desktop.hnzc.co.nz

- Housing New Zealand Limited -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 24:a6:c2:e6:af:a1:60:3f:15:79:70:cd:ca:fb:d1:5f was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Housing New Zealand Limited

Organization: Housing New Zealand Limited
Organization unit: ICT
State / Province: Wellington
Locality: Wellington
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:a6:c2:e6:af:a1:60:3f:15:79:70:cd:ca:fb:d1:5f
Serial Number (int): 48718082191069207802300975272362234207
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 7b:f1:8a:b9:12:a3:13:4c:b2:52:36:6b:59:d4:16:12:29:e0:5f:bc
Fingerprint (sha256): 81:2a:11:b7:9c:a9:23:69:a5:f3:ed:ad:c5:ba:03:5d:e4:a3:67:df:1e:c2:a3:9a:bc:18:f6:f7:57:db:7f:18

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate desktop.hnzc.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desktop.hnzc.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

desktop.hnzc.co.nz

Other certificates including the domain name hnzc.co.nz

(limited to 100 certificates)
close2home.co.nz
sts.hnzc.co.nz
mail.hnzc.co.nz
access01.hnzc.co.nz
www.hnzc.co.nz
mail.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
dev.hnzc.co.nz
PROD-SEC-MA01.hnz.co.nz
*.hnzc.co.nz
testsftp.hnzc.co.nz
access02.kaingaora.govt.nz
close2home.co.nz
NPE-SEC-B2B01.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
access01.kaingaora.govt.nz
PRDR-SEC-MA01.hnz.co.nz
access02.hnzc.co.nz
close2home.co.nz
ucweb02.hnzc.co.nz
ucweb01.kaingaora.govt.nz
close2home.co.nz
uatsftp.hnzc.co.nz
stst.hnzc.co.nz
mobile.hnzc.co.nz
careers.hnzc.co.nz
sts.hnzc.co.nz
*.hnzc.co.nz
hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
stst.hnzc.co.nz
sts.hnzc.co.nz
desktop.hnzc.co.nz
access02.kaingaora.govt.nz
careers.hnzc.co.nz
ucweb01.hnzc.co.nz
sts.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
desktop.hnzc.co.nz
*.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
close2home.co.nz
desktop.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
mobile.hnzc.co.nz
close2home.co.nz
close2home.co.nz
apps.hnzc.co.nz
close2home.co.nz
appsadc.hnzc.co.nz
close2home.co.nz
desktop.hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
desktop.hnzc.co.nz
www.hnzc.co.nz
prodsftp.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
careers.hnzc.co.nz
ucweb02.hnzc.co.nz
desktop.hnzc.co.nz
close2home.co.nz
*.hnzc.co.nz
ucweb02.kaingaora.govt.nz
close2home.co.nz
close2home.co.nz
hnzaadexpwe01.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
ucweb02.kaingaora.govt.nz

Certificate

The complete raw certificate details for desktop.hnzc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48718082191069207802300975272362234207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Housing New Zealand Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'desktop.hnzc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905848055876505518313007706552224911433437193737160398109556196670775360658723393877642388479721729214315292604316832871145735679148160645347178611999592784171380090257056677239595780827182426004178182976866631914839380782335990237232529214752854206821405429353699549850526254156734270723289011930551755831089919556171833752634412191537973451186316395328237480632995507916195217946388008464490451504727203175871462198978487707425611007741431368698629838024854528761883995448777732524385332281404005148552235965543781049432190665211772846315193033471750494104611773175369770055624419402945779876128397744521762568158237508152436193611104367908853923688039655825732705181971357560283217912512687634461908710730236095297791807713128316493242991256564312528059086473075075475127981010437361803464113906410372343516581161409511586132057253085402853952688203439037645823855616993409265077216533307661869755275204537561616900009470539337529276111332250437009454548955276763650624385826012815470821201851426569217250288180906641646860921600807140067876018803346090341481948892037395015965658236130076649055510193918729824158876622393302037098103781944666271245658257000269206122058602130934075651003415126719946102933012601302765179633555903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop.hnzc.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003979512e4260cf537945ba2c0bca12236c23a5ec2a5eabd5b3e7e4af27d2385d22b76c8fd2b238a58d1f87e8703241f5501e05f1f0443fc85847b051d2fda762690ff0cbc54448506838826bd3b9fc3365367e02acf1a8f2148a766fc0ac1ce858d74b2bb157fe9d4c820bab6192efa761e9f4aa65d6d0c123136c93a75109df2d63f519c25c60c99c85bf15d41750e1b0d3b265267bbf8aabb2c29b452bb83f062d2e5f8776d04b759473199b8a622a5a53e3fe9e478379208e97245ea7f9744f8afc52bd4ac34c41027dfb400fe00397902537e9c2c4d35744db1f4cf91f8232537a7ddbeda5fc8ca9e8c74f6e55556449f8f2319601cefda40f426f9a03ac