sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:85:a7:55:89:5c:7d:69:e9:78:4f:f2:28:21:e5:bd:66:4d was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:a7:55:89:5c:7d:69:e9:78:4f:f2:28:21:e5:bd:66:4d
Serial Number (int): 306816837802312532309184537484783265867341
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:c7:f4:35:96:b3:31:a7:bc:25:6a:ec:9d:93:06:d8:ff:bb:f3:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:45:58:a1:b9:d5:58:66:6b:63:e6:6d:c2:49:c6:ee:e1:38:90:7d
Fingerprint (sha256): 75:79:55:76:a9:71:5e:fc:c1:92:c5:48:37:46:27:32:bb:1f:a4:12:73:2b:88:fc:84:1c:93:13:03:8f:64:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticssouthland.co.nz
belfastnetball.co.nz
belmontparkbowlingclub.co.nz
bophockey.co.nz
dannevirkehigh.school.nz
evolutioncreative.co.nz
hereworth.school.nz
hockeysouthland.co.nz
maristsaints.co.nz
matarikihbrds.co.nz
matarikihbrds.nz
merugby.co.nz
ourplace.school.nz
redbeachsquash.org.nz
sporty.co.nz
stmatthewsprimary.school.nz
wsff.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ibVCnmZicm/uOYd+14
vFJQOnzfLxSPFaYcVnvodSwOzxxpe1LwlxBceMK59AYvDgn/1fW7VFsxWEQ84pjj
Sb7N0L4XIbaIQL54Ylje6xCubInBmz6wGOzYEB8Ym2fu+l46WB1PkNbuR+CMk/x9
szPham3z+FB2ySyMgaFGqtFwWnjy/VpbStE0HVM4ABDiJgx1WPoxk5EujY19i8kv
n0lXgJrbCrT5Bqw4MrLNkKzSInKmy51iIbMsZWCcM1607TNbXum0LleLHbJDNIrg
ilHOAJf7L2oz4KahZnxOBf/sYhZBZwjglM+VztTNDUiWewndWC2WhOvfXG/A3knW
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306816837802312532309184537484783265867341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 20:10:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 20:10:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26711535542460598784313158749550126132340873834422215732872088042837497890663269199404317015548714882600832547288337840257460867572603418287997444757420335650726795821160526456720166622762032805548639635604972249076127455647382762320704201689210895054954195843821038064547646174616390368145588706060556443372767358601423834849734407054635200336004401058324343630631060282751166052626482275992873830012004634857982950399068898892978803984452251030086888338918536258059590450242530278814420888958253363693559314812569741382717489792912894208904958738482610922262181836805064243600321145746473337403178491079993282123393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38c7f43596b331a7bc256aec9d9306d8ffbbf363
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dannevirkehigh.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolutioncreative.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hereworth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristsaints.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matarikihbrds.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matarikihbrds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourplace.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbeachsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewsprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsff.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018946caede2000004030047304502201ead55884bba29871adf413e9297a6059a2f1a4aea3310eb0906a23f2c0f3eca022100d8694ed8c7267e099dfd65270e2873a178df775642df928511666bc84ab02d320076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018946caedf3000004030047304502201712782d1ec03b6c1c812ac7bff6b19cd5d64fb2fc12101f5e3211f3f86e0bbf02210081b15903a328ec5d737a5a8a473e7f9c8e387cdf0333f00ab12cd977ae584c44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f437cbaca9bbab8083989c686718fd629a27ee79c03dd5464d947c020be11aded2de4c8cca793e99ed2bee2e4a93a5bd3410ef5421d056d80a2624993f24deff47c200f9e94815945efc6061ed91d8631c9bb4c11fdd1e0704fe67bb5ba5e8b5fe5b7450524d1fe07db1c994da05661aca997359c1557a37d8de5203e4af2ed7df36eaa6bd2501b5d3d0c739aea29ee97df33db3a1addc5fe5d84c315fc57452d6b830b56085daaf6b5a484066ac42864b945755065eb3da2d8634ad6fb719242723ec90f5167b8d14ddacae896484a4421c3e6e4a0efb0a15c0c1151d09ccfa664a9eb0a1093ba648c4f3c7ad7a2abc858f0a44278ee52c6d7356bae9d659e