bungy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:90:c6:68:e1:61:5c:eb:cf:1b:ec:72:37:e0:e9:34:75:a5 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bungy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:c6:68:e1:61:5c:eb:cf:1b:ec:72:37:e0:e9:34:75:a5
Serial Number (int): 310601250345190629925531584051996532176293
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:0f:5e:46:29:dc:22:17:87:38:1c:f1:d6:73:f1:c3:31:3f:b6:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:36:a1:23:f8:57:d8:1a:9b:89:3e:ec:10:49:64:88:cd:dc:65:bd
Fingerprint (sha256): 66:36:26:16:a0:83:fe:12:92:5d:6b:c8:5e:3d:49:d2:19:57:7c:a6:5f:d9:ec:62:1f:da:38:86:9b:12:72:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bungy.co.nz

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bungy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bungy.co.nz
bungy.fractured.co.nz
live.bungy.co.nz
m.bungy.co.nz
skyjump.co.nz
skywalk.co.nz
www.bungy.co.nz
www.skyjump.co.nz
www.skywalk.co.nz

Other certificates including the domain name bungy.co.nz

(limited to 100 certificates)
jump.bungy.co.nz
bungy.co.nz
jump.bungy.co.nz
bungy.co.nz
bungy.co.nz
www.taupobungy.co.nz
bungy.co.nz
www.taupobungy.co.nz
bungy.co.nz
bungy.co.nz
*.bungy.co.nz
bungy.co.nz
*.bungy.co.nz
jump.bungy.co.nz
www.taupobungy.co.nz
bungy.co.nz
bungy.co.nz
bungy.co.nz
bungy.co.nz
wireless.bungy.co.nz
taupo.bungy.co.nz
bungy.co.nz
bungy.co.nz
*.bungy.co.nz
live.bungy.co.nz
bungy.co.nz
bungy.co.nz
jump.bungy.co.nz
bungy.co.nz
bungy.co.nz
bungy.co.nz
jump.bungy.co.nz
bungy.co.nz
techsupport.bungy.co.nz
jump.bungy.co.nz
taupo.bungy.co.nz
bungy.co.nz
jump.bungy.co.nz
jump.bungy.co.nz
jump.bungy.co.nz
live.bungy.co.nz
vpn.bungy.co.nz
vpn.bungy.co.nz
*.bungy.co.nz
cn.bungy.co.nz
*.bungy.co.nz
bungy.co.nz
jump.bungy.co.nz
*.bungy.co.nz
cn.bungy.co.nz
bungy.co.nz
bungy.co.nz
www.taupobungy.co.nz
www.taupobungy.co.nz
*.bungy.co.nz
jump.bungy.co.nz
*.bungy.co.nz
bungy.co.nz
bungy.co.nz
bungy.co.nz
www.taupobungy.co.nz
cn.bungy.co.nz

Certificate

The complete raw certificate details for bungy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yj7/4sGAyMCM2KXRJzx
vhnctaEdK1rs/vyFrQJbEj3Pf4SkhWujmOKM3yt5ov/OSTIqIvLgcg9Mbl/y9b4E
QPCHZ7RiZ0fg95dCTVhta09XPN1KkVU9sHYfZUHVKE+pr0PVV6WdL+/z+TNKj677
zwZPbrHQcjkpvNl39CUn5N1NL7HzCpnO10INVuQE3vvkyzeUC5pDU8ezRIaryXw7
WLgG4SqPU/WDPm6MJo0nqIcFslVL7xO+g1QhMjUMRtp0QCMFpkYZkG7OjTZlaQcJ
gA9kgyWeOKyfRlZ1GwFVS4gT3TKnGu9pC2ZoYzJ3x26NAVF0riYmQ7PKW4Kck3g4
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310601250345190629925531584051996532176293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 01:14:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 01:14:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bungy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30191165032004871936564729505724241740577026181404531091043130265284371704419592266293104593893570260293056961537600100031910343570380549691402960715456476990978196990981210657932917073216730102130778411390911967731040723539493922424476907552690958504272689682476307137651957002290078314739920114151905399127893708704308776765818268884931984574173359511303550027268913781556055845451341352492532238719915241168002501148974527694986033842592474997101979900635696566213931348107337140494285822081642623255056788689411722318787634047399180146622498498690650907520628241281232966189103735839325196081400610249483537103001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							770f5e4629dc221787381cf1d673f1c3313fb609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bungy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bungy.fractured.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bungy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bungy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyjump.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skywalk.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bungy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyjump.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skywalk.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001703c5385d800000403004630440220411a60cdd073ae8db71ac4d8bac56b87e5a5b33eaf98a627523cf41d744e4e6a02205bc3828da63b505dcf6688157ec3fb040e0dc0e8e4f28faca2de79ab2e53a9d3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703c5385c8000004030046304402200d9397430a82f5906a43c46b0e4fc20c56709ca1c4464858fe47b0c523b8097e022010c6e35b6548c4111282ee6c8fdafbaf371e49d0e92449dcd67f390bc7ea2d13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e495054c2f170cdfe667cb760f1fc986f8d6818afd3d98ee30b6c7891cd5afb57e99db2390857d6129289a99f56f1d2b4b64181509836358ff7e4d961ed63c06420b72db47ebca6957b11a880666d2f0a565fbcce5ff6f341de1b2a273c5b16cafea1017daec6938262a4895211cd62cebf9ccd13894ddd0060a6210dd96ccd1a9abd6d9abf38366f4abf552380f501cc752fd3232db5849151254bbb0055183e1910b3e62afc1a3bc3d0e6516eea04399b2ca8a2e108a21445892aa886de06cdd65c79081eded800acf3705f393dd0f8f8524e3d6c8a36c6db7064759abf29ed9d3c2002f8cf030ca4542ba1e11db6199d2543aa596be24f39a7c102b5855a