*.adc.govt.nz

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number ea:3e:42:f6:71:9a:da:aa:fc:43:87:99:93:2d:8c:4a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.adc.govt.nz

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ea:3e:42:f6:71:9a:da:aa:fc:43:87:99:93:2d:8c:4a
Serial Number (int): 311362631583220306407784696795160742986
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:b9:5e:c3:a6:cd:40:d5:ce:5d:46:48:05:d6:40:83:f3:d7:5f:7b
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): d8:b1:ee:54:5e:71:33:46:e3:de:5a:f1:56:1a:bc:48:4d:e0:44:35
Fingerprint (sha256): 4e:b9:c5:55:2a:b6:96:d9:ff:61:aa:76:b3:e4:e6:a1:d0:f9:cd:83:e4:a7:58:79:9f:ad:14:58:34:4a:6c:f4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.adc.govt.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.adc.govt.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adc.govt.nz
adc.govt.nz

Other certificates including the domain name adc.govt.nz

(limited to 100 certificates)
helpdesk.benedict.com.au
www.adc.govt.nz
www.adc.govt.nz
helpdesk.brisbanemarkets.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maitland.nsw.gov.au
servicedesk.mcson.com.au
helpdesk.essencegp.com.au
servicedesk.adc.govt.nz
helpdesk.benedict.com.au
helpdesk.mstglobal.com
service.macquariecollege.nsw.edu.au
helpdesk.sureway.com.au
helpdesk.sureway.com.au
servicedesk.aqwest.com.au
servicedesk.adc.govt.nz
service.macquariecollege.nsw.edu.au
support.tsagroup.com.au
rdweb.adc.govt.nz
servicedesk.stgiles.org.au
itservicedesk.windsor.co.nz
helpdesk.benedict.com.au
helpdesk.sureway.com.au
helpdesk.benedict.com.au
servicedesk.aqwest.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.timberlinkaustralia.com.au
helpdesk.timberlinkaustralia.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.mstglobal.com
helpdesk.mccolls.com.au
*.adc.govt.nz
helpdesk.timberlinkaustralia.com.au
helpdesk.mstglobal.com
helpdesk.benedict.com.au
servicedesk.mcson.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
servicedesk.stgiles.org.au
servicedesk.4dmedical.com
itservicedesk.windsor.co.nz
servicedesk.4dmedical.com
helpdesk.maranoa.qld.gov.au
servicedesk.maib.tas.gov.au
helpdesk.essencegp.com.au
servicedesk.4dmedical.com
support.tsagroup.com.au
helpdesk.benedict.com.au
helpdesk.benedict.com.au
servicedesk.defencebank.com.au
helpdesk.essencegp.com.au
servicedesk.maib.tas.gov.au
helpdesk.benedict.com.au
support.tsagroup.com.au
servicedesk.mcson.com.au
itservicedesk.windsor.co.nz
helpdesk.mstglobal.com
*.adc.govt.nz
helpdesk.maitland.nsw.gov.au
helpdesk.benedict.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
support.tsagroup.com.au
helpdesk.sureway.com.au
helpdesk.benedict.com.au
helpdesk.timberlinkaustralia.com.au
servicedesk.stgiles.org.au
helpdesk.maitland.nsw.gov.au
servicedesk.maib.tas.gov.au
helpdesk.benedict.com.au
helpdesk.maranoa.qld.gov.au
servicedesk.adc.govt.nz
helpdesk.benedict.com.au
*.adc.govt.nz
service.macquariecollege.nsw.edu.au
*.adc.govt.nz
servicedesk.pulseenergy.co.nz
helpdesk.maitland.nsw.gov.au
helpdesk.essencegp.com.au
servicedesk.mcson.com.au
*.adc.govt.nz
servicedesk.pulseenergy.co.nz
helpdesk.brisbanemarkets.com.au
helpdesk.benedict.com.au
owa.adc.govt.nz
servicedesk.stgiles.org.au
helpdesk.benedict.com.au
eanconline.adc.govt.nz
itservicedesk.windsor.co.nz
helpdesk.brisbanemarkets.com.au
*.adc.govt.nz
servicedesk.aqwest.com.au
*.adc.govt.nz
servicedesk.defencebank.com.au
servicedesk.pulseenergy.co.nz
servicedesk.pulseenergy.co.nz
servicedesk.aqwest.com.au
*.adc.govt.nz
servicedesk.4dmedical.com

Certificate

The complete raw certificate details for *.adc.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmckO77f7521LDQFww33g
Kb8+13Oph6D03t7yY1hD+gTbYXErMUMnuMHEV9UiziWQeg+7SQh/cAaZ+TaQ1sRC
42MZ7vhJENaCEmXDmxv5d/Ege6pdMKxGvk0ZWOq/eWtm9eN/wi14xfCU4A4kqQ2H
GbV691dOWjstvjIdJRZy8NTK+Yk8DATNYjGNeX4KPso5z+61UhVxa6slyFRXAG2X
IzU6gETzUbaXgpm24M6WmOQ/R2QfYT3RWgeSDz2/tzeIZoORrQsmrbipiu0u68cE
ezbJ6PaSbLqdfUPUEH0NdbZlCF+Bp3po1XJI2xNv3i4l42vovRjF6HU8CBXN9gnp
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311362631583220306407784696795160742986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.adc.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19413606225088548478389911579875783357819604477545433469605388476802196347549474272616576676963056471294998160476784176520817776413434674586063834344157760602206141575947932570602562854218746993529568044178651922928030620309545605021223116893015024918773461991646653602921023426118343515635273402710965396034209271791536661877071172329394718044908823250202616221512582080233962483599760936444610315081738267973468337817487124839163331424775130836792362144380548944268715168145904860013685384304789481808293987189244750285260460543926172026329607461065786497540836510485788437323190046601579521353028058994116192233959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ab95ec3a6cd40d5ce5d464805d64083f3d75f7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adc.govt.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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