friendsforlife.co.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d6:d3:52:9d:90:9e:e7:16:79:e8:19:c7:16:64:bd:f4:0f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=friendsforlife.co.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d6:d3:52:9d:90:9e:e7:16:79:e8:19:c7:16:64:bd:f4:0fSerial Number (int): 334438180387610929401005375235442446562319
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:38:7c:ad:be:94:83:23:da:64:35:9e:7a:46:5b:fc:26:1f:13:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f8:8d:48:f0:0f:d5:9a:1f:b7:26:b2:ad:3c:f1:8d:30:6a:5a:91:72
Fingerprint (sha256): 45:e1:85:68:28:59:4f:d2:b3:93:03:87:81:53:e8:ff:0b:7c:94:be:6a:1f:1b:01:41:51:32:b0:da:6e:43:04
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate friendsforlife.co.nz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for friendsforlife.co.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
friendsforlife.co.nz
www.friendsforlife.co.nz
www.friendsforlife.co.nz
Other certificates including the domain name friendsforlife.co.nz
(limited to 100 certificates)
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
mg.friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
uat.friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
*.animatesvetcare.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
mg.friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
uat.friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
friendsforlife.co.nz
*.animatesvetcare.co.nz
Certificate
The complete raw certificate details for friendsforlife.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISA9bTUp2QnucWeegZxxZkvfQPMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDMyMzQ1NDJaFw0x OTEyMDIyMzQ1NDJaMB8xHTAbBgNVBAMTFGZyaWVuZHNmb3JsaWZlLmNvLm56MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/MDVPS8y2dzYpMMw8KmhJpH jVxrDaJMoiek5oSvdcR+8meUyfD7vq6i1Ain5lubzbRPFHNyJ0EtWPS8vGmkSEc3 lPUNHM5+ykGjjBbZYSCKHcmTbPUQzO/qSvu29kyPCP9gILvy4A4j8+wO2RJSZ4bb 0TMzR3JvCRRky8Wh9D8mzb8HGZSa0JjwMEM/N/i5Nw5xqz/CXMNF9XYgvOnBWLrk zBb8M3NlKkEMYpobYVN0FvEqlVh6vY5wqYf7XZMIGRmiClhpJ1S4DIhB61aSjlL2 JsFQxPPp9gByx81um9lXBqs3R7MzBBDmi+/NxyEUuQu//mKqkfCENtHS6gJ2bwID AQABo4ICgTCCAn0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQSOHytvpSDI9pkNZ56 Rlv8Jh8TlzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMDkGA1UdEQQyMDCCFGZyaWVuZHNmb3JsaWZlLmNvLm56ghh3d3cu ZnJpZW5kc2ZvcmxpZmUuY28ubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDiaUuuJujpQAnohhu2O4PUPuf+ dIj7pI8okwGd3fHb/gAAAWz5u/2XAAAEAwBGMEQCIAh2RCDr1c8ev3yros58jHEW GJG1xWpHh6anwbSVHQ52AiA5uL+lq5kblIHvxfrMLIo8Z0GwoeYQ1zA++kkwQ+sB fwB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbPm7/YwAAAQD AEYwRAIgdbFK0/rCRRC+TMj4YCcRxrrzKem8h6tma/7pMBBqgLUCID+we+ve6Xvl 8Jmq4TLsv34GFej103N2yjo/bNILvY00MA0GCSqGSIb3DQEBCwUAA4IBAQAZY2W9 VRH/n1Y9rNZDId7gnEFQ2CxKlOAnalnV7A+Th3FEusMTCes7a1NlLXyziJB4saHM URkgaIU+IFBfj9SIyzvwS58+xOp0Pwa56vgpFqVMbuLP/nL/RafpLlciFX/ElIqv AX+pIV+nMWIY/C3vbvl512CqZqev3wcYYwVTr05GoZwc0k0BtIun1yiX5qiFXzSe Cvq2+2LNHXAWOx1NrKjbYS2f4s+Mkn+phOwoiRRfRDpykTlUHdjsqRIISakKq51U CMutpBNI/z0CFdyYVk2M4bc95/JPKyz2ZxzUs+HET+vF3OI5Q55W/21cUVP5R83I BqT9cl6pH23qoLyX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/MDVPS8y2dzYpMMw8Km hJpHjVxrDaJMoiek5oSvdcR+8meUyfD7vq6i1Ain5lubzbRPFHNyJ0EtWPS8vGmk SEc3lPUNHM5+ykGjjBbZYSCKHcmTbPUQzO/qSvu29kyPCP9gILvy4A4j8+wO2RJS Z4bb0TMzR3JvCRRky8Wh9D8mzb8HGZSa0JjwMEM/N/i5Nw5xqz/CXMNF9XYgvOnB WLrkzBb8M3NlKkEMYpobYVN0FvEqlVh6vY5wqYf7XZMIGRmiClhpJ1S4DIhB61aS jlL2JsFQxPPp9gByx81um9lXBqs3R7MzBBDmi+/NxyEUuQu//mKqkfCENtHS6gJ2 bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334438180387610929401005375235442446562319 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 23:45:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 23:45:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'friendsforlife.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24231350432532261983618758501818784996155167906881577587629111104489470689021519431112142325915614289510746007715675205968630550577477585924286933263364065167762613149288360419638250212892573202806608243322293963011343335318353866161761155543243853718327741627913806601019544109207368837761308460588889385851421605797948449698135339396263690751642547205495393724294995359846647352050214771537856571955522623722363061647014032597229508359872684909861662044911857656784384863094202814954145281926936464153656280002023313452018965012085204329689831948889878885154460452088002773468911778886936402276864970025739904775791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 12387cadbe948323da64359e7a465bfc261f1397 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendsforlife.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsforlife.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cf9bbfd970000040300463044022008764420ebd5cf1ebf7caba2ce7c8c71161891b5c56a4787a6a7c1b4951d0e76022039b8bfa5ab991b9481efc5facc2c8a3c6741b0a1e610d7303efa493043eb017f00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cf9bbfd8c0000040300463044022075b14ad3fac24510be4cc8f8602711c6baf329e9bc87ab666bfee930106a80b502203fb07bebdee97be5f099aae132ecbf7e0615e8f5d37376ca3a3f6cd20bbd8d34 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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