kiwischools.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:83:ba:05:0b:91:23:51:43:a7:d8:03:94:96:0e:b9:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kiwischools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:83:ba:05:0b:91:23:51:43:a7:d8:03:94:96:0e:b9:b8
Serial Number (int): 341818591125614204603020164025076505557432
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:6e:f2:7a:a4:f3:94:51:ea:5f:e7:30:6d:03:97:ba:a6:50:99:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:74:8a:e3:59:3b:06:57:a4:cf:ca:ad:c7:49:12:18:15:f8:09:12
Fingerprint (sha256): 3b:fd:af:24:27:7a:3f:11:c4:75:4b:0e:6a:48:d8:44:a0:d8:b9:7f:e5:ef:6a:d8:3d:37:12:8d:b1:b4:a4:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kiwischools.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiwischools.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiwischools.com

Other certificates including the domain name kiwischools.com

(limited to 100 certificates)
*.kiwischools.com
kiwischools5.kiwischools.com
kiwischools.com
otahuhu.kiwischools.com
boulcott.kiwischools.com
greenhithe.school.nz
kevins.kiwischools.com
tamaki.kiwischools.com
tekuraowaikare.school.nz
kiwischools.com
kiwischools.com
boulcott.kiwischools.com
sunnyvale.kiwischools.com
dannevirkesouth.kiwischools.com
kiwischools.com
maristhb.kiwischools.com
kiwischools.com
raivalley.kiwischools.com
otahuhuint.kiwischools.com
wrm.kiwischools.com
kiwischools.com
kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
kiwischools.com
kiwischools.com
otahuhuint.kiwischools.com
kiwischools.com
kiwischools3.kiwischools.com
peps.school.nz
matangi.kiwischools.com
balfour.kiwischools.com
pakurangaheights.kiwischools.com
ridgeview.kiwischools.com
leabank.kiwischools.com
jireh.school.nz
awahou.kiwischools.com
tokanui.kiwischools.com
demo.kiwischools.com
jireh.school.nz
kiwischools.com
*.kiwischools.com
balfour.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kiwischools.com
*.kiwischools.com
kiwischools.com
kiwischools.co.nz
kiwischools.com
tikokino.kiwischools.com
kiwischools.com
kiwischools.com
peps.kiwischools.com
manurewasouth.school.nz
kiwischools.com
*.kiwischools.com
dairyflat.kiwischools.com
tokanui.school.nz
greytown1.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
birkdalenorth.kiwischools.com
balfour.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
manurewawest.kiwischools.com
stanhope.kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
*.kiwischools.com
kiwischools.com
whenuapai1.kiwischools.com
ridgeview.school.nz
ruahine.kiwischools.com
kiwischools.com
manurewasouth.kiwischools.com
kiwischools.co.nz
ngakonui.kiwischools.com
kiwischools.com
matangi2.kiwischools.com
birkdalenorth.kiwischools.com
kiwischools.com
kiwischools.co.nz
tekuraowaikare.kiwischools.com
whitikahu.kiwischools.com
kiwischools.com
peps.kiwischools.com
whenuapai1.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kevins.kiwischools.com

Certificate

The complete raw certificate details for kiwischools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341818591125614204603020164025076505557432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 10:03:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 10:03:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiwischools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706165169119919230202137034096998474688406209018146104910414246727417726237160501438142594591978611329387798112257689120853058676042030137575609113449368381871545195749374259723216259051171420067452589383625932046678038165154098704888369404463784510362006640581610137726529392611736314978461003390031829434757101325452322355171650117598657515282650451185542465246336442915089815065099645332317994900637476470457768794076596872705119570350433766216124323938052912604062361962974179527512409214821062522170443894484144226270413314362673482793935771955706079203229832122341262678993767417757382497608745681977624748536576749050774755302908450100760968292822584631469544234896549146477015263829323219387840028258363397530388103394688213306842642671269627635893285370503858845531138127330355216272223781934567832934006463468690158169049062150466018912284706348046835646963147945024412941844084048989390666767231421648871882109371814675041838958564950023414105251298320356750860133368814391798183627448402151548623331596472244404604480596787753255037037231046820301277876919759370353272315394203702178739166436637707426855765099951179439293250437639802607736196398769594626798950183498353925359572277256233688108917027727822584277012623471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a36ef27aa4f39451ea5fe7306d0397baa6509914
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c062663fd0000040300483046022100fbe19dde6c297fc46a27a6945e51e95aa27b54d5240efd6b742977d0ba42f03b022100bcd26271b6bca72b7a6c3e6bf67d4d3da995b4b20f509d707542e7632e0aaa0b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c062665e900000403004730450221009996aa9f9e9a71f5d4b984b1f1da144d030dc9d6ed7e18bc96b13771c38ad24b0220589df604c1bb72aabfe43ee8f3ff4cfd7d9e84da216954bb08eca1ece866d292
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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