fabians.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:e4:32:7d:e8:76:b4:86:fb:dc:c9:20:4b:ff:6a:9a:24 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fabians.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:e4:32:7d:e8:76:b4:86:fb:dc:c9:20:4b:ff:6a:9a:24
Serial Number (int): 344669081475590484220356326671682386958884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:dd:cb:15:26:be:80:ca:ac:c9:f0:c5:9a:26:07:93:df:5b:cc:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:72:09:e9:56:45:8c:b6:db:fa:ea:32:1c:0f:6b:30:4f:a4:42:5c
Fingerprint (sha256): 80:29:3a:19:33:b2:25:91:27:5b:fa:dc:8a:c3:fa:dd:d9:b0:01:e2:38:96:e9:b2:66:e9:f9:67:9c:91:63:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fabians.org.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fabians.org.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fabians.org.nz
www.fabians.org.nz

Other certificates including the domain name fabians.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for fabians.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344669081475590484220356326671682386958884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 12:59:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 12:59:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fabians.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905860979461311027087414861496780868611456331503361472291504518382275659695313125876095935241200048114493496675332619317984924547643243063463858092785890675878250005328796345552383128758105293361114985705724632676472218780326535641414873572265314186047390852653958193511875500713450140910470794435176459060312595095863997750824344513076256667931166266650062868204075354002420796646703612608312522523060493193504681600135583157320784763054052618604853503909900845195284968276521321826075357636638542277727834190158114242113512836896129424599053084871300585548461873501099666134163980852954111643131695225660003324124053984505316818856190253616991866682574197721285850429668713545326319290415507023297280352572066046310989291737092335491071723814507870065221384998596091017749165649513756830684918330594367626203412160074618725529445819549316268130484802420429191247088518997694666338099959171278065239833938682546638313605922721913487806261620576029521938034719178922971146544118482868279565417484057038740378102601715189459700533880854389832268043113512504795741364987899904490755195008267444192450050881604128275058265059230725532168134693709894022657913393667172708582770421644532969933651814774265436619236437791372351434136701831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33ddcb1526be80caacc9f0c59a260793df5bccb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabians.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabians.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f9f33e03d000004030047304502202d4782721b5608bb9b43b527ce420a932a1acafcfdbbae628a69f6a41882cc1d0221008fbefd798a02905ec7319899aa38a3231a18250cab79044d40950935f77a3d260076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f9f33e0fa0000040300473045022100f9d403c04822002667b12b295145692e523394747bce684a4560fa3bd9ad2114022041429a39302e42257c26bf2071ab0d57d7e516a3f6d8d290bc9bdbb74f3751b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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