*.thewarehouse.co.nz

- The Warehouse Limited -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 37:93:bf:a7:8c:63:34:db:32:25:48:80:cb:aa:09:de was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Warehouse Limited

Organization: The Warehouse Limited
State / Province: Auckland
Locality: Auckland
Country: NZ

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:93:bf:a7:8c:63:34:db:32:25:48:80:cb:aa:09:de
Serial Number (int): 73874694621160264659936316590402439646
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 15:f1:da:f7:0c:e1:21:2c:de:9f:5c:65:9d:8c:f6:92:72:df:6d:5c
Fingerprint (sha256): 67:56:fb:6f:93:b3:5c:44:96:71:f5:38:c6:25:ee:e0:9a:92:29:09:e2:41:eb:8b:5d:15:a1:b7:7d:f8:32:cc

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate *.thewarehouse.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.thewarehouse.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thewarehouse.co.nz

Other certificates including the domain name thewarehouse.co.nz

(limited to 100 certificates)
www.yottaa.net
www.yottaa.net
*.thewarehouse.co.nz
akamai-san10.exacttarget.com
www.yottaa.net
akamai-san10.exacttarget.com
pages.emails.thewarehouse.co.nz
www.yottaa.net
akamai-san10.exacttarget.com
pages.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
*.thewarehouse.co.nz
akamai-san10.exacttarget.com
www.yottaa.net
thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.yottaa.net
*.thewarehouse.co.nz
www.yottaa.net
*.thewarehouse.co.nz
*.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.yottaa.net
pages.thewarehouse.co.nz
www.yottaa.net
thewarehouse.co.nz
akamai-san10.exacttarget.com
petinsurance.thewarehouse.co.nz
pages.thewarehouse.co.nz
*.thewarehouse.co.nz
hybrid.thewarehouse.co.nz
akamai-san10.exacttarget.com
SkypeWeb.twgroup.co.nz
view.emails.thewarehouse.co.nz
www.yottaa.net
*.thewarehouse.co.nz
www.yottaa.net
akamai-san10.exacttarget.com
thewarehouse.co.nz
pages.thewarehouse.co.nz
pages.emails.thewarehouse.co.nz
thewarehouse.co.nz
*.thewarehouse.co.nz
curtains.thewarehouse.co.nz
*.thewarehouse.co.nz
sni.cloudflaressl.com
petinsurance.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.thewarehouse.co.nz
hybrid.thewarehouse.co.nz
www.yottaa.net
*.thewarehouse.co.nz
www.yottaa.net
click.emails.thewarehouse.co.nz
akamai-san10.exacttarget.com
hybrid.thewarehouse.co.nz
www.yottaa.net
extranet.thewarehouse.co.nz
*.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.yottaa.net
hybrid.thewarehouse.co.nz
akamai-san10.exacttarget.com
redmail.thewarehouse.co.nz
www.yottaa.net
pages.thewarehouse.co.nz
www.yottaa.net
pages.thewarehouse.co.nz
akamai-san10.exacttarget.com
www.thewarehouse.co.nz
petinsurance.thewarehouse.co.nz
cloud.thewarehouse.co.nz
*.thewarehouse.co.nz
*.thewarehouse.co.nz
sts.thewarehouse.co.nz
pages.emails.thewarehouse.co.nz
pages.thewarehouse.co.nz
www.yottaa.net
hybrid.thewarehouse.co.nz
www.yottaa.net
akamai-san10.exacttarget.com
www.yottaa.net
www.yottaa.net
pages.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
thewarehouse.co.nz
extranet.thewarehouse.co.nz
www.yottaa.net
hybrid.thewarehouse.co.nz
*.thewarehouse.co.nz
gtm-sst.thewarehouse.co.nz
extranet.thewarehouse.co.nz
www.thewarehouse.co.nz
t.thewarehouse.co.nz

Certificate

The complete raw certificate details for *.thewarehouse.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+u2kNUI/Yosgls/19j6
ZzEquN2nzXGCMZXyIHNJvewirshZt5lcKRgK5UJK43RBwbd9wpwiT7Ttu4d2GT1g
OTes+N6Kk4gBu+ew3TPevltxJPf1JrPXn4K1X0oUTH7qLlDDv93K4yF4SY+N6seD
uYNXOShMxgdUOB3sozbyq47C4TVxpDknD/Npa16z8jx/9HNqAKC9ed3RasctNgb4
/ZCMHgDnxaBBGqMPK0CTDA5Ltu4d0es65thWh/IvmJ1Fi948aU4J47QEj1f6fI5U
McICCm9kB4imPydyZomxTdlknabtW0VIMg48TVj+pyQKRywd/3r2IVsr8CZhDeAH
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73874694621160264659936316590402439646
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Warehouse Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.thewarehouse.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27762423272699681310742964643841724952382802306000277204205172922635756616952008555241156189859779137416533475960721731655784666668810542228661842748542511220884908606947231475567338487975430222612227308425691156241950558417961153254528084243621740153721023048043783771771404792664928074710514915384333211681379120660931319814977416615680716112929856532335633192231735081512969270735219963590244135708522876211152496690630386355542608856661236062252206647332508658486664867158760096084302245798406733222947196009133391223538205762360750328038563282413167305869279405445279549611602447620205025007284770684837476435761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewarehouse.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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