newspaperarchives.uhcc.govt.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:97:64:6a:08:41:31:d2:77:8b:b0:4b:f4:f4:05:fd:51:9c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newspaperarchives.uhcc.govt.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:64:6a:08:41:31:d2:77:8b:b0:4b:f4:f4:05:fd:51:9c
Serial Number (int): 399965254482572717445566491390855396282780
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:0b:94:50:48:6d:c5:99:3e:bd:0a:89:f0:e8:f9:90:0e:c8:f8:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:8e:65:e8:4a:e8:0e:3c:6e:ef:94:b1:aa:1f:ff:e2:ba:ae:1a:1e
Fingerprint (sha256): 17:95:66:f9:f5:9e:a0:50:12:bf:2d:cb:12:16:85:48:89:8e:f1:51:5f:05:17:74:f0:09:6a:fd:41:59:d8:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newspaperarchives.uhcc.govt.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newspaperarchives.uhcc.govt.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newspaperarchives.uhcc.govt.nz
upperhutt.dlconsulting.com

Other certificates including the domain name uhcc.govt.nz

(limited to 100 certificates)
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
eservices.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
jatheon.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
*.uhcc.govt.nz
jatheon.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
*.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
jatheon.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
*.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz

Certificate

The complete raw certificate details for newspaperarchives.uhcc.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNWlvkNTS4X+AQDkZ1/5
upCzSMees6I9iTQCFnFqnLJ14pENKBTAtKtdWAYUEEdR1xRwkgEDP5D/T2YRahmY
eD+OrfKKEpXpahKMPpa581+Llq8/2DEBF7+RoXbTv7lM27gdddNMt4XsvHNjTcPQ
2cbgk7Am1hG18oavGchs2o9ZBrBSqs/NYpzT8UFzCrG1jzimpBYwZAfcQEYc9c6c
B/gXNj11QUV+mgpaRH3XyFxPXqedkTTR0FVeTWjav+2bqzyXSB7E+yAFC0LSkRsb
NdMmbrQ5k5nnuKtFgu7vE2LlMOXo5Yi3I69EB85fJocHO8jiz5X+6AWarXi1KhnA
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399965254482572717445566491390855396282780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 12:09:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 12:09:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newspaperarchives.uhcc.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24343108029979924192393448479625518786699535406725790659337261502641084330896766683419864512426209845105026221097023532284981673655815226120335205196935854168767979670033573397832264485161778227768406329153688466459818292046033699964172054202239599563211460024544513302617923156306391251763484550978479638038422345492636607854458379379561266885739547091933012924465481623803807052536471903704170358020485261423150907083157132761348039265238916811214040002505093484281193675808476450877686345221634095514810482297794097697825028830779354577057854091339462082783931211488262405815413801726850184166353784124119547756677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd0b9450486dc5993ebd0a89f0e8f9900ec8f87f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newspaperarchives.uhcc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhutt.dlconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001714a75accb000004030046304402205ba7e36ba3350af88d5598c56bff77eeba3c5a0e9c7ff83808ad909a2995cca202202312b4ca3865357bec5bd62f5544d4ec745056aac5c9b86eb1e1712bad3015a400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714a75acfc000004030047304502205f36e9ad66fe7e591052c139d9d3a326ee8475245be654d2e44d13c4923a41370221009f8d679df040c86278b2bafdcb47dc4cb1c3dfd448e208e936142c896b5ec55a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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