www.symphony.net.nz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:cb:c9:57:49:f7:2b:33:30:ab:63:72:ab:4f:e5:63:c5:6f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.symphony.net.nz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cb:c9:57:49:f7:2b:33:30:ab:63:72:ab:4f:e5:63:c5:6fSerial Number (int): 417794092269169582238087491601538404828527
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a2:21:82:11:df:1d:d6:c9:e8:fd:ce:c4:80:2a:74:50:d4:f5:31:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d7:43:c0:34:e7:fa:21:8e:db:99:ff:16:cc:1e:98:b9:2c:5b:2e:3b
Fingerprint (sha256): 82:6d:7c:fe:b3:9c:50:71:76:46:9f:f2:88:1e:95:53:25:b6:ad:ad:a6:7c:fa:8d:08:e7:9f:6a:31:95:27:60
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.symphony.net.nz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.symphony.net.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
Other certificates including the domain name symphony.net.nz
(limited to 100 certificates)
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
www.symphony.net.nz
Certificate
The complete raw certificate details for www.symphony.net.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISBMvJV0n3KzMwq2Nyq0/lY8VvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMzExNDAxMTFaFw0y MDAzMzAxNDAxMTFaMB4xHDAaBgNVBAMTE3d3dy5zeW1waG9ueS5uZXQubnowggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ5r0eNkDAQVOm5WLVetgq8vrA SGT79rQplivI8oO6Z92tIeDioKh+5ibUd2qO6f1mMsoCEgMAqzOFc5vwFPKrZUSr rkIbb93j8Jap9SMWaM7QegAazkwIb94vnkPEAjjVUl3kMmr+Yz1Y3+v2bHBudWXx 9AS3lYOfdSvU/+NNL5NrlOygyu1eAHU4XwQ3XFQqmop9Gu9cH30S4KFgTw9By8gf qu/HyEo+ozhinV+6dh4Nh0tQJp9M3xK6/aC4O91fofFCdgcGHYN1Qu4LtW3HRoZ4 UUsOWvi/lmemDoCUjv2mrkZdrB7WctorvaxnePG+eDqUGENu1Jh8we8SUaeLAgMB AAGjggJ6MIICdjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKIhghHfHdbJ6P3OxIAq dFDU9TF/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wLwYDVR0RBCgwJoIPc3ltcGhvbnkubmV0Lm56ghN3d3cuc3ltcGhv bnkubmV0Lm56MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYB BAHWeQIEAgSB9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqO snMAAAFvXHmeGQAABAMASDBGAiEAh7e/5GIAZfmqHL7zCDiUyfj3jcoAr4GoIMN3 GuHMk5UCIQCRg1eHTkFhcvts7f4mUtROVGnFyv/I//QpMqNipwfikgB2ALIeBcyL os2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABb1x5ngwAAAQDAEcwRQIhAN+X Wgc2GhiONWrLlrrfTAi/ta5h8jwrig3VHDy/RVbcAiAE2QgNge7p1ocYRShxtCgS i6qRAbPTljmRd4x1VkxvVjANBgkqhkiG9w0BAQsFAAOCAQEAkxOGeTW4J8VjSLEU KZo1ZApuGtxblLVuxVC6H7c8M7KwB2lINe3IK9bnbdzrqz7wfaQwfP1XhACgijP8 5Sd9C33s9iEkmEv5itJkvlOaxsqZz65wxd4HoynHmvb4S3DtfiXUCZTFF5dA6Iwm nIgKF85KQRutErvrG2m7rV3I1f5EkDFwnY9u0CNEN6RsNLHyqfuTLjiywv7xQ3TH 251Vjxi3s53SZOfABiPScJUxzjBRi7eLWgaNRLcESDWLfjHg1bfWe9XDUuN36zWj p5hrLSMKsBXlsuu5X7CK6SQu6dzOc5+IqAYAlZ8Hkkis1VxwFIOq4ri4u/56r1Eq 6FW17A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmea9HjZAwEFTpuVi1XrY KvL6wEhk+/a0KZYryPKDumfdrSHg4qCofuYm1Hdqjun9ZjLKAhIDAKszhXOb8BTy q2VEq65CG2/d4/CWqfUjFmjO0HoAGs5MCG/eL55DxAI41VJd5DJq/mM9WN/r9mxw bnVl8fQEt5WDn3Ur1P/jTS+Ta5TsoMrtXgB1OF8EN1xUKpqKfRrvXB99EuChYE8P QcvIH6rvx8hKPqM4Yp1funYeDYdLUCafTN8Suv2guDvdX6HxQnYHBh2DdULuC7Vt x0aGeFFLDlr4v5Znpg6AlI79pq5GXawe1nLaK72sZ3jxvng6lBhDbtSYfMHvElGn iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 417794092269169582238087491601538404828527 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 14:01:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 14:01:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.symphony.net.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19428242174304281366804039644262492011762880857169683079118150579148376189458601970032956493978203129901389155515125860086206643234254893255712325599108453242370206151827798378641533439330895320929897350080256943716148413982253891226719492860811731194110267940867715888501336892747862844789900308619369531402891692724562594832116700664441770890102492935430950410510526514046980290990772886084914983064903707765227358181793594835061818458738865430465525807233012623081480544798442172167053771512766778031236055766758584136999101887055069597088506085290626386983508038287333290339591155180964417911709087285406457767819 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a2218211df1dd6c9e8fdcec4802a7450d4f5317f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphony.net.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.symphony.net.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f5c799e19000004030048304602210087b7bfe4620065f9aa1cbef3083894c9f8f78dca00af81a820c3771ae1cc9395022100918357874e416172fb6cedfe2652d44e5469c5caffc8fff42932a362a707e292007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5c799e0c0000040300473045022100df975a07361a188e356acb96badf4c08bfb5ae61f23c2b8a0dd51c3cbf4556dc022004d9080d81eee9d68718452871b428128baa9101b3d3963991778c75564c6f56 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009313867935b827c56348b114299a35640a6e1adc5b94b56ec550ba1fb73c33b2b007694835edc82bd6e76ddcebab3ef07da4307cfd578400a08a33fce5277d0b7decf62124984bf98ad264be539ac6ca99cfae70c5de07a329c79af6f84b70ed7e25d40994c5179740e88c269c880a17ce4a411bad12bbeb1b69bbad5dc8d5fe449031709d8f6ed0234437a46c34b1f2a9fb932e38b2c2fef14374c7db9d558f18b7b39dd264e7c00623d2709531ce30518bb78b5a068d44b70448358b7e31e0d5b7d67bd5c352e377eb35a3a7986b2d230ab015e5b2ebb95fb08ae9242ee9dcce739f88a80600959f079248acd55c701483aae2b8b8bbfe7aaf512ae855b5ec