webxperts.co.nz
Issued by R3
About this certificate
This digital certificate with serial number 03:d6:c8:0c:5b:5d:a2:c2:99:dc:89:63:e3:50:de:8d:9c:9c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=webxperts.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:d6:c8:0c:5b:5d:a2:c2:99:dc:89:63:e3:50:de:8d:9c:9cSerial Number (int): 334423194076198721589465078972215345388700
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 64:9c:b6:83:58:e4:cb:ca:75:e3:47:93:25:aa:b2:84:b9:f4:13:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0b:c3:3f:bd:58:f0:39:26:2d:de:5b:60:72:ef:1b:a9:0d:ab:3a:ef
Fingerprint (sha256): 23:c0:42:d2:9f:ee:57:de:4b:d8:17:bb:dd:9d:67:99:d6:39:cd:cc:7a:8f:f0:91:3a:27:dd:91:38:d9:99:f6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate webxperts.co.nz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webxperts.co.nz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webxperts.co.nz
www.webxperts.co.nz
www.webxperts.co.nz
Other certificates including the domain name webxperts.co.nz
(limited to 100 certificates)
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
www.industrialoptics.webxperts.co.nz
webxperts.co.nz
pureblissthaimassage.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
windowfilmgroupnewplymouth.co.nz
www.windsorgaragedoorswellington.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.active-electrical.co.nz
www.webxperts.co.nz
alexandraminibuses.webxperts.co.nz
afterschoolcarewellington.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
www.industrialoptics.webxperts.co.nz
webxperts.co.nz
pureblissthaimassage.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
windowfilmgroupnewplymouth.co.nz
www.windsorgaragedoorswellington.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.active-electrical.co.nz
www.webxperts.co.nz
alexandraminibuses.webxperts.co.nz
afterschoolcarewellington.webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
webxperts.co.nz
www.webxperts.co.nz
webxperts.co.nz
Certificate
The complete raw certificate details for webxperts.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISA9bIDFtdosKZ3Ilj41DejZycMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcwMjI0MTlaFw0yNDA3MjYwMjI0MThaMBoxGDAWBgNVBAMT D3dlYnhwZXJ0cy5jby5uejCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AMQcHm7CKhD8J9xbouDv4Y6QwDv+tz1IlX/35OU0TlSHESUL0ud6PSZvexBEtqrZ 0mS1C19wdy2FGu2lxTJf7rjiZLU+EgSO81QM6DuboHlICVOHtCrakP7hRViq4+/T ryDLWLucVyy4B5jR7wlj8etGMXmJnq/TRPACuidVioA41wDjn2NitTNen6BFvLsd uXHYyxQOsAYRPmg+ZzZfFJ3EDbRtOpE9AUYJCMbjDx3YoqSuR+K7RB9l3qI+kjlN wHQHa79Xc3KIirSs3DbKBDpRdK3KlAtpLNsIP4J6H5XI8sGhmREXCKJN/Xub72YR ZmDQhfg6wKuZSMcuXmNYOmPgNvvBTVXLH/S0RFyCmlLPNg+CqeeowgyFCDhGp/74 DqAB2Rks7X7mXWZYDmc/Vc1dmzxSzyEa3jnJE3HIMOXM1SjgzxnxQS2iewwMH4iH dlOPl34uoZwjeAHLJO+s5ZdjPe7T+ZRedC42Q7OLZgL8YcTaBfheFawf11vLwBBF 7AOIYPFV1aRgVEfTqzxvWYLZhAyA0vac7HGEGfEeIy9n5hj7Ye1CVZa6tFhiQEe6 xPFMh6LvYMZb7kePsw8RZehGNlVU2A+4kdJKBokTIV+90RbS3bDa+XosIqQ/pq+O FmL2JY29iJIqY+q8xyw2RkPepK1/6JXcjsjm4bErREeXAgMBAAGjggIlMIICITAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFGSctoNY5MvKdeNHkyWqsoS59BPGMB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD3dlYnhwZXJ0cy5jby5ueoIT d3d3LndlYnhwZXJ0cy5jby5uejATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs +GRuAAABjx2VEAoAAAQDAEYwRAIgHdawerdjuGW6V7NQKMPQEsp0fucpqn0KB60f DIJ+gQYCIEKPGVtlih/k8Xk+bApPQQ9UTHxhfkoYmQmZBEYhPlBpAHYA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGPHZUQBgAABAMARzBFAiAI+IlM bvMb+A7qWPLCPFEDfuC/pueONCEFNm+DKRriJQIhAIOo1Pi8BfQgJQs4xzoAUpbC 