fabians.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:73:33:ad:6d:77:59:9b:75:c4:7f:d3:e9:70:a7:0e:21:fb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fabians.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:33:ad:6d:77:59:9b:75:c4:7f:d3:e9:70:a7:0e:21:fb
Serial Number (int): 387650307038328997362228831459772463981051
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:6b:1e:05:25:cb:1a:2a:7a:e3:0c:24:de:86:e2:f2:28:d5:a4:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:c0:39:74:a8:29:2a:4c:9b:84:5b:dc:3d:be:62:86:82:90:4a:94
Fingerprint (sha256): 50:52:a9:44:5f:27:c9:c7:55:be:62:d5:cf:24:53:bb:51:87:95:1f:78:6d:95:2d:fb:70:92:32:fa:a2:d4:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fabians.org.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fabians.org.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fabians.org.nz
www.fabians.org.nz

Other certificates including the domain name fabians.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for fabians.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387650307038328997362228831459772463981051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 13:01:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 13:01:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fabians.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 609114004233871093153370806076058529863005534407645336605603351656100106618817208289098109305691489294514601087818406396843916561241639717313226743127755461592874488657494033237500318211813387972610977733276225873661242024777880289487715194763173855773075891495124873349225783345323253794347544415147021219368055781575289855030738260064845898982349391393320756370404790296006747784882765262598323908409574738782220131177820889230440881562075160613928785718461084872936768383172558999205635237429324454939849893814364662864190966609532490176131341710876027452481541161105786740374204161104931975073075075992857729362483639293052551507224612612067699013268778334080021052221383057271442167811654693292970185665288507161905158860812476331246779152405508429528967562373364711682395447978966445774239326752713039707379031958137435215059339268939705807506325186775936551551429637494585127595663337991787493837602529298130129231829881319851677674333897231204367054529771807591083362266741196019087946236073345084237375374683579448449089432513123202414730208613255743303605150906924184676863860670380680721916337065327414455753756342941263241951587371295439888077146738628620420398733337589823802989702449966129069590022333448601336829592391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c6b1e0525cb1a2a7ae30c24de86e2f228d5a434
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabians.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabians.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e6a37adae0000040300483046022100c565ccdc4d9a887303968a7514d229c278b72a96a3f2decd80e21ad6699a00a70221008e31a621d21365a3355ce152a99df9591a6057539c2451257adb5cdec734aa6d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e6a37af2e0000040300473045022027689e0b3bb6c51817963648e6fa8fd37147c5c6d883c6fb664af870cf32fc2e022100f347c7a293fe917f8062fa53440030432559b4cee98584c5724d95b932f02347
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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