ashbyconsulting.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:e9:d2:66:2f:6f:1a:b9:28:b8:08:45:e7:80:5a:63:fb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ashbyconsulting.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:e9:d2:66:2f:6f:1a:b9:28:b8:08:45:e7:80:5a:63:fb
Serial Number (int): 313710862512106390915147808306232301347835
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:24:65:85:2a:3c:db:01:a3:25:b6:05:d8:3c:1c:4f:22:b8:8b:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:21:38:c1:93:db:f5:78:85:9e:41:7d:97:72:c1:eb:d4:79:a0:76
Fingerprint (sha256): 34:35:90:de:66:e3:b6:e9:e4:ce:a1:49:12:81:1e:50:88:2b:33:c9:0f:6d:59:ae:e4:63:b8:e5:f8:58:98:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ashbyconsulting.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ashbyconsulting.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashbyconsulting.co.nz
www.ashbyconsulting.co.nz

Other certificates including the domain name ashbyconsulting.co.nz

(limited to 100 certificates)
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz
ashbyconsulting.co.nz

Certificate

The complete raw certificate details for ashbyconsulting.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+9dIWywfLYz7gX2BbAy
AbVziH47oBxVRtKWnWwALzVdmVFsHxRQtf7+XcKumLV7eaPp2n6GCzf11K+OwHx9
ZmYtB1NkdBBUqctamsBenOAU10M1I8ZoXZc3wuXYeb/WhUL3+sH3VW0c934J9XLA
im0IW51yEeer8VsFTumszgXHd2X/GjKaQ7yPlE4mhukSov22o0fdo1DS1LzRgG6K
jCN45vdVwe8spczn1fm807IJFWL1fSKMAQZ3+ZywyRf+UVfgJdrM+/FrwxtL5We5
aG8xkJYpVvqSpCjqqr0I9cDfwgOFNgCKLkqFfW1EC5//le0Ru5jIHcOV4B0yRRCm
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313710862512106390915147808306232301347835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 17:15:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 17:15:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashbyconsulting.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23219644493476135526477592777191786220295708062198211687827853793477812048697046184596424071721539285231461063195889193765080791496684656862996182287535536082347518885996574506806125511926027560737758844358197326556848443022487602727185512486774688643394127105893503244881942033727444077112049357157882975586772514934244714887657022753859228882015875244048294316857089205967714918088595163294783341860596846137330491758574252518479843187104465573787398507904272788933683702477168832489772437256090331118827323564228639913858124896204130624458879272635796231414349273381405987956866028850859625806878131335058548631101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							812465852a3cdb01a325b605d83c1c4f22b88bba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashbyconsulting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashbyconsulting.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e568786a7000004030046304402204eb746eb2d5b9c5b9c5815232a6336e735bcd2a44a144b6f2600d60106bcbaca02206022b749d332b31fcd1a88163f5e98faaa7fd8993c169246b0cb7e00c3afe1fb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e568786da0000040300473045022100f561dbb6bd527dde5fd5486037a619a8695d998320373de389514e44afab237002206ee3eb074be6f43690a2848bf7107ea644621bc87e72bbeb80c659cae2aa59e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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