4Wi2X99bzsmZeGJtnuGKMA0GCSqGSIb3DQEBCwUAA4IBAQCswJATvOSQkKxKxywG UMPFFT9t52wUKfDVQhTwek1VxRb05kpRDxvhiUhfU7Sz0QkPZpfDF/Ino92rYvq0 E5L1A1jqQvYd1gWVVDAyYd7TJKDlLuJsq3WSqBCaavEfeWkJLyi6vK5C4JkY3yqt 7suin0GtrIfmSEGQTjN/eiF56SqDxYzzqQ8hXMLAPHhmo3z1oPcLjtJH8LKD89mr TJjeL3rSWlj3ON9QjcOgpTvl6MQ3iLGPvDK59vgW2rNpoywxlmpYLamlQ550ZDCG wmo3j1hTneXrXG80MuvbLKtZaRuyZ578nWpl85v6Jfs02svLqAWufB9GYTcPQdgY GyyW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxBwebsIqEPwn3Fui4O/h jpDAO/63PUiVf/fk5TROVIcRJQvS53o9Jm97EES2qtnSZLULX3B3LYUa7aXFMl/u uOJktT4SBI7zVAzoO5ugeUgJU4e0KtqQ/uFFWKrj79OvIMtYu5xXLLgHmNHvCWPx 60YxeYmer9NE8AK6J1WKgDjXAOOfY2K1M16foEW8ux25cdjLFA6wBhE+aD5nNl8U ncQNtG06kT0BRgkIxuMPHdiipK5H4rtEH2Xeoj6SOU3AdAdrv1dzcoiKtKzcNsoE OlF0rcqUC2ks2wg/gnoflcjywaGZERcIok39e5vvZhFmYNCF+DrAq5lIxy5eY1g6 Y+A2+8FNVcsf9LREXIKaUs82D4Kp56jCDIUIOEan/vgOoAHZGSztfuZdZlgOZz9V zV2bPFLPIRreOckTccgw5czVKODPGfFBLaJ7DAwfiId2U4+Xfi6hnCN4Acsk76zl l2M97tP5lF50LjZDs4tmAvxhxNoF+F4VrB/XW8vAEEXsA4hg8VXVpGBUR9OrPG9Z gtmEDIDS9pzscYQZ8R4jL2fmGPth7UJVlrq0WGJAR7rE8UyHou9gxlvuR4+zDxFl 6EY2VVTYD7iR0koGiRMhX73RFtLdsNr5eiwipD+mr44WYvYljb2Ikipj6rzHLDZG Q96krX/oldyOyObhsStER5cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334423194076198721589465078972215345388700 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 02:24:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 02:24:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webxperts.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800058342847394130075183051330772001222303386528115686323889901494831611608642448824699491162653673112493056457707485203571990331769464514567557050893530082582384010048180235355715271606643680839137310107100970036803552256424241111698121143651662130776025084269468632734924580836223918283209300539589796883478400984685599977467854061269408354985840946440143512036576321237801311356420379084719979176737653118485494032165094905605077958361560246459954510843581538315200006868494924700941338360938495381234246800004368817664034392762468034074409047976396731963538902901910123413632194167247833781630860566194574386479543561252614154688931244758586904894471678303035343798286630831877635608204719417857096666871730878479703015274323790009830264440729781995139148941534877535325087732737271223402089948055292097747489329509879414482373646701753350628204693178456146363734902480518973936044479985003019613666190933026675360458424983612554357050840764354049582769211570513796285116979394659297428384602086247930715368103880784841973746708523908248881237969841728276746172138060230364014995496490264634719781149888344629423820645835806379860808386166650785988769014915932320556175322789470490654302546482060147490409262411732738242154612631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 649cb68358e4cbca75e3479325aab284b9f413c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webxperts.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webxperts.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1d95100a000004030046304402201dd6b07ab763b865ba57b35028c3d012ca747ee729aa7d0a07ad1f0c827e81060220428f195b658a1fe4f1793e6c0a4f410f544c7c617e4a189909990446213e5069007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f1d9510060000040300473045022008f8894c6ef31bf80eea58f2c23c51037ee0bfa6e78e342105366f83291ae22502210083a8d4f8bc05f420250b38c73a005296c2e168b65fdf5bcec99978626d9ee18a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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