supersaver.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:1a:54:77:99:38:ba:60:39:09:2e:a9:67:4f:b2:5a:d3:30 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=supersaver.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1a:54:77:99:38:ba:60:39:09:2e:a9:67:4f:b2:5a:d3:30Serial Number (int): 357408761409660612211909156234256801518384
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3e:ec:ce:21:31:a3:cc:f8:eb:23:50:28:3e:1e:e9:cc:64:7f:5b:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4a:c6:f7:ba:48:99:80:cb:6b:4f:c5:08:99:f6:a5:1f:a7:97:18:af
Fingerprint (sha256): 4a:a5:84:51:8a:9d:19:1f:cb:5a:12:00:75:b1:92:c2:4a:92:a1:90:6c:1f:9e:61:a6:8c:e1:e8:d3:ac:38:b8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate supersaver.nz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for supersaver.nz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
supersaver.nz
www.supersaver.nz
www.supersaver.nz
Other certificates including the domain name supersaver.nz
(limited to 100 certificates)
Certificate
The complete raw certificate details for supersaver.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISBBpUd5k4umA5CS6pZ0+yWtMwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjkwMDI5MTNaFw0y MDA1MjkwMDI5MTNaMBgxFjAUBgNVBAMTDXN1cGVyc2F2ZXIubnowggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDXOTuB5yJNOFLiAfIUgLEzjNtAtyB4DDSz M/pQRenMn9ikOsT9ta0FNPu1zkvW2k+KNcdRUZJA4xmYaZiS4CX+mpzjQCmNGC1d a8XEX1npgvHxHQmRfmnowNkgb4IJqLK8VbHaJrIr7DOhbWRrSF3+IilyMw9A0s8p PxD/gibVZbDNBCEpQPAZQDIxwFBFWMMOWg0nYC1oMQMpysdPY0gkJbC68CJXjUmP t7Rq+ZHLMwypvqLOa8lkfoi1pr57Fs8SxLR9EKFaMxyKU0DAzP7ubDsquQgVdrwx LvoUovX/05nFIrUoREqTLjBnzoar0Z6K96Ce0fCbkESdntBtN+SIIWi/XDwqNML3 KMZ6u8bCdegomDZQYaM95AcEu2MosaHDcgY7cEVBGx71JfnRG2XywYDtLiSA45my pc/KQZskqgGocYjG0LBdOVE0cTqDQUerAEDRYeR063Xb3sP2Oc4rb7IZbtwSBLCl HITQE7LsGXHAs9ETbvvOMxNF2zTQ5nqo8syF4YviN6Q8H6ZSyjdH5t4oA/5A3hh9 AvjYg9RtECWzdHP+Ip9nEWFzyVJYQymB7qTI9VUZbqlW5iDoqJpRW2MZm8mS+BDk Iy6h6rRXz8AxLvWWQlsEXKs63heVG58rJLqwwkDdbhB3N6zIgFVjUbJ0usqypUYC E4tm6OkJHwIDAQABo4ICdjCCAnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ+7M4h MaPM+OsjUCg+HunMZH9b/DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXN1cGVyc2F2ZXIubnqCEXd3 dy5zdXBlcnNhdmVyLm56MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIS hBh1loFxRVgAAAFwjo/MsgAABAMASDBGAiEAg8A3w2X7gCBlmr2h9etq67uUggn4 YuxP1if7jpnL1wICIQC2XDlE22TS2CSIQk2yNdig2T3agV2JOFnnXoR8Hs45CQB2 ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcI6PzJkAAAQDAEcw RQIgchChkctlS3UN9MgAKTjFX+z7lDFoTinw29atS2WP3VgCIQCrFTriuTjSpv61 IUgEXpOA+XGHRkb6Xm4i0caD52oJTjANBgkqhkiG9w0BAQsFAAOCAQEAhHUgz6K1 xQFNTUdEq4B52QYYk2z2+jDmVECr90u6u7gAaLYsHbJt8q2urKs6ANCrkrDl8VKM RZ9ac6wanprnyBpAauEsyQ1OJSWFi3+5YIgORb81SS0LBIUi89U4gj7tyZzJwglv bzMjr8f7myEsWI0k7688tsGiJ185BcDiBia3PjuSZgijax+CXtVQ07qT9uJWBoPW RtYB1mU04od3IHi0yzSs/+LhOSuIRPl8PGRfjdghC82ViHRuDBGZtegjredwLAKM 8OOXzJ3ovsYirpDwE2Tjaw85ZFm/KUBLjoXKotS/tILMT0V//spbVYryNMfFZbZz YgVl4rfv5/swLg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1zk7geciTThS4gHyFICx