online.speechnz.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:52:68:2b:21:22:0a:35:ce:7d:ec:8a:a0:2e:19:3b:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=online.speechnz.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:52:68:2b:21:22:0a:35:ce:7d:ec:8a:a0:2e:19:3b:70
Serial Number (int): 391434259528375560860211477797086997068656
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:0c:5e:3b:30:44:4d:79:14:09:39:9d:aa:f6:b0:e8:fd:b7:6b:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:8b:10:49:27:e8:60:34:eb:6e:a4:cd:4e:2d:5f:bf:84:aa:51:3d
Fingerprint (sha256): 49:a9:fd:ca:b5:bd:57:50:95:37:b5:f6:aa:ca:ee:d4:0b:39:ed:a1:b2:8d:34:9d:8c:a2:29:b4:c4:e3:ab:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate online.speechnz.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.speechnz.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.speechnz.co.nz

Other certificates including the domain name speechnz.co.nz

(limited to 100 certificates)
online.speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
online.speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
online.speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
online.speechnz.co.nz
speechnz.co.nz
online.speechnz.co.nz
online.speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
speechnz.co.nz
online.speechnz.co.nz

Certificate

The complete raw certificate details for online.speechnz.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTxQhtgeLtEkdmTWNMee
JV6E+IIRWG73vw9hpjQVhMN1VQMzD4BCkuDYHoS381xUDC4N8Q6tCK5Kc9QYE7eu
lA2NNW0zv9zw0Vzg6842Nt+9FwWaCth5Br1osfKWQ9T3vhroB2OA2BvBE9JpK7DB
y+ZbLSthjaX98WCIotDk7RUHo52S7SWEdjx7P7oBcFEjFvAVM15fuSluUyV3gjFu
M/Hno1Lr4ChApWNNcKXmhnvqIecFo+nUBrRrMX0kSFBaoL5gCeIcwZY+qo+lPscI
/RcrXwO3SXiEKO/KzJ0Jm40WXzUQ8bzlLqM0LqfbuYQ8SvtCPR/t1B1LFoFo/YnW
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391434259528375560860211477797086997068656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 10:19:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 10:19:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.speechnz.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22878875415696735762116513969828855281772025055454597856046491349759109702389485213068545210380196827213913437782565643647930619482232503901714440474202878023663602577003388312853984380578482303973889104423111086845022784474929352015428862069316388058502830956340147025495929576090797822167084646637580122027406794690553618452636685437854255692204994832915863648894011819391399109765490479302227432688850129068251439837188684297330452489379822810417381316239401021126658816282094436586462304393060029078300660404470262336945214658729131055872856292835791816180864795265840737886305468270407921872645373940199603164869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d0c5e3b30444d791409399daaf6b0e8fdb76b9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.speechnz.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001874bfe07560000040300453043021f03cfbab95c0ece5bfe3f535ee9927ec06d5fe411539eceb971d3a98025c429022037c64348f5fc8e5fd7d77307bab31e5707ab4392a3e718fa91801a4bb2d2d3f5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001874bfe077f00000403004730450221008c997c1a26894d035280af49ef755365f75f384f22664c644614596c48d31c9c0220360069f74ec4b7abb56ffafa2a5596d86d61560830d8f16f50afe6c382c53d69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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