jbadams.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:af:5b:f0:09:35:e1:90:06:c3:84:c5:8c:69:5f:0b:d1 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jbadams.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:af:5b:f0:09:35:e1:90:06:c3:84:c5:8c:69:5f:0b:d1
Serial Number (int): 305806657761787260870187527950744143465425
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:3c:a3:54:c5:08:7e:97:a3:b3:9d:94:6c:c5:f0:c3:e9:0c:a8:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:a4:00:73:67:d1:d5:19:78:d2:d2:ad:54:05:68:60:dc:a5:55:9a
Fingerprint (sha256): 6e:8d:fc:d1:27:f8:e6:ad:d2:d6:2e:e7:4e:a0:d1:0f:f6:9e:86:41:23:c8:bd:5d:44:de:d1:15:6b:5f:98:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jbadams.nz

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jbadams.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

craftywekalanding.jbadams.nz
gotrax.co.nz
jarryd.nz
jbadams.nz
results.odt.co.nz
results.star.kiwi
results.starmedia.kiwi
satherleytransport.co.nz
www.jarryd.nz
www.jbadams.nz
www.satherleytransport.co.nz
zukboard.co.nz

Other certificates including the domain name jbadams.nz

(limited to 100 certificates)
jarryd.co.nz
jbadams.nz
*.jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
pamelagoesontour.com
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
pamelagoesontour.com
pamelagoesontour.com
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
pamelagoesontour.com
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jarryd.co.nz
jbadams.nz
*.jbadams.nz
jbadams.nz
pamelagoesontour.com
jbadams.nz
*.jbadams.nz
*.jbadams.nz
jbadams.nz
pamelagoesontour.com
pamelagoesontour.com
jarryd.co.nz
jbadams.nz
jbadams.nz
*.jbadams.nz
sni.cloudflaressl.com
jarryd.co.nz
*.jbadams.nz
www.om.jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz
jbadams.nz

Certificate

The complete raw certificate details for jbadams.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoujUnlrXvGCRhqrOCwVB
3pNOiu8F2UAd0xJnrwDkw+Icz+1d/b/0ml0zArPgm9DKVK3H25MHZfQqlK3BVAiI
hsweRZzZxe4GRabch3FtjpuEaPY06luaj7qpSC653jhSKYH1lZEZZ3vNof19VOjv
BW4s4wGfYmW+2mSqurF28vrdlstD35AcqefTyj4Fxts0TgXRUJQQTt0mKqddy01Z
d75Ki+O0DtdHOHF5L6r6cpWXx3a4F0nzVID475ilRSiylJ/LEtAeEEqCD3VS8vKH
9h8i/MoaLiQx3oUU68KrjS9rUDwkscqWWFUUcTkpJhI7fUBz2Nd4QH0516/eAM1C
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305806657761787260870187527950744143465425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 08:42:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 08:42:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jbadams.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20565418423557985072164412632660497253760815171751615027519593520664969649857786831513634570870438472112003908799755261179873223163291556084871900044799107693155821673297631903510294441856275241009515889635787389002032501916154873727812662397315541676392197133037654343293875820796117957415335762994002992805214154785230635648698911826183502336929572059364465639855683900630549909508196416875465240389440273557388521595866444020566446039903305415099689654494155075304212030106193048292937988966185981802912066481822695123881699995012845104426813979989751039606091963818361563271846828623938531058370659666882592588359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							703ca354c5087e97a3b39d946cc5f0c3e90ca807
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftywekalanding.jbadams.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotrax.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarryd.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbadams.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.odt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.star.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.starmedia.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satherleytransport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jarryd.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jbadams.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.satherleytransport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zukboard.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cae6833da000004030047304502204b9d26616e76a8accf9d19236a9cb92dc0d67c6e420420a8a09cc8242c68195c022100c48fed8bd81ec688bbbcb7eeab40b70043bfce853e79d2933ade8bafc029381d00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cae6831d60000040300463044022038edf9b74b724d8a17d3c48e441a74ce9632fa697a7c99af670c430f62fa1f4202205510ee7986df228aae8ffe998234a5d3bc050e24ac60061ed35d10283de58be0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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