nkba-api.aus.simplesoft.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:77:e6:0a:de:15:0c:4d:c7:1b:5d:43:88:ff:01:eb:44:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nkba-api.aus.simplesoft.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:e6:0a:de:15:0c:4d:c7:1b:5d:43:88:ff:01:eb:44:15
Serial Number (int): 389248524256994311008813401443111547913237
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:34:a1:aa:f3:cf:22:7d:03:38:80:d1:bb:36:05:19:90:3e:75:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:46:af:b7:81:bd:d2:dc:2a:a5:3d:01:3d:5a:2b:6f:c5:60:4c:b4
Fingerprint (sha256): 82:cf:80:d3:ca:f9:06:2b:d7:50:08:0b:38:a0:ee:46:9d:04:80:30:a5:12:d8:ff:fc:c4:39:5b:b0:c3:b7:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nkba-api.aus.simplesoft.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nkba-api.aus.simplesoft.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nkba-api.aus.simplesoft.co.nz

Other certificates including the domain name simplesoft.co.nz

(limited to 100 certificates)
app.gioiacard.com
v1.djldev.com
www.krypto-mobiles.xyz
success.waldenu.edu
mech.parts
nkba-api.aus.simplesoft.co.nz
app.enhancedapp.io
www.caterscatering.com
rival.ly
www.anonymousrequest.com
www.fastvb.co
market.manybuild.app
app.lockone.dk
api.critterpic.simplesoft.co.nz
metalparts.hu
www.ukraine-back-on-track.com
api.critterpic.simplesoft.co.nz
penzionstaraskola.eu
app-v2.aiii.ai
yocorroporeldravet.es
linearpad.linearbits.com
nkba-api.aus.simplesoft.co.nz
www.gzz.me
www.institutoexito.com.br
yocorroporeldravet.es
schoonheidsinstituutlaurence.be
api.critterpic.simplesoft.co.nz
dot.polkashots.io
elsewhere.xyz
feedback.cemtrik.com
api.critterpic.simplesoft.co.nz
datavideo.felixxgroep.nl
core-api.dev.aus.simplesoft.co.nz
www.aapsinvite.com
mehsys.com.br
nkba-api.aus.simplesoft.co.nz
rival.ly
beanstalk.simplesoft.co.nz
www.mywellth.app
api.critterpic.simplesoft.co.nz
www.balticinternationalgroup.ee
verisure.verbeterthuis.nl
chicken-dinner.com
www.ifdef.io
0800hungry.simplesoft.co.nz
store.nithinorganics.com
hub.contract-jobs.com
api.critterpic.simplesoft.co.nz
api.critterpic.simplesoft.co.nz
www.songtue.com
terminal.doorjames.dev
fanlife.tech
simplesoft.co.nz
nkba-api.aus.simplesoft.co.nz
beanstalk.simplesoft.co.nz
www.advisor8.com
app.g2g.church
nkba-api.aus.simplesoft.co.nz
api.critterpic.simplesoft.co.nz
grhapersahabatan.org
plaintext.sh
app.enhancedapp.io
staging.clevertrack.dk
betiaenglish.com
sunnyspotpetsitting.com
mustsolar.com.br
app.gioiacard.com
api-test.landskies.com
api.critterpic.simplesoft.co.nz
api.critterpic.simplesoft.co.nz
nkba-api.aus.simplesoft.co.nz
www.nobelar.com

Certificate

The complete raw certificate details for nkba-api.aus.simplesoft.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389248524256994311008813401443111547913237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 23:21:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 23:21:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nkba-api.aus.simplesoft.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907554528270527044108080020555910123728570082717525437557580323265251056775312950181939700356900641211104850824582220560322028824574830249026710577317172044502778852138605574609889386354138078074127950224530106658285027686766749795709280863153389517485067765211468320762218651612869641123033696088999078965642049669937096486417432414697869209449266958537340299391776518894063270410596168273660942562042005265051286207179246587286803095970974010429155187770544330803648161369856585203739031425874445809572016117610631294398829500813178248396940192478865351253697163939049473277714009991222214052250114398289934121279089761624722746916309006704232990142820085643034459777488093325882561581341924245889900094802869702432016248483662704209725773218037740506784895049103055814274041604528334772926038767469109094651762406583883602660752645969929214692350939708468978023072753819821199981683942157047202160526486785814832802521724719583126031668096496446161087690584604040046015025708044125492392464999799042303268550496307955347783974736914927274517075263652838206778290318137984211017264882499534731601835612947879566442740344285544325304281708986574096493987833236593821211886302413728087373622206809318992982423530310661293064948983471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc34a1aaf3cf227d033880d1bb360519903e751d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkba-api.aus.simplesoft.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c73c0e8e4000004030046304402202843394bf91be65b6a8627cdee0fd8db2b64122a0d0a6fb188712c3d86f5fa3d022038b29ee7c4fd7f9593879804af0ee5580211ed5e862476f310f5a17be1f669de00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c73c0e8d70000040300473045022100964ab466aa3bfc918b1326f64305a7cbc4e75ad1246bfe033a6919cb6c02561d0220529b9db1f0fea9faa8531c13af83c9bcb7f6edae320fe2fea4b518918f7f49ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a93f908b54cdc9a30550a5e44f748fce0244120c5ec4fdcb2f274236719abc545f2e41b8d9fad1b37e6d0a2b4747619ccdb5c0b4610d3bf683d63329ad4cc9ef4a2cf735e0d47c45acbd7e16da9915b2373a559be7bd5346039e444f3212a5234595165429e3f00d06390df50fe42753942e2d02b2e4128cc40b1bd305a9aead82d5a433244afbb0329ed80d98effa5f36fd52fd8299e1de945900f0a6f6d46e6cefc798aa0962e0d81960cfe2c756eb09431c5480aee9f837328d6bfc8bfe6233a911d504e7a28ff86401fd3cb987b8b9f74686855afe99473c67461072e1a52ef6874e95044118d0bff50868522a19c131bee8cf962be72e2d957b93ab816