mycollege.stcuthberts.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:e9:8d:87:ce:99:03:b6:1f:2d:20:41:31:5f:55:49:8d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mycollege.stcuthberts.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:e9:8d:87:ce:99:03:b6:1f:2d:20:41:31:5f:55:49:8d
Serial Number (int): 283765656636510332538313143871413748582797
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:9d:95:df:f3:78:4f:bf:99:2f:ab:d1:69:bf:93:bd:77:05:dd:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:f1:66:1c:3b:d4:e8:59:49:d1:ae:89:2c:2f:3c:e5:fb:e1:2e:15
Fingerprint (sha256): 31:20:e5:39:61:5c:33:25:be:60:64:a3:aa:7b:c5:8f:84:bb:bf:7f:bc:b3:f1:ef:a9:2e:8d:31:44:7f:26:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mycollege.stcuthberts.school.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycollege.stcuthberts.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycollege.stcuthberts.school.nz
schoolbox.stcuthberts.school.nz

Other certificates including the domain name stcuthberts.school.nz

(limited to 100 certificates)
mycollege.stcuthberts.school.nz
stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
*.stcuthberts.school.nz
schoolbox-testserver.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
schoolboxdev.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
sni.cloudflaressl.com
ptlycert2.ptly.com
stcc-clearpass.stcuthberts.school.nz
idp.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
ptlycert4.ptly.com
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
sni.cloudflaressl.com
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz

Certificate

The complete raw certificate details for mycollege.stcuthberts.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m/IByGUr/7zv/Bykevl
9YSsUuTQ7KCbKLAwC3u7kbvUeZb3H683pEH8kr5kumyok2AgziCqZn1VB5jSThoL
mY9e5BDhUl3Y6bsMClvnPHyMMDGEL6Kvh/TM7C7DoqakSNgGQdrLJneFUO0ezjKt
/4rZcW+DP73BJSfgI4q8NrLFwdz2BqHXgneYOv8yYmYtBRUr3Y/DcRB9Z2wlm4eH
+ml03+/mxHQql0IT5lchzgpmuZydi3h/eNDSbgwXozr4juZDZmrvO92TICd/N8Fm
RPLw2ozUMaIxaTzu9kkfR/ChvikdHQAZoH6lro4b+F4L838kRfbXcSzyQDu0qprk
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283765656636510332538313143871413748582797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 15:15:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 15:15:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycollege.stcuthberts.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30099838024356983357233188051625747100058903193382383724746588779212651361602064293432164819493673098484117921940300866519490398600967611093022793015462197814007437342658383462254017544868816451482747714481185527103366130219351763087181088072987304029780119411447969105782924480189575116247021079951853846015462669688948778950063813931835418512582489630910483607749625028689102788405386108123748458739634187502771822673380625877554414874870278239932892091575386157793299457938452794533747970638272472359043537250564983042307459434878926379689821289990888207598983474884234344384401607283304541378015956785980377851079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							469d95dff3784fbf992fabd169bf93bd7705ddcf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycollege.stcuthberts.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolbox.stcuthberts.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e3732f3f3000004030047304502203ef256982c7fcb383643b6e14a5a09d8544c74d0782cf331e652ed242dd1a030022100eba042c25ad072eae497e22aec22eff6a1d754402c1ce1e41c84d64a2ca96dba00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e3732f41e0000040300483046022100b07239503907b738aade47e5b557f1d9f350f6b67c8abec0cb65d26d2f259fee022100e6023f9bb4693db58ff66fb150643d699dc0fc6f77a8387a4feac9f4ef2a6d73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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