mycollege.stcuthberts.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:82:09:93:37:d5:82:a4:09:e7:f5:23:24:cd:86:b1:f4:52 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mycollege.stcuthberts.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:09:93:37:d5:82:a4:09:e7:f5:23:24:cd:86:b1:f4:52
Serial Number (int): 392698578878811813877523354334888327246930
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:43:56:c4:5d:30:46:2f:95:ee:b1:ad:db:97:bf:73:d7:5c:88:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:2a:ae:54:b9:b0:ce:a1:65:8f:47:fc:0e:0f:74:28:58:97:e0:47
Fingerprint (sha256): 7b:7f:5d:91:92:b1:52:bb:aa:cc:e5:ee:0e:43:37:f7:e6:18:0a:94:10:81:d8:ce:50:be:89:6a:d2:77:0c:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mycollege.stcuthberts.school.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycollege.stcuthberts.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycollege.stcuthberts.school.nz
schoolbox.stcuthberts.school.nz

Other certificates including the domain name stcuthberts.school.nz

(limited to 100 certificates)
mycollege.stcuthberts.school.nz
stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
*.stcuthberts.school.nz
schoolbox-testserver.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
schoolboxdev.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
sni.cloudflaressl.com
ptlycert2.ptly.com
stcc-clearpass.stcuthberts.school.nz
idp.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
ptlycert4.ptly.com
*.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
stcc-clearpass.stcuthberts.school.nz
stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
*.stcuthberts.school.nz
sni.cloudflaressl.com
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
servicedesk.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
mycollege.stcuthberts.school.nz
idp.stcuthberts.school.nz

Certificate

The complete raw certificate details for mycollege.stcuthberts.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlBD0daukea/xS7kAqok
pQZhkifGgzczsAoZFaeqoScFjugC+9GRsq9pXfzCNYCitHZOWP95TTvdOEIwwi2D
rmM5G/fZHYx0FqcEd4Idm9l65R4lW7b5JvwlRGeWS8ORX20Lw8IAG2tXPPHyxaCS
eM0xMCY8HwU7gBzXNj8Ef8XbyWjOkat7b/FAr1lb5U++Dloankrk6KIDgR2Chsce
yIZ19+SERxe5ERPJG1zzTUgle92TVDVBfiGc3QuDjecsvniprblN2G31E9jVMCyR
olVSKo0aS/n9IF5WZbbF5iXXk2ko0mHmOVrD2yeJNluv2xCxZyLjLHQaTde2O6CA
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392698578878811813877523354334888327246930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 16:15:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 16:15:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycollege.stcuthberts.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25034764490814526140127852808720252538525946381010427196078807467028974634150072105149737501026458293180588569856294892624060520353080331553600940800691519409078946066671492974055317930947160390609472488830230420193536537527444749694513766865022267000934779695158801822972812636384366855152245462403878446478906030884581151060422869309397357956483339938375811946169624169377382979285374531928709662554937326058862816076454269388171183736986612305031551520458986189892323778784078945116076734213911170661653029193237043310542749143055061532753407750887568782528255324171167100907123196866095775079256682488574750261257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db4356c45d30462f95eeb1addb97bf73d75c8863
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycollege.stcuthberts.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolbox.stcuthberts.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165a594d17b000004030046304402202b3b14e7ea2d526012147f8466f5e53a8464219c4d53e9c2cd1f7dfb038629910220781dc78baa74f7cfffd299752aed0a5bc270bc62ceffb7b36141457356ef1fda007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165a594d1700000040300463044022000bb96eb751319d31a702ba3af8fe422122e9da3d1bd9d3f7af29b600c085d8a0220466267bc3b0eaa28e8a5c32b656e730a3c01a49a54ca81521d3356dc07214e95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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