subcontractor.shape.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:01:99:96:ac:2d:e5:74:d3:a5:a1:b3:5d:34:42:b0:ce:a5 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=subcontractor.shape.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:99:96:ac:2d:e5:74:d3:a5:a1:b3:5d:34:42:b0:ce:a5
Serial Number (int): 348993580314056529846005598517390824492709
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:b8:ed:f7:b9:88:30:da:d4:6a:63:dd:6a:3c:80:bf:ff:ea:66:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:78:fa:a0:76:ad:09:54:b3:af:c3:87:a4:85:9f:64:b9:24:0d:24
Fingerprint (sha256): 20:a0:2f:b6:fb:f6:27:76:33:08:9e:a5:04:b6:fc:df:b3:e1:28:0d:3c:0d:98:a8:06:a7:af:79:4b:85:8b:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate subcontractor.shape.com.au

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subcontractor.shape.com.au

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bot.shape.com.au
redirect.shape.com.au
redirect.shapegroup.com.au
resource.shape.com.au
resource.shapegroup.com.au
shapegroup.com.au
subcontractor.shape.com.au
subcontractor.shapegroup.com.au
webhook.shape.com.au
webservices.shape.com.au
webservices.shapegroup.com.au
www.experiencebetter.shape.com.au
www.resource.shape.com.au
www.shapegroup.com.au

Other certificates including the domain name shape.com.au

(limited to 100 certificates)
www.financesharedservices.navitas.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
123.shape.com.au
helpdesk.nswbar.asn.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
servicedesk.stjamescollege.qld.edu.au
helpdesk.arn.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
helpdesk.arn.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
servicedesk.atsichsbrisbane.org.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
*.shape.com.au
akamaisecure6.qualtrics.com
services.navitas.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
www.financeservices.navitas.com
*.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
akamaisecure6.qualtrics.com
mail.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
subcontractor.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for subcontractor.shape.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348993580314056529846005598517390824492709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 21:01:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 21:01:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subcontractor.shape.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3864580010529246122223441766314605417549406342617594276917000700672099200362155465716202927413953195631116259662176168737566207088427871313514259799065026539651365962485552551301983994346394507816217780774931781656303983169195849691139440346519121928262762434151979031164204267386257894454160550226583662573674118286409232336035882881945045312906481595145478761731538575885556125423073810745468464398773058669733999073295574508806919179892389495233140293424574355205724557186520473208592197402391784228910736091886105862449295409363597250440270472375424903801128098646085700800104951892057755234465047400136510416561853541672325525567908376805260552957253188291738154876698897701364020813831363323239526688775409471380801248252455727975524939220872766446455319077739616980486200373934253156169054641218669639740149285192521929735210255050711618973890251512602564936044258334461275083344827031700538402022256883136860011398971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1b8edf7b98830dad46a63dd6a3c80bfffea6630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subcontractor.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subcontractor.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencebetter.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resource.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shapegroup.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9f570a43000004030047304502201d02b469cab534eef487060abffb34d0cfc4cab6e257fd7b4f8fa57f5cf2aa55022100ed5a24d5000c317afd0523b652a7165b7356843d773ebc0857a6d978f551131c0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9f570b3100000403004730450221009a53fb62e17d7c237c81b994a69b4a6e969fd793d3ae3a1a44bdd5c335ce319202204dcef6b5b3018f36844074add799333591f5637d36c522802121bc4bd520818b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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