHeiym3b45N9HA5HArvcg3
HfWHA5zn+RAAJh7QeaUGrMV5NnRg2juL3BCPx5wW3iImXLZB1XAVgyeMLpjHcRnq
LRoI+2AmUMQK6CqoU16CZFDlj8KSQZh7xePJjwF3fVBF+dz+SWVdxfNUgLhKY4mz
e4OnFe1x1Oy9+cMmzHZDyBAtbDcWw2+qEfLD2P8RaJoEhahIk+NL7ZkUJm0DRcod
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92642002584780497488947965296708661679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Te Runanga o Ngai Tahu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ngaitahu.iwi.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26337872413104208100625764575127423193075768616043150178296745452204661531824011318768848518123234399358374877844155685540784991213660621682703722120487053815629378560916204504945651714258439103847428407894091083318794401235677131857812910364148874069094100997159907141805598334760501866460480013586205225277272182410083412064018584169194304823463943710374967249483868510560168507571470564861179443394595196153727134531359327658572713506436394950305398266455901763155656967588382754970977963428826597047130569008069898010231138382295801512164438959142296460583583243816957633761514783228787256224027016384065871420783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ngaitahu.iwi.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.ngaitahu.iwi.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaitahu.iwi.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaitahu.iwi.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fae4f9b05c9cc2b03330679ca54fcc8aec38c367f2c568ffe943cda97bef07e10c8ff2829b5d2744b13529bb6f7ef6f577241026c3826c8c411bd2d48b302588856326f5ed804e2136ad5bdbd99b52f1d39e26466af1661edb03bad9fc1434cb4cb463a0bb9e1c9c9875cc7be6b0fc28c831c093617868402e2d9e353f6ac2292b9f841aa1666e6d91c834219b0a48b557991c1e01422186b4854022ed392db44eaf67ab06fc498f0c2e4d478f5b69df5acc2b615591d5265d4f4f4bd8b741c2720ef6c3a114449a1c3fbb85780a3de3b60a9bb44eb6e10602dd61eb0f7fc6f784d295cab7631c555b99b1f1beaaf0f3c424bfa4867fc545ae09398c05e596c