centraltesting.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:57:66:7d:d8:67:72:8c:29:2c:fd:39:95:98:3d:88:d8:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=centraltesting.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:66:7d:d8:67:72:8c:29:2c:fd:39:95:98:3d:88:d8:2c
Serial Number (int): 378189944331036437043210290536289661409324
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:58:c5:a7:fe:1e:2d:00:a6:05:ca:50:20:ee:e2:d5:55:93:33:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:f2:ed:5c:ec:3d:eb:4a:5f:aa:9f:5b:d6:fd:06:b3:d2:b3:11:08
Fingerprint (sha256): 1c:c3:63:5f:a9:a3:94:68:be:ff:0c:a7:fc:82:8a:ac:18:48:8b:69:f5:c7:50:0a:01:73:22:7b:35:64:c8:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate centraltesting.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for centraltesting.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.centraltesting.co.nz
centraltesting.co.nz

Other certificates including the domain name centraltesting.co.nz

(limited to 100 certificates)
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
www.centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
www.centraltesting.co.nz
www.centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz
centraltesting.co.nz

Certificate

The complete raw certificate details for centraltesting.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/G08Sh1aSHvAcFGvMcu
gRcgLU4IPRF/D0SsFswpyE4IcbqhT8eNlH2NA48KIzzz9qq0hZ9PFinoNM9v/N9n
ymKeM4R6b8ZrDCLgt2DXncLoaOtctU57qoOHMY9glBfOnDXJSY0Tz2yGAYhhiXfW
8L/hUyJEyO3IdnSwVabSSG0BWLfgv14gsp3a8h/GGdyIz1nEntQYTqPpLcCu5/u5
NyTyu3n89Pm1PKgWiwR4pgP39jY3NmlgtL4WHuj6oce9c/+Vm4Do4LUcogGYvWn6
DGCJwwk88hqOSEm9m3jf7bL46413/W9YZs9uEx6zuPX+WBsda2pLt21nk2VCzgyN
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378189944331036437043210290536289661409324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 12:25:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 12:25:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'centraltesting.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27260425635414125975069305078042527357960336276447528629963175211314713898615534487740617095231579611339175583834328211874889037376889876973171044310361254921455871905634605348335200392424834379025348613932034430318993279155865570796880145548819424003075420031602564123464916612502440410269904266714943622848775963273561972204798124956958494422016329589672908900307046847349788877481041917484446926449893670072731824710009542086482584554821625722467565608254697584368533137915476401675331950198904166302981225778938755599912630320846722226794647228617587411414088422229906809986154849183503896305162958119069064924479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b58c5a7fe1e2d00a605ca5020eee2d5559333d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centraltesting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centraltesting.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a2292365f0000040300483046022100ddb7a3b7ad6ade88442e6f4aa87ac575486a6b8dff13422c1554c40dcf54e27a022100dd4e83d8cabca9c5304aabdacd5f9f4d0364813169f1d4c9511792720f0a84130077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2292366f0000040300483046022100f42bcbcc604cd149860d377ef69f6432507affd036072ff7548b86d68f3bc9fe022100923a9db3e3bf354a8edac44c180c591c475067039af1d2efd870859fad540562
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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