rosmini.school.nz

Issued by E1

About this certificate

This digital certificate with serial number 03:eb:48:01:93:d6:2e:d7:63:c3:63:7e:f5:9e:e6:c5:66:c0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rosmini.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:48:01:93:d6:2e:d7:63:c3:63:7e:f5:9e:e6:c5:66:c0
Serial Number (int): 341398926628178186546911119812786160756416
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:1f:d3:0b:5c:2d:5d:0b:ca:d6:80:3d:bd:68:0f:ab:06:e5:26:97
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac

Fingerprint (sha1): a3:c9:6c:ad:02:71:8b:f6:8c:86:b0:ab:83:b7:b4:1c:ce:f1:c0:22
Fingerprint (sha256): 45:80:f7:c5:46:c8:72:b6:d7:54:d2:a8:dc:a7:35:7c:4f:d1:fb:b3:dc:7f:76:e8:97:4a:04:5b:bf:65:4b:a5

Issuing Certificate URL: http://e1.i.lencr.org/

Revocation information

OCSP Server: http://e1.o.lencr.org

Check the revocation status for certificate rosmini.school.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosmini.school.nz

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rosmini.school.nz
rosmini.school.nz

Other certificates including the domain name rosmini.school.nz

(limited to 100 certificates)
portals.rosmini.school.nz
login.rosmini.school.nz
shop.rosmini.school.nz
shop.rosmini.school.nz
shop.rosmini.school.nz
www.diamondsportsnz.co.nz
portals.rosmini.school.nz
bowlsdunedin.co.nz
meeanee.school.nz
intranet.rosmini.school.nz
*.rosmini.school.nz
portals.rosmini.school.nz
intranet.rosmini.school.nz
rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
www.canterburybaseball.co.nz
*.rosmini.school.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
shop.rosmini.school.nz
shop.rosmini.school.nz
sni.cloudflaressl.com
rosmini.school.nz
portals.rosmini.school.nz
www.opotikicol.school.nz
portals.rosmini.school.nz
portals.rosmini.school.nz
intranet.rosmini.school.nz
shop.rosmini.school.nz
www.ophc.co.nz
www.akaranacityrifleclub.co.nz
distanceridingnewzealand.co.nz
parents.rosmini.school.nz
www.nzfootball.co.nz
portals.rosmini.school.nz
whangareirowingclub.org.nz
intranet.rosmini.school.nz
rosmini.school.nz
sni.cloudflaressl.com
shop.rosmini.school.nz
stem.rosmini.school.nz
*.rosmini.school.nz
shop.rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
www.pukekohesoftball.co.nz
*.rosmini.school.nz
www.rosmini.school.nz
manurewamets.co.nz
stem.rosmini.school.nz
www.rosmini.school.nz
shop.rosmini.school.nz
*.rosmini.school.nz
stem.rosmini.school.nz
intranet.rosmini.school.nz
portals.rosmini.school.nz
canterburybaseball.co.nz
shop.rosmini.school.nz
portals.rosmini.school.nz
www.waihibeachtennisclub.co.nz
webaccess.rosmini.school.nz
*.rosmini.school.nz
intranet.rosmini.school.nz
rosmini.school.nz
www.rosmini.school.nz
www.mooloocommunityrugby.co.nz
portals.rosmini.school.nz
intranet.rosmini.school.nz
www.diamondsportnz.co.nz
intranet.rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
shop.rosmini.school.nz
www.christchurchmetrocricket.co.nz
canterburybaseball.co.nz
www.unimountafc.org.nz
www.crossrecreationcentre.co.nz
www.rosmini.school.nz
www.westcoastsoftball.co.nz
www.marlinsnetball.co.nz
shop.rosmini.school.nz
www.sportsground.com
portals.rosmini.school.nz
portals.rosmini.school.nz
*.rosmini.school.nz
portals.rosmini.school.nz
stem.rosmini.school.nz
www.pauanuilifeguards.org.nz
shop.rosmini.school.nz
stem.rosmini.school.nz
www.rosmini.school.nz
portals.rosmini.school.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for rosmini.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIDlzCCAx6gAwIBAgISA+tIAZPWLtdjw2N+9Z7mxWbAMAoGCCqGSM49BAMDMDIx
CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF
MTAeFw0yMzEyMDMxOTI3MTJaFw0yNDAzMDIxOTI3MTFaMBwxGjAYBgNVBAMTEXJv
c21pbmkuc2Nob29sLm56MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEywakG0Tw
JbN1i8cHef1ay9O8yl8J620hujeM3HhlCRtYNDtGZERlk5OWeea3stWmPBKRTXOK
bcljCBaY1T+UAqOCAigwggIkMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJB/TC1wt
XQvK1oA9vWgPqwblJpcwHwYDVR0jBBgwFoAUWvPtK/w2wjd5uVIw6lRvz1XLLqww
VQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vZTEuby5sZW5jci5v
cmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9lMS5pLmxlbmNyLm9yZy8wMQYDVR0RBCow
KIITKi5yb3NtaW5pLnNjaG9vbC5ueoIRcm9zbWluaS5zY2hvb2wubnowEwYDVR0g
BAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYwxXRFcAAAEAwBHMEUCIQCz8ePm
KNAvJ+2AlGn3/JVDofY6lbbVxI46ibpzmWLq8QIgdit12MdHBpX7Xq9eLVfZit4X
A5DjYUwH00YLMxdok+QAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frU
FwAAAYwxXRNbAAAEAwBHMEUCIQDk4zL5CQ1Zt/0B/w+XKpwqhTFyRXRpYHDJnzMu
5DsYGgIgDvjku416OKsLNN6N1N2gO5fu9cFi2AWl1sNYl0nRbZ4wCgYIKoZIzj0E
AwMDZwAwZAIwaX/ZSPddph6SzTUxyqCtagfFb/Kvm0TLx6mE8kN4uDe/irCRGTLy
IcORk0Ud0JYpAjA3dzmdKrWhnja0OX+I5Yo2DDLTxPcj+dMbkDxHRereZPiDd6ZD
3raBaJ6cePoQU50=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEywakG0TwJbN1i8cHef1ay9O8yl8J
620hujeM3HhlCRtYNDtGZERlk5OWeea3stWmPBKRTXOKbcljCBaY1T+UAg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341398926628178186546911119812786160756416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 19:27:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 19:27:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosmini.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004cb06a41b44f025b3758bc70779fd5acbd3bcca5f09eb6d21ba378cdc7865091b58343b4664446593939679e6b7b2d5a63c12914d738a6dc963081698d53f9402
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							241fd30b5c2d5d0bcad6803dbd680fab06e52697
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmini.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c315d115c0000040300473045022100b3f1e3e628d02f27ed809469f7fc9543a1f63a95b6d5c48e3a89ba739962eaf10220762b75d8c7470695fb5eaf5e2d57d98ade170390e3614c07d3460b33176893e40076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c315d135b0000040300473045022100e4e332f9090d59b7fd01ff0f972a9c2a8531724574696070c99f332ee43b181a02200ef8e4bb8d7a38ab0b34de8dd4dda03b97eef5c162d805a5d6c3589749d16d9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16237845223573709880877663852032475877623467443938934692947050745003437175647944733306921803694331623440620689856041
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 8536956078773131352899827931133712273946884204038898670613859696547040380967325839686819008522121405110120738739101