*.devint.neighbourly.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:08:d3:68:02:5f:70:fb:2c:bb:f0:5a:6b:e6:f5:65:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.devint.neighbourly.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:08:d3:68:02:5f:70:fb:2c:bb:f0:5a:6b:e6:f5:65:af
Serial Number (int): 328724497953788578647798984919016598234543
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:6b:fd:a4:93:a6:da:34:cd:a3:c6:68:8e:fb:20:7c:cf:ea:8c:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:2b:c6:36:62:99:e4:3e:6c:4a:e0:20:4f:87:77:20:c0:45:d2:0f
Fingerprint (sha256): 1d:cc:97:b1:e1:84:b3:bb:64:9d:98:56:23:06:46:dc:ad:3d:6b:fe:34:fc:74:ab:6a:3b:46:0d:3d:c8:7f:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.devint.neighbourly.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.devint.neighbourly.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.devint.neighbourly.co.nz

Other certificates including the domain name neighbourly.co.nz

(limited to 100 certificates)
cdn.nikolay.dev.neighbourly.co.nz
cdn.thai.dev.neighbourly.co.nz
kalamazooshopping.mlive.com
local.flamboroughreview.com
lb.preprod.dev.neighbourly.co.nz
local.theameryfreepress.com
local.panolawatchman.com
local.thefirsthundredmiles.com
*.neighbourly.co.nz
local.crestonnews.com
c3.shared.global.fastly.net
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.jimmy.dev.neighbourly.co.nz
cdn.inyoung.dev.neighbourly.co.nz
somni.neighbourly.co.nz
lb.oliver.dev.neighbourly.co.nz
local.thegazette.com
*.devint.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
shop.neighbourly.co.nz
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
*.neighbourly.co.nz
cognito.dev.neighbourly.co.nz
lb.stuff-coupon.oliver.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.summitdaily.com
local.alexcityoutlook.com
local.wahpetondailynews.com
local.pilotweb.aero
local.daily-chronicle.com
conroe.communityimpact.com
nor-west-news.origami.neighbourly.co.nz
lb.stuff-coupon.thai.dev.neighbourly.co.nz
peterborough.mykawartha.com
neighbourly.co.nz
c3.shared.global.fastly.net
lb.staging5.dev.neighbourly.co.nz
lb.anil.dev.neighbourly.co.nz
somni.neighbourly.co.nz
local.airgunshooting.co.uk
lb.karan.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.property-admin.dev.neighbourly.co.nz
auth.dev.neighbourly.co.nz
*.devint.neighbourly.co.nz
lb.stuff-coupon.staging.dev.neighbourly.co.nz
local.centraloregon.pamplinmedia.com
the-nelson-leader.origami.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
local.news-banner.com
flintshopping.mlive.com
local.ftimes.com
*.neighbourly.co.nz
local.dglobe.com
lb.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
c3.shared.global.fastly.net
*.neighbourly.co.nz
western-leader.origami.neighbourly.co.nz
lb.neighbourly-user-data.oliver.dev.neighbourly.co.nz
cdn.preprod.dev.neighbourly.co.nz
portperry.durhamregion.com
shop.neighbourly.co.nz
c3.shared.global.fastly.net
local.willcoxrangenews.com
tomball.communityimpact.com
*.neighbourly.co.nz
api.user-data.neighbourly.co.nz
cdn.stuff-coupon.staging.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
georgina.yorkregion.com
cdn.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.ottawasun.com
shop.neighbourly.co.nz
newhomes.yorkregion.com
lb.jeremy.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.dev.neighbourly.co.nz
local.hertsad.co.uk
lb.shershad-property.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.neighbourly.co.nz
cdn.rafik.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
*.neighbourly.co.nz
lb.jennie.dev.neighbourly.co.nz
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
c3.shared.global.fastly.net
whangarei-leader.origami.neighbourly.co.nz
local.wisbechstandard.co.uk
somni.neighbourly.co.nz
cdn.staging4.dev.neighbourly.co.nz
local.moodycountyenterprise.com

Certificate

The complete raw certificate details for *.devint.neighbourly.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+e5KHdihHQ3qvdCD/Q+
xADNJqJhHe3Dmi2WNgG9OruAqQZVtJkpJP/Sx8IgdU947Tk4s5QvCEGMJh4jnweB
E/X8kirlHp4gIJAIMWBd2cQJ8kCHoITcce2gmlYgtsqqCWmjh2w2VuwID2CZbnY9
NvGFYBi/GfWBKr8/B9GdOQ0GqrKFE3P9+zgIKZPtkKzN9j+xbTNfVz1Cz1Uxk4ZX
vQ1oYRVj8ZwEx+w+1mFJMpBNx2PL5IdwkEVK8nKX/FjPgytWCSTAEjYhyP8vt5BZ
aP7IJF3uB8bQUZFJWaaYm/rYVn//+kXXxBS8SCR9mLSbVQ8sl7SuMj/kKNokJLaF
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328724497953788578647798984919016598234543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 15:26:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 15:26:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.devint.neighbourly.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23720830033712639398521002099513371285619788181204760484263875894229219586828468547851311498935399563353957512765831381329186291820564462718784237427420283890979480111633659149363422454551845298671679156058521183656111430457776349528337737569444101419849439513614358479297784164527105498293087223842040244404898011787889476068382196329369520426183320545188519929414645048167051859089445088491547783530513874768511425439624297077350559871124902764059804213114561532401559801990004829516187629217245420038008177712880737127734742586680293744440399930079457492610362109096871266765392708534459286440880220362500228941271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd6bfda493a6da34cda3c6688efb207ccfea8c23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devint.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9fa2412d0000040300473045022100ff68c54ddefec77ecfd33d710c3bd42514a14af12045398352207a953b3e23c802205b0cda0db1926da1fe63f1dc420b41cad307fd3a379bc035724b50df4072ab7300770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9fa241180000040300483046022100fbb55d2d05e44016926b1b40e5826cfd534a6b833e304a9ef4034017964f088c022100c9cf2216c621b2a98a320c356ac119aba8fb8e367a6593e3b5eabf38b9b7643a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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