support.featureit.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:43:41:59:dd:4c:a5:11:a8:97:79:21:c1:9c:d4:fd:e9:5f was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.featureit.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:41:59:dd:4c:a5:11:a8:97:79:21:c1:9c:d4:fd:e9:5f
Serial Number (int): 371334928733375241902553848063300766394719
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:60:21:4f:de:91:4b:87:85:e2:a8:53:24:b1:d4:33:e8:bb:df:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:d4:d5:00:85:b2:71:58:79:49:db:e5:42:0d:a2:b7:19:a4:53:f9
Fingerprint (sha256): 9b:42:79:3f:32:a4:be:4e:cb:4d:9a:3b:16:94:c1:ed:82:c7:ec:7e:d1:97:36:d3:87:66:a8:c5:e8:c1:1b:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support.featureit.co.nz

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.featureit.co.nz

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help-center.teamtractor.com
help.aartech.ca
help.booktix.com
help.nontrivial.net
helpdesk.divvydose.com
helpdesk.platinumwfm.com
suporte.liftflex.com
support.agaramtech.com
support.athlosfitness.com
support.billfin.com
support.dotcad.in
support.ellajeanorganics.com
support.featureit.co.nz
support.inkandgrey.com
support.mdteam.com
support.savantsolutions.net
support.sea-tech.com
support.summersaultbrands.com
support.theessentialwellness.com
support.thinkersnotebook.com
support.tradeandsainte.com
support.webcert.com.au
support.xcellhost.cloud
support.zvmarket.com

Other certificates including the domain name featureit.co.nz

(limited to 100 certificates)
support.featureit.co.nz
support.featureit.co.nz
*.featureit.co.nz
support.featureit.co.nz
support-intl-paydev.shijigroup.com

support.featureit.co.nz
*.featureit.co.nz
support.flip.training
connect.echodevelopment.org
support.flip.training
support.flip.training
connect.echodevelopment.org
connect.echodevelopment.org

connect.echodevelopment.org
*.featureit.co.nz
portal.yellowdogsoftware.com

connect.echodevelopment.org
integrationsbase.featureit.co.nz
support.flip.training
connect.echodevelopment.org

support.featureit.co.nz

it.grand-benedicts.com
support.featureit.co.nz

support.featureit.co.nz
support.hellotownew.com
connect.echodevelopment.org

support.webcert.com.au
msft-support.emboldhealth.com
*.featureit.co.nz
support.featureit.co.nz
support-intl-paydev.shijigroup.com
support.featureit.co.nz
*.featureit.co.nz
*.featureit.co.nz
support.flip.training

support.flip.training
support.featureit.co.nz
desk.inocrea.be
support.mdteam.com
helpdesk.tapjets.com
*.featureit.co.nz
support.rentgt.com

support.dotcad.in
support.featureit.co.nz
support.flip.training
service.pswpr.com
connect.echodevelopment.org
support.flip.training
abas.outth.ink
helpdesk.divvydose.com
support.collexasoft.com
support.flip.training
portal.spc-impact.com
support.flip.training
support-intl-paydev.shijigroup.com
support.featureit.co.nz
*.featureit.co.nz
support.featureit.co.nz
support.flip.training
help.booktix.com
*.featureit.co.nz
support.featureit.co.nz
support-intl-paydev.shijigroup.com
connect.echodevelopment.org
support.featureit.co.nz

Certificate

The complete raw certificate details for support.featureit.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEcaI/t/3nXOXy7J+jCuONyce9aZQq
AQQAibJ/BHW2EL3X95HHdZ322/4gmKjbJMxtUMcIBLioXBOUDqi11LQNOw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371334928733375241902553848063300766394719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 16:00:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 16:00:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.featureit.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000471a23fb7fde75ce5f2ec9fa30ae38dc9c7bd69942a01040089b27f0475b610bdd7f791c7759df6dbfe2098a8db24cc6d50c70804b8a85c13940ea8b5d4b40d3b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5960214fde914b8785e2a85324b1d433e8bbdf8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (596 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help-center.teamtractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.aartech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.booktix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nontrivial.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.divvydose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.platinumwfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.liftflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.agaramtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.athlosfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.billfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dotcad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ellajeanorganics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.featureit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.inkandgrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mdteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.savantsolutions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sea-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.summersaultbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.theessentialwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.thinkersnotebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tradeandsainte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.webcert.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xcellhost.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zvmarket.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016caff8f28600000403004730450220576593f826bc23c7798e45feba593c920d66e1bac3ec2ce4cd9acc4e0f0f1d1a022100ff3fd96cf5662f93c07c0b25b0f6148d3b9d1f335d8c62680450839acab898dc007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016caff8f295000004030046304402200487e758bc4efe77ecc885380e30f74bfe9f1371bde533cb4fddc2c9ad151dc90220109820581ee5a2e735d4cd8e0dbea636da4d7a4d727b75a3538c90e845e132d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b2f8e1d833a792ca41128e4151fccb6c982cd3b66b114e396f5d33ee6446759d21e0aecb1ab76878598785216e365596cbb7d0b4da25d7601176d195a6564a711eb0a8a64c85a0f35e2ac2639acc09b2e721a89113e5f9ae02a6ef444662e894ba92c16b9b516103538d4fa8ca817c4e2b3341382d6ad7842f0d2ce96cab3b285371fc821e2d4bb2486619bd6950e37dec382b75416e4ae5994c6bfb849d85a3b61eb9ad9d66c0b155e4dd4c78bd007fcc2b6faeeeca52008d06689d6b106dda1153ef56e7d4dfbca131d3e3f181f4a9c989875b69c774fd4b3953fe1ced5f912ae1a3ef3da1a9a4f971c2f8f2cb18a365b0c7772536260ab8b190aaf4955a3