mainscape.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:27:7e:2c:eb:be:0e:2a:0b:5c:58:f7:4c:0e:b9:97:79 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mainscape.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:27:7e:2c:eb:be:0e:2a:0b:5c:58:f7:4c:0e:b9:97:79
Serial Number (int): 282827141943643110272290851055407218661241
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:db:91:a8:33:1d:dd:f7:68:21:e6:5e:b7:b7:99:1f:18:ff:d0:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:24:89:2d:7e:03:27:20:f0:0b:33:1e:b0:ed:bb:04:79:b3:24:bf
Fingerprint (sha256): 5b:f1:d2:3b:9c:10:73:2c:e2:c4:0b:38:bf:9b:41:b1:2d:ca:90:7d:04:8a:5b:08:61:d1:19:75:1d:c0:42:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mainscape.co.nz

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mainscape.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.azena.co.nz
autodiscover.mainscape.co.nz
azena.co.nz
azena.copycat.co.nz
cpanel.azena.co.nz
cpanel.mainscape.co.nz
mail.azena.co.nz
mail.mainscape.co.nz
mainscape.co.nz
mainscape.copycat.co.nz
webdisk.azena.co.nz
webdisk.mainscape.co.nz
webmail.azena.co.nz
webmail.mainscape.co.nz
www.azena.co.nz
www.azena.copycat.co.nz
www.mainscape.co.nz
www.mainscape.copycat.co.nz

Other certificates including the domain name mainscape.co.nz

(limited to 100 certificates)
webdisk.mainscape.co.nz
signplus.net.nz
*.copycat.co.nz
mainscape.co.nz
waimaklaw.co.nz
realnzeducation.com
mainscape.co.nz
azena.co.nz
realnzeducation.com
mainscape.co.nz
mainscape.co.nz
realnzeducation.com
mainscape.co.nz

Certificate

The complete raw certificate details for mainscape.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/1iAn4NciFAb9UjCGUt
ZkGbr1K7Xdzi36JSs5bFBr+zIXR4Bb2kEQzvYFVGOkjl82Q/c4EnOo/I9p1TVE07
U9UhMUzHClTyjA3ExfAk3YL4gFkmnbjFEWjJ5HS5T1WFS64MdkyQyvH3+HcwZi39
ZwJ56dPsXrqjjH+RKYpLrDDjULqwMbT4sOp64EVjTsUqAca/VtPg9lpXP+25qxKz
75iU3t9/T7zUTwTyYbJSELdO844hO52/76dluSOWx4mgA/MqMbFnhZcUbwm7iDij
R5K2Bl6h69tpjlPhvwNVzsiHt7w8fiTU+krc1WqyERIvJ3NlFwikUH754V9JyJ6J
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282827141943643110272290851055407218661241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-09 23:14:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 23:14:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mainscape.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29790949407486620925699429719690056764043876678538072937273662213797501239287600948022737745131341894340429028718638881757283655064590214468123614057711932981868298490247954967716346831406846449896124517382781353307379458292782309670631206672922225242445278221225193405057927638724757631378000597249959801573035102108521270211661596624819642127546974005699818874998232148832909756274307654560183921537496199886299548354133575599452009854870219503226087171646891812717701822785075894744963561732055057978197987646566598736243239910119745378762941490763409054787610789617872388318074790448312012489701870875434150693197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fdb91a8331dddf76821e65eb7b7991f18ffd032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (404 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azena.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainscape.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azena.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azena.copycat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainscape.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainscape.copycat.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168d4c14b1f0000040300473045022100d3cb2377c6c1447180d3d3f43bf28f97a70b98bb8799e9498ab9614027993dcd02205dcbd6496efc42b7d01965de2273547d3978648f86b9d3cc82ac6b6850dc88e6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168d4c149040000040300483046022100c87948cc2a8930f7f750d69b27a2d92b54dd50040f23e5763df9ff6a385400dd022100dcf84f582e710ce7dc48c7a049798a7cd80351f6dbebd144483c3ee43db59271
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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