www.surfcitycranes.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:9c:b3:55:d4:4e:11:56:a7:59:81:3c:3d:75:f3:52:b1:8f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.surfcitycranes.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:b3:55:d4:4e:11:56:a7:59:81:3c:3d:75:f3:52:b1:8f
Serial Number (int): 314659284497481614295096817003820238418319
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:e6:69:fc:00:0a:27:93:d3:05:96:c3:de:d9:86:b6:8f:44:6b:61
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:bf:8c:06:ea:c7:3e:9a:de:6c:e8:20:69:3f:2c:87:a3:ba:06:a9
Fingerprint (sha256): 6a:c4:95:d5:76:76:84:74:ad:a8:44:6b:28:c5:3c:fa:df:69:d5:2e:b5:ab:c4:46:8c:d5:75:15:da:dd:b3:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.surfcitycranes.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.surfcitycranes.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

surfcitycranes.com.au
www.surfcitycranes.com.au

Other certificates including the domain name surfcitycranes.com.au

(limited to 100 certificates)
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
remote.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
www.surfcitycranes.com.au
remote.surfcitycranes.com.au
www.surfcitycranes.com.au

Certificate

The complete raw certificate details for www.surfcitycranes.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5C8O3ryBscxDrWCr3/
izK0dE3MsbaIfcu4epnFYO51N34APYie4LixlI3mMovQ7uvggdwOkuvteH04BdFU
7lj6KVZFDy3LrYxaMZ9kajBoqpbiFxD4Oztk9iLuvMrsLvyuNRJfEyP5awb/npjn
asUsGKES4Ky3m6GPt20HZMq2F3rPwuiz/8+9QT05Y8P4N/RYSJ+Xycp1P+xYgdpj
1O5w5TxGfpHhBE6OVypx3i3M7GsXrBMwDzKHmUvholIF4a5fWUscst0qjdOPetaL
no+7BPPfGY2I/boAjOIxrqWWLGdIWJbbDACEFxrBrhjjuXs7njo7q0B1a0gP7oCe
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314659284497481614295096817003820238418319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 21:44:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 21:44:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.surfcitycranes.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22501120568370876935012658456061567503519689523807063739235442865714132929591705514077576021300211393182910632387393602286871668743085353463001310522652584121989283677203330650148579526570159806961037655825628380673602243247134870243139097064052795169316725351053416962151553101456296211499359865264262204308797046258513440130852992744754706439614386151998450587960434181555266677209254844791357339681208386361262944953089374334098302533237654412910798183996279559478940203709196726336914031223398921265411745624553005097335053749149534420804196546745188507864064984561053929703958083209897349929250224476671602368071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95e669fc000a2793d30596c3ded986b68f446b61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfcitycranes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfcitycranes.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4a1c3494000004030046304402202e8935660d0d07aad30f88ee8aeaa95e298cf879f3e47eb144a67e612201523f022017e2c498dfce3991110733d63615a05fd730459e86783648f3c95fa5e3627594007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b4a1c3481000004030047304502207419af22a913f618a5d562ef74a61fc43e2b8c297f948b34a3265bae53e75e84022100a9afae1afd50d83385aaee4fb38e30ea52d08a17efe03d327f7faff214d0bbbd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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