gulf.nzte.govt.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:ec:61:c1:57:71:40:7f:9d:4b:6d:5f:7e:0f:4a:c4:9e:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gulf.nzte.govt.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:61:c1:57:71:40:7f:9d:4b:6d:5f:7e:0f:4a:c4:9e:1d
Serial Number (int): 428885721322809677224073759980991161867805
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:28:b8:a6:3e:2a:62:51:04:ff:f1:ba:d9:24:04:93:8c:96:3b:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:13:db:15:a6:d2:61:18:c8:bf:ca:9a:ea:2f:91:6e:09:5a:ab:e1
Fingerprint (sha256): 68:2e:ff:1c:6e:7f:0a:7a:85:00:53:c8:7d:bd:6d:ff:08:47:d7:74:e5:b7:bf:9f:0d:e2:22:12:40:1b:48:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gulf.nzte.govt.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gulf.nzte.govt.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gulf.nzte.govt.nz

Other certificates including the domain name nzte.govt.nz

(limited to 100 certificates)
mm.nzte.govt.nz
investeduat.nzte.govt.nz
contacts.nzte.govt.nz
kete.nzte.govt.nz
gulf.nzte.govt.nz
creativetoolkit.nzte.govt.nz
my.nzte.govt.nz
loncitrix.nzte.govt.nz
campaignmanager.nzte.govt.nz
webmail.nzte.govt.nz
*.nzte.govt.nz
aklcitrix.nzte.govt.nz
akladsyncp1.corp.nzte.govt.nz
webmail.nzte.govt.nz
customer.nzte.govt.nz
*.nzte.govt.nz
secure.mydev.nzte.govt.nz
*.nzte.govt.nz
mm.nzte.govt.nz
hkgcitrix.nzte.govt.nz
secure.mydev.nzte.govt.nz
*.nzte.govt.nz
nzte.govt.nz
laxcitrix.nzte.govt.nz
my.nzte.govt.nz
campaignmanager.nzte.govt.nz
webext.nzte.govt.nz
forum.nzte.govt.nz
careers.nzte.govt.nz
coronavirus.nzte.govt.nz
Sipakl.nzte.govt.nz
my.nzte.govt.nz
creativetoolkit.nzte.govt.nz
creativetoolkit.nzte.govt.nz
navigate.nzte.govt.nz
my.nzte.govt.nz
aklcitrix.nzte.govt.nz
careers.nzte.govt.nz
kete.nzte.govt.nz
Webextakl.nzte.govt.nz
ketedev.nzte.govt.nz
nz-marketplace.nzte.govt.nz
gulf.nzte.govt.nz
customer.nzte.govt.nz
sincitrix.nzte.govt.nz
remote.nzte.govt.nz
secure.my.nzte.govt.nz
keteuat.nzte.govt.nz
campaignmanager.nzte.govt.nz
careers.nzte.govt.nz
authoring.web.nzte.govt.nz
webmail.nzte.govt.nz
*.nzte.govt.nz
airwatch.nzte.govt.nz
nzte.govt.nz
webmail.nzte.govt.nz
customer.nzte.govt.nz
customer.nzte.govt.nz
creativetoolkit.nzte.govt.nz
authoring.web.nzte.govt.nz
wlgarchive.nzte.govt.nz
covid19.nzte.govt.nz
*.nzte.govt.nz
ketedev.nzte.govt.nz
creativetoolkit.nzte.govt.nz
*.web.nzte.govt.nz
admin.web.nzte.govt.nz
*.web.nzte.govt.nz
mag.nzte.govt.nz
creativetoolkit.nzte.govt.nz
careers.nzte.govt.nz
*.web.nzte.govt.nz
nzte.govt.nz
fs.nzte.govt.nz
campaignmanager.nzte.govt.nz
forum.nzte.govt.nz
staging.web.nzte.govt.nz
creativetoolkit.nzte.govt.nz
gulf.nzte.govt.nz
tipu.nzte.govt.nz
*.nzte.govt.nz
crm13internal.nzte.govt.nz
keteuat.nzte.govt.nz
aklpmp1.corp.nzte.govt.nz
authoring-staging.web.nzte.govt.nz
fs.nzte.govt.nz
loncitrix.nzte.govt.nz
navigate.nzte.govt.nz
creativetoolkit.nzte.govt.nz
wlgarchive.nzte.govt.nz
crm.nzte.govt.nz
creativetoolkit.nzte.govt.nz
aklsfbfep1.corp.nzte.govt.nz
crm.nzte.govt.nz
admin.web.nzte.govt.nz
campaignmanager.nzte.govt.nz
webmail.nzte.govt.nz
tipu.nzte.govt.nz
creativetoolkit.nzte.govt.nz
learning.nzte.govt.nz

Certificate

The complete raw certificate details for gulf.nzte.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428885721322809677224073759980991161867805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 20:49:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 20:49:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gulf.nzte.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817536546908482479142791125328141845429851204517748989552911479243048691768471664129174724350680999679825777110937915696688357238176108380736837529397947850926628846228459501549785886127537389816675613008448639259132836066207334726352462796258907385381288554682903120988312335763868113921157764712208587887559090004811998587420874986878244666307454760108971149894143978123520833423163734727950512744239048351072704235492790896671335676334251105240674265364415273292679254273474083714477601944062880972941510934555722522596129791025198550991157231979483153735211931829512635135035264231957550000542344551475196380906274460266513589819051645530842275480431516189622627587609556357680414554835422417882124414627637226212843743399688907440637786563185227294424982533414687771994809234278644277774239789463910495560644289138931826823587432021287391963700150505800205298697380201711461556678887414377615449487812415781747942401844484436898835027535023136572201180601248593112191057472831032566931373038451343655586271494577234515948340718793557651751247092954098658483327935193192283105121601498500151500605254723235479096554597584606999758481153786916520681326388042246361209190184274948442238750930403482237740679302404679872092228863867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c28b8a63e2a625104fff1bad92404938c963bd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulf.nzte.govt.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b68d028be0000040300473045022011e3ec7c8cf0cdf6248d6a526754804d99280d6909ff9389eccb07e242e73a8d022100ea34fccdd136b1b6798c12ba803a4d89eca9fdc3d10eb4ec5fbcd79510c5d445007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b68d028e1000004030046304402203f87cd6ab304ea1ddcad39146c71dd64e9f421ac535acc3d07e8756af44d2bee0220609a8bc6ae91b951468ad9401dc2df80d1aa9eb80939aee9a2ee403029e31b1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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