www.surfcitycranes.com.au

Issued by R10

About this certificate

This digital certificate with serial number 04:86:a4:d1:63:fc:68:51:90:58:c7:1d:46:5b:c2:76:92:0f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.surfcitycranes.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:86:a4:d1:63:fc:68:51:90:58:c7:1d:46:5b:c2:76:92:0f
Serial Number (int): 394266061503755233433499611067130995708431
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:ef:3d:0c:7d:3e:2f:72:df:79:af:68:4e:6a:68:46:6c:f2:73:88
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): e7:1d:e7:05:70:c3:91:49:48:4e:24:96:57:4c:03:16:2d:da:97:0d
Fingerprint (sha256): 1a:e1:2c:bc:79:c9:61:90:a2:ce:5e:5e:d3:4a:48:b6:3c:8a:08:90:80:99:d3:d6:f5:14:4a:ef:7b:af:b3:20

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate www.surfcitycranes.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.surfcitycranes.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

surfcitycranes.com.au
www.surfcitycranes.com.au

Other certificates including the domain name surfcitycranes.com.au

(limited to 100 certificates)
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
remote.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
remote.surfcitycranes.com.au
www.surfcitycranes.com.au

Certificate

The complete raw certificate details for www.surfcitycranes.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISBIak0WP8aFGQWMcdRlvCdpIPMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjIxMDk0MjA5WhcNMjQwOTE5MDk0MjA4WjAkMSIwIAYDVQQD
Exl3d3cuc3VyZmNpdHljcmFuZXMuY29tLmF1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxubQYBB9XrgONP3G22V0NQSaVr56k0uVtwmKjhkWqIMUBlCL
/MTAdXt0x0XciZaAiLXBtBlwm4d8Bb+DLjrWmA9iX4i9zfUYiEteZVSIGLW7uPmV
Wjvbrvbu24hU14vd6TADqJOpMS0P4sZDWHd7iAZ0nRKJtWLSLPN5X1xi7KyPyY9E
yRcFqrgvw2y2Y2kWhENgeQPaLTo9aOjfPCYAS/vIHHCe9miz/vZ0WHsnw1QgUkLV
7TafIPd3CCzaicqbWb0O3EGQMQbCYv29bSslPpKjEnzlOPVxnelXChXTzoKtaDG+
eZAGEmj4ob4IrklTtw+q7Y1J3SOl3kL2Ahg7ywIDAQABo4ICNDCCAjAwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQN7z0MfT4vct95r2hOamhGbPJziDAfBgNVHSMEGDAW
gBS7vMNHpeS8qcbDpHIMEI2iNeHI6DBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUH
MAGGFmh0dHA6Ly9yMTAuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9y
MTAuaS5sZW5jci5vcmcvMDsGA1UdEQQ0MDKCFXN1cmZjaXR5Y3JhbmVzLmNvbS5h
dYIZd3d3LnN1cmZjaXR5Y3JhbmVzLmNvbS5hdTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABkDpjrS0AAAQDAEYwRAIgM7/9yJ0Cn4oBLzH7WLRQ8zqo
rI0lLq6TtwvuRXNSRzICIFx92H/G1OF9g3Vp3ODtXTs5+9Hcqp6S3UngkyjQQdYQ
AHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGQOmOtNgAABAMA
SDBGAiEAi0AN76M5O23AHfJk2OWZrHl1bJUje0IAG+zBBAkFS/wCIQCSSL9izZAJ
GsUVyv9soKaPa3w0RrCEgU0zxJm71ZGcPjANBgkqhkiG9w0BAQsFAAOCAQEAd9Y8
EQ5sM0McQErZAWg9OKmTEkkYLVd+s1zZOmVLxn9kJInqQCVWmyp1Xt6ASqvdfTNi
Gzla76qDvf+UUGyxI+EKFP0yfV0L2bYjry0Mrmd77zzRHQyzT973p/e9m+ivSR/B
0lNX4rOwLkKg89eYEGSJjl3Snuzbg0rYwKpSzDmVbl57LqbbJJ8fzOOOTxiTtKvG
8CLroTO7ZmxNinMjtIUEVeC6js9nyx147I1/N/t6Jhx/0HwplxUQgWXu+iDa5Cga
RtDW+7ziwmigEnbEGKkiowD57ViBP2BVgD64tY/MYuV86KcAAur/ekwB9xMH5akF
9yW6xt89mBa06ZE83w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxubQYBB9XrgONP3G22V0
NQSaVr56k0uVtwmKjhkWqIMUBlCL/MTAdXt0x0XciZaAiLXBtBlwm4d8Bb+DLjrW
mA9iX4i9zfUYiEteZVSIGLW7uPmVWjvbrvbu24hU14vd6TADqJOpMS0P4sZDWHd7
iAZ0nRKJtWLSLPN5X1xi7KyPyY9EyRcFqrgvw2y2Y2kWhENgeQPaLTo9aOjfPCYA
S/vIHHCe9miz/vZ0WHsnw1QgUkLV7TafIPd3CCzaicqbWb0O3EGQMQbCYv29bSsl
PpKjEnzlOPVxnelXChXTzoKtaDG+eZAGEmj4ob4IrklTtw+q7Y1J3SOl3kL2Ahg7
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394266061503755233433499611067130995708431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 09:42:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-19 09:42:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.surfcitycranes.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25109002991906347710202326576913328379245472797307960449103543504091495508871688479053701387930378256477083207943443809964629907582731765089805657612048810743196318905562142024738781881036814219743473488776274573236748428467329545038061325796599979898176559386748831480819854515035863219802723799734679576977512171315665709473980821216448246170707068176663318965590467552932483933291883927940557139310716319707464732347435484463715357383149185791775110052963543846526501394353116766579931720431740427608860956404343792343630636353643180191059013483578792027053632299206403362293178241309283633222479220248156023831499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0def3d0c7d3e2f72df79af684e6a68466cf27388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfcitycranes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfcitycranes.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001903a63ad2d0000040300463044022033bffdc89d029f8a012f31fb58b450f33aa8ac8d252eae93b70bee457352473202205c7dd87fc6d4e17d837569dce0ed5d3b39fbd1dcaa9e92dd49e09328d041d6100077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001903a63ad3600000403004830460221008b400defa3393b6dc01df264d8e599ac79756c95237b42001becc10409054bfc0221009248bf62cd90091ac515caff6ca0a68f6b7c3446b084814d33c499bbd5919c3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077d63c110e6c33431c404ad901683d38a9931249182d577eb35cd93a654bc67f642489ea4025569b2a755ede804aabdd7d33621b395aefaa83bdff94506cb123e10a14fd327d5d0bd9b623af2d0cae677bef3cd11d0cb34fdef7a7f7bd9be8af491fc1d25357e2b3b02e42a0f3d7981064898e5dd29eecdb834ad8c0aa52cc39956e5e7b2ea6db249f1fcce38e4f1893b4abc6f022eba133bb666c4d8a7323b4850455e0ba8ecf67cb1d78ec8d7f37fb7a261c7fd07c299715108165eefa20dae4281a46d0d6fbbce2c268a01276c418a922a300f9ed58813f6055803eb8b58fcc62e57ce8a70002eaff7a4c01f71307e5a905f725bac6df3d9816b4e9913cdf