api.sandbox.private.bnz.co.nz

- Bank of New Zealand -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0d:a0:b8:4e:9e:1e:d8:2b:64:35:6f:45:6a:71:05:69 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bank of New Zealand

Organization: Bank of New Zealand
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:a0:b8:4e:9e:1e:d8:2b:64:35:6f:45:6a:71:05:69
Serial Number (int): 18114469634669146946242764455105594729
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 45:94:d8:dc:81:de:cb:d2:08:c5:ba:c1:1e:f1:e9:eb:31:22:c3:39
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9b:fe:8b:53:dd:2a:fa:31:e0:da:b6:67:4a:0e:b8:99:bc:04:8a:ce
Fingerprint (sha256): 9a:7b:44:20:67:4a:c1:29:b0:f2:e4:f8:3c:d6:60:58:9e:2a:ef:dc:e3:7f:56:37:43:b5:c3:25:ec:d0:02:c0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate api.sandbox.private.bnz.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.sandbox.private.bnz.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.sandbox.private.bnz.co.nz

Other certificates including the domain name bnz.co.nz

(limited to 100 certificates)
1e291ab3status.snowflake.com
www.bnz.co.nz
statuspage.io
incapsula.com
content.aimatch.com
statuspage.io
1e291ab3status.snowflake.com
statuspage.io
api.bnz.co.nz
rewards.bnz.co.nz
secure.ppte.bnz.co.nz
videoviaweb.bnz.co.nz
autodiscover.domino.wip.bnz.co.nz
voice.bnz.co.nz
prod.sa.mutual.ssl.openaccount.bnz.co.nz
data.bnz.co.nz
incapsula.com
incapsula.com
realme.bnz.co.nz
www2.mbl.bnz.co.nz
incapsula.com
incapsula.com
sts.bnz.co.nz
incapsula.com
videoviaweb.bnz.co.nz
secure07.lithium.com
statuspage.io
statuspage.io
dev-ite-sa-mutual-ssl-openaccount.bnz.co.nz
statuspage.io
ci-usw2.oregon.delivery.aimatch.net
statuspage.io
statuspage.io
narwhal.ppte-cdn.bnz.co.nz
www.bnz.co.nz
incapsula.com
myperformancev4.bnz.co.nz
content.aimatch.com
statuspage.io
1e291ab3status.snowflake.com
incapsula.com
statuspage.io
akamai-san75.exacttarget.com
sts.bnz.co.nz
www.bnz.co.nz
statuspage.io
connect.bnz.co.nz
welcome.bnz.co.nz
incapsula.com
release.bnz.co.nz
incapsula.com
api.sandbox.private.bnz.co.nz
statuspage.io
datapowerprod.bnz.co.nz
statuspage.io
www.communitywall.bnz.co.nz
incapsula.com
statuspage.io
secure07.lithium.com
1e291ab3status.snowflake.com
secure07.lithium.com
secure.bnz.co.nz
dev-ite-sa-mutual-ssl-openaccount.bnz.co.nz
1e291ab3status.snowflake.com
incapsula.com
cardsecurity.bnz.co.nz
sts.bnz.co.nz
incapsula.com
release.bnz.co.nz
secure04.stage.lithium.com
incapsula.com
realme.bnz.co.nz
videoviaweb-bw.bnz.co.nz
statuspage.io
secure.ppte.bnz.co.nz
incapsula.com
joinmissionzero.bnz.co.nz
narwhal.ppte-cdn.bnz.co.nz
statuspage.io
verify.bnz.co.nz
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
statuspage.io
incapsula.com
incapsula.com
statuspage.io
cloudstatus.carestreamdental.com
incapsula.com
1e291ab3status.snowflake.com
incapsula.com
incapsula.com
community.bnz.co.nz
statuspage.io
sts.bnz.co.nz
statuspage.io
incapsula.com
info.bnz.co.nz

Certificate

The complete raw certificate details for api.sandbox.private.bnz.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEKapACaFBbJifY9I6xw
m82nv5HpXS7pCdBt11f9Way8R307qnyZ7+hnW2vQLxPqyJHePkRzHOmwgVVe3kCF
bXQCKfF38Sio3KftnilnsCSpKiR/H5MVMDkhjvAr8Z1D47yArFlXZUNNXHqqoHQ+
7vXcyO+dKv4ngkpAVWn9xmFZ+uHF5djHEr4xL78/6jY+/VI4kIOlkKJeI7rW8w6H
dopzXKWoTOQOhFN9TAXtKh19HjS9mPcQ18535IkZl2CXLQc/CQYQl8EvFyrToehc
4ij+V1Z6WROajMVWR1nGPEeMZsAvgw/hKcz2skmh3g0D8GAAws/Qc606hVq+VEbH
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18114469634669146946242764455105594729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 03:30:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 03:30:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank of New Zealand'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.sandbox.private.bnz.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24270598242024587946333176180267491194379913473432948075327091481020562352046135859758776626139343902996764860289348454788079451735596125172700033141957160778742637784889027674881409082188916789547174167484943976086780100880682351194290665089208013687885619237227374315114566257765535819031572336405802273852776000477583782994470933451807921669767246842659838307888059322244278748546813500666915938662328661667024758134826100724245799802002700452095055721264092540635935959845068954875573498198079542689452200218020445872265193859803957059524313014047487858205581195059062686639193313073580780708937278214205474260869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4594d8dc81decbd208c5bac11ef1e9eb3122c339
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sandbox.private.bnz.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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