designawards.redshift.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a1:3d:41:1d:b3:7a:08:37:38:51:c1:42:8c:38:d9:60:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=designawards.redshift.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:3d:41:1d:b3:7a:08:37:38:51:c1:42:8c:38:d9:60:9e
Serial Number (int): 316203739879000003888843582045099459698846
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:bc:b2:ed:60:cc:4c:50:ef:c5:6d:3f:57:94:7a:6d:6a:39:0b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:86:57:73:d4:2c:9d:8d:f1:22:f6:39:46:2c:3a:00:60:17:3e:e7
Fingerprint (sha256): 8e:3d:24:3b:d9:70:a1:0a:72:50:5c:a7:99:96:5f:1c:e0:e1:74:71:0a:90:7c:a3:d5:d8:38:0c:1f:09:df:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate designawards.redshift.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for designawards.redshift.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

designawards.redshift.nz

Other certificates including the domain name redshift.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for designawards.redshift.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316203739879000003888843582045099459698846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 01:12:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 01:12:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'designawards.redshift.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694346185888268823690302030789331402650208884894916199945479879987787640326425388371274488574640768835637285277149978378333730452516310211196203729531530954798106460302655975743820918841550442883915835991979409449725874390354686530623436038143719176681791518890865062937734294102890467810084665819071588043992468060646478395025578535147109614986726432754266233146281980373096528926675215436941535486714181043957603085560419259243091716152810256602948756648460638699470075757812849599385116716081502286453876293877766220292051523147155668520202636351993564368579845114375514417772532187586195557065699947405598902176891179165194023017211268529026553654224988132260938848259756419959053638370531473005177090226496308701465426458435713113244477484082798747568078570177990289487540483704580483770642714004773791236368379683666047311126435889761670662226990057243275861716783064220566365666018846312423898353707961300850094372782935522676642731770065815923456861534480405749849609094089700815029623223523758260741811928230443477958417672325711291359871645390645111667727766833537351198661891689420920553806960382461599198124878056732380106476807872089301053600870290400861095950493795039264514374513570107971525489691059599982762472189053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebbcb2ed60cc4c50efc56d3f57947a6d6a390b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designawards.redshift.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e7c484927000004030046304402205d49823f342c6e68434955f0b4164c0196a654ba26359c1b291f580636b0a7fc02205e3553c75dd777da78b9bfe65015e4915a071a24d02443b76b1334831783fbb2007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7c48491900000403004730450220369e06267d1aa86672fd8c2720b48a1fa883dddf0cf737476fd13e9049689969022100f976005aeb1975fb723e10bc69bf16894220cd1749f9e60b08bc661b24eecadc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019c8167f3ee16f10304dd0d3ab5df52d08938e62ea5dc0ee8ddb7870e7e10ba87e307a9b419d768031d964f6983d372c686baf54ee023918e3ba5d7f2b242c361f2c67aad87e79aebae472d57089468ddffaa89afd35eb44578e38ae582599b73e783ac8b01c5335a6d240dac37b8871c678e211fc488aa00fc86c4c91cd895a3bd18ee6ceb1bfb614cc9305a8a171c74741ca16570d728140a1b26a1d5548700035e35d046161687ce11f9cf9183d0a14887d9dfd9f5f4c1616ab94fb32abb72c40f12a25f1a8da066e977ac1440abdfb947825d8b5ca0e18b8d1612a4864e7d39270156b72fbfd0cc71688a18491e9599fba583300f9839f0d4b4b79418ad4