nz.easystart.slightlydifferent.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:aa:f3:1d:91:08:bb:c6:9a:2b:aa:ec:ca:8c:f9:77:15 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nz.easystart.slightlydifferent.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:aa:f3:1d:91:08:bb:c6:9a:2b:aa:ec:ca:8c:f9:77:15
Serial Number (int): 317370397057415372566918632962188648216341
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:31:47:ec:75:af:8f:7e:95:33:d2:fc:32:97:e1:f1:a8:c9:a2:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:5a:df:d1:80:0c:09:0e:0d:25:5a:4b:f0:d3:cc:6d:c2:dd:37:3d
Fingerprint (sha256): 43:0a:9a:d9:d2:ba:cf:26:30:1e:c0:8e:28:67:b0:17:70:de:c2:52:09:e3:a0:f7:97:ce:09:7d:ab:a8:0f:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nz.easystart.slightlydifferent.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nz.easystart.slightlydifferent.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nz.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz

Other certificates including the domain name slightlydifferent.co.nz

(limited to 100 certificates)
uk.prostart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
www.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
*.nz.webeasy.slightlydifferent.co.nz
uniquelynelson.nz
www.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
delaware.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uniquelynelson.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
my.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
o2bhealthy.co.nz
o2bhealthy.co.nz
delaware.slightlydifferent.co.nz
slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
medifoodsdb.slightlydifferent.co.nz
www.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
my.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
techstatus.solano.edu
status.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
delaware.slightlydifferent.co.nz
*.dnsadmin.slightlydifferent.co.nz
www.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.webeasy.slightlydifferent.co.nz
uniquely.dev.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
slightlydifferent.co.nz
uniquelynelson.nz
*.dev.slightlydifferent.co.nz
o2bhealthy.co.nz
status.slightlydifferent.co.nz
monitoring.carletoninc.com
uniquely.dev.slightlydifferent.co.nz
mars.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
slightlydifferent.co.nz
status.aiacontracts.com
nz.webeasy.slightlydifferent.co.nz
o2bhealthy.co.nz
www.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
dev.slightlydifferent.co.nz
status.reversinglabs.com
uk.easystart.slightlydifferent.co.nz
*.nz.easystart.slightlydifferent.co.nz
slightlydifferent.co.nz
slightlydifferent.co.nz
uniquelynelson.nz
nz.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
www.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uniquely.dev.slightlydifferent.co.nz
slightlydifferent.co.nz
service-status.jola.co.uk
nz.easystart.slightlydifferent.co.nz
uk.easystart.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
nz.easystart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
status.slightlydifferent.co.nz
www.slightlydifferent.co.nz
uk.prostart.slightlydifferent.co.nz
my.slightlydifferent.co.nz
slightlydifferent.co.nz
www.slightlydifferent.co.nz

Certificate

The complete raw certificate details for nz.easystart.slightlydifferent.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317370397057415372566918632962188648216341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 21:12:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 21:12:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nz.easystart.slightlydifferent.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966385773017520926439772075087796432390595745736545898062937735373687029286934999809995007973377113322117593587849708041936468336566027154928116579807479482254077579342510256145529816053954963998210109205342644335396028763592614455507784035104246518756149624522422141441384834653995936443960781915508043043239937360523160458061903082622740062035708384246596568694008234342761269678661212879371598642331498058133442144390634269805409459880326570222634583228589193113343367060848658235269963570225053504785293754336433225083212820550996633687715536630836480004093037227762078784126841242079215434133317823747779847737497907807476118457478839713290265047341185976164030343355693272040469105421568188691611608878769859657476044118555628082732770190234667500044110140158187266681558800834459907534875519971399090902593093107329155650817629443040109163840560886238598840100721519328534899364698904241072072362414851998701237089319646760741056659707175986558130628752851512834865572565510888830180054782856676384460696526794769286087420080344651874826175497628470280045227663861495078807279334149101328658557597231502548188580412742462463096631453538079891757232040491379896513965657496915270550970591555307788020867117920784425035129064029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							253147ec75af8f7e9533d2fc3297e1f1a8c9a271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nz.easystart.slightlydifferent.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.easystart.slightlydifferent.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b0ff3a14a0000040300473045022100eb0600b59f52c1084055f0c7007a9b02e6c75721c54c8750222f1c0ad227ec0b0220655fcb07b0478f69a4ed30121e3da9f2e42007020f4e48bc0c485c6dd8cef012007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b0ff3a16a000004030047304502200b1c52781a55a8265efc8feb81144b34c17a1202a528cdca4027d72195e7b07802210088c7ee4382bf24208ae0ce2ca6e4d477883fd0e875d80a367c82fc760a409a51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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