sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:09:4f:53:d2:f6:30:cb:c1:98:8c:25:88:58:c6:21:6d:88 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:09:4f:53:d2:f6:30:cb:c1:98:8c:25:88:58:c6:21:6d:88
Serial Number (int): 351617129280446945854321895596629560487304
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d5:34:43:cf:66:59:73:70:54:84:06:34:c3:81:c8:4b:99:4f:2a:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:e3:fa:ea:8d:15:dd:31:12:e8:2c:12:03:96:8a:2e:60:26:9a:39
Fingerprint (sha256): 58:83:e9:01:b1:d2:9b:98:d2:a8:eb:b9:db:82:b9:47:6a:13:da:7e:6c:55:22:39:c8:6d:0a:2a:c3:1c:5c:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activesouth.co.nz
activesouthland.co.nz
athleticssouthland.co.nz
athleticstaranaki.org.nz
ballance.school.nz
dannevirkehigh.school.nz
douglasvillaafc.co.nz
evolutioncreative.co.nz
horshamdownsgolf.co.nz
kartsportauckland.org.nz
maristsaints.co.nz
matarikihbrds.co.nz
matarikihbrds.nz
merugby.co.nz
northcotebowls.co.nz
pukekoheswimmingclub.co.nz
redbeachsquash.org.nz
sporty.co.nz
stadiumsouth.co.nz
stadiumsouthland.co.nz
underwaterhockeynz.com
wrcfunctions.co.nz
wsff.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33DRDyFA7yWbW15e0irg
SZmPbrs0CZyai+DfBlPtHW6EihZl8zIPvM42ydNfjA2M7A/pmRECSgARnIq72iBz
g9cqdLEX3ArLlohmQMzTgN5KuvktkDn3BGKeoF86rbfOxF3Mksqj5y2oZamgZMNn
ZNPJeTVlhW12sitrsL3dpfEqj6gbDna3weYXTfAk9SelRyYA30si8Qz0XSQcxFJW
2dfs/w9ARj/SJRhs1oRDIrLy93lLsHwB8cjHfcFmWXkPjcRlndOxraMLgqioPImd
a9lH80d3rR4MHHZzGHYEOeW1OyYa1CqYzxLenjcZ2uyzxmNuz4lXn8g2uIo1wcw1
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351617129280446945854321895596629560487304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 18:49:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 18:49:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28206773964623380072465696459171402164039050891435747589008296717903396115318351295827124733969001731673548647511938528370366578298717187229711596315122042839761097406393708281105210905972556329014753714113585518563381231309632480557706656991208656976096360565216418184961274492982773119923833412756580234689281022304589070152835118853789387814329381699677464879356059079858914871987459350358387166938818028390712900449012348552173553954068045195179013023503218444987083677480857172845482263065583214333025023120421304264615342021316359666023296381200065232192714202102593093487036755202284853438919782124735660045609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d53443cf6659737054840634c381c84b994f2a69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activesouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticstaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballance.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dannevirkehigh.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douglasvillaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolutioncreative.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horshamdownsgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristsaints.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matarikihbrds.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matarikihbrds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcotebowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekoheswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiumsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiumsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwaterhockeynz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrcfunctions.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsff.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc514ed8b00000403004730450220123b974e0486fc4ef988c887db5cf5894c4f81d6e761eeeeec261ab43b8cc5b8022100f26b64f3ce403938161176d692064098e7d21b292cdb163e83ae168cd9eb1c3e007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc514ed94000004030047304502201900d03d8330c39a0cfcae4c54916486cabaf20d7fb12331c4a001b0bdbfc0990221008c28b77e687c8fea1639c8d0309c16e80de2ce4567785c1c03d7765b017102b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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