M4zbQLcgeAw0szP6UEXpzJ/YpDrE/bWtBTT7tc5L1tpPijXHUVGSQOMZmGmYkuAl /pqc40ApjRgtXWvFxF9Z6YLx8R0JkX5p6MDZIG+CCaiyvFWx2iayK+wzoW1ka0hd /iIpcjMPQNLPKT8Q/4Im1WWwzQQhKUDwGUAyMcBQRVjDDloNJ2AtaDEDKcrHT2NI JCWwuvAiV41Jj7e0avmRyzMMqb6izmvJZH6Itaa+exbPEsS0fRChWjMcilNAwMz+ 7mw7KrkIFXa8MS76FKL1/9OZxSK1KERKky4wZ86Gq9GeivegntHwm5BEnZ7QbTfk iCFov1w8KjTC9yjGervGwnXoKJg2UGGjPeQHBLtjKLGhw3IGO3BFQRse9SX50Rtl 8sGA7S4kgOOZsqXPykGbJKoBqHGIxtCwXTlRNHE6g0FHqwBA0WHkdOt1297D9jnO K2+yGW7cEgSwpRyE0BOy7BlxwLPRE277zjMTRds00OZ6qPLMheGL4jekPB+mUso3 R+beKAP+QN4YfQL42IPUbRAls3Rz/iKfZxFhc8lSWEMpge6kyPVVGW6pVuYg6Kia UVtjGZvJkvgQ5CMuoeq0V8/AMS71lkJbBFyrOt4XlRufKyS6sMJA3W4QdzesyIBV Y1GydLrKsqVGAhOLZujpCR8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 357408761409660612211909156234256801518384 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 00:29:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 00:29:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supersaver.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878035537237042395275007603116636248709755713188258795652537505824818137080251638188322021064927871465973146072128987082186845910432757024647440225799265131271514201106359500421642275112468618614209157077706597934222259315720078636684620080865873564771923734366048163775629201972272931414089446355280185152043679974927356028969356836873992893539509913634984387491300859953545013627409120110289368214783615469872238291822899748269409852984447279070954116454869764068979229206652975747483023347658750894152619989349772264738295967070374303070113747085946466525432239189280773957187431744207100576643601054613756735993934268148597656762157404601291056103326890940608556182889701237045638260767874599979520151872990268431546961010082534421173307748954323163314825607456621761348720157433732441834846538123879923504684366603122337938669956603569191416119513548751384663808368530215242407963538826416334088891621123708895126264137601609337514802615314884616473010759695289041373353419304612815390729238902103899253334445464879739124199077085987331700661647616083677883658046012093329463149969769079826124964603775964492696603376197085978655177313685647529968813216680422943181797302342008762457826935294105504051741799156360432271789459743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3eecce2131a3ccf8eb2350283e1ee9cc647f5bfc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersaver.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersaver.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001708e8fccb2000004030048304602210083c037c365fb8020659abda1f5eb6aebbb948209f862ec4fd627fb8e99cbd702022100b65c3944db64d2d82488424db235d8a0d93dda815d893859e75e847c1ece3909007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708e8fcc99000004030047304502207210a191cb654b750df4c8002938c55fecfb9431684e29f0dbd6ad4b658fdd58022100ab153ae2b938d2a6feb52148045e9380f971874646fa5e6e22d1c683e76a094e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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