sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:e6:ca:7a:93:c4:59:34:8b:1a:27:00:19:be:44:73:cb:2a was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:ca:7a:93:c4:59:34:8b:1a:27:00:19:be:44:73:cb:2a
Serial Number (int): 339870942699532420068244556863317208189738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:cd:07:d5:f1:dd:1d:2f:eb:b8:d4:fe:40:51:24:87:ea:e5:ff:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:cd:b2:01:5e:52:f8:c0:11:fb:fd:4f:0a:ce:04:f6:d3:3e:09:23
Fingerprint (sha256): 50:8d:ec:fd:f1:38:a3:e9:96:86:ec:f3:47:04:0f:5c:5f:84:c2:29:cf:fa:99:42:47:c8:05:94:8c:0b:a1:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aurfc.co.nz
belfastrugby.co.nz
cdcricket.co.nz
centralcitybaseball.org.nz
collegesportsportal.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
hbcricket.co.nz
hbreds.nz
hillseekers.co.nz
hillseekers4wd.co.nz
magpies.co.nz
mgcarclubcanterbury.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzsssc.co.nz
ojcc.org.nz
papatoetoenorth.school.nz
playsoftball.org.nz
southbridgerugby.com
southlandschoolsport.org.nz
sportslink.org.nz
sportspark.co.nz
sportspay.co.nz
sportsportal.co.nz
sporty.org.nz
tuki.co.nz
waikatogolf.co.nz
waikatogolf.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3IDW5GIkMDmKe5MVqSu
OANvELkB21ytJM0DIt/mHLS63KPz2pOJlrnQPpVpyEFbEC8qrfcyT6MhlUyCrSvg
VSqQNFO0fJodPt0n7R6zbnU851aztMcHNXbqbepOU+CM7pkPGx9/KgQWGl7MCHou
8wIcfmo4pOIId4rgSPKkffwZAg4/daNE5XDzxNIoXjNoQhigpyMzobr1QuRA1QxU
vS1cJBDt+wOUCQYVXjd7BGbcyV31ZyvyQKSlQCHRkWSJys0hiePFhk+V6xdIcnBo
TdbSEVsRw1TmfQtMIUDBRQT61c8StUoPgnnJWFThqTPNKolV9KHQ0St2AZ3Vz0G+
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339870942699532420068244556863317208189738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 20:33:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 20:33:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21138018892239958325556985133348165677095492287120704203607534877223265897999532578636934174594909152317528880097332840235555347503373153242298495034944954778770632246198389901155522563485555376102365916833962735640822092876629098555848328554030105072581150086573481587258415348145071232003015594884836481113951358094466535317040168175740980411875784888498395917900614638568436582415751539706119960677182686204175160160044648683751586800511682288975338058174704345321444902875783200741495422578655622518118943977994831888019851984445034847328393570833391718470257113676362650471369323105208567482585898983456430472753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2acd07d5f1dd1d2febb8d4fe40512487eae5ff23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8629d74a000004030046304402200f54ba7d3379bd630fd499100926ea067311ac687c31881fb66bcf717541615b02203babc0547ca03788d60719fb6f01c92a106687607b7c464b8e41ecd1d2080ed10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a8629d7570000040300473045022100fa483899f1ff4e5db3e8e318e99f2b3e7affd142e408690e0f64dd3d81d4c2c70220046d72bdb7f92e0353eda4b27ccdf5b7875f5a7c16f0b9ca6b0378d0a22d0866
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048a7fa7d5fd27580461b5a8d37261600bca68199cab0311a75e80e462a993d49bcbec5555a436fbed212133baeba88cd10c7300202e7acdc7f20f25e048a07645664b01d8f5f1306c57719d7253e50d25d7d45e5b252b18e5599d5cf48369caaa23e8381d849e04871e066ca443f8740edabeb3f70f81900e6839eae6063b3f1c80fda3fab83c0356a19c69355c2e4e1db0cdef290218e287c71fd3e5f54bb7bc2cd6df477fc0f2c6b9638d991c5d4d37ff01063be86b119790eae6c91aabdde3d81ea362b297d7c8eb74709a5409391be27fdaa2a3beb04247fcd5f2b149f498a04ce2de89fa5cee6931e48f2bb36043a05b696b3514db24bb9dc5b1b7b123c