www.nzcio.com

Issued by thawte DV SSL CA - G2

About this certificate


This digital certificate with serial number 5b:c9:a8:5a:aa:96:eb:5e:b2:d5:35:fd:49:f5:9a:39 was issued on by thawte, Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Using depricated TeletexString for '[www.nzcio.com]'

www.nzcio.com

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:c9:a8:5a:aa:96:eb:5e:b2:d5:35:fd:49:f5:9a:39
Serial Number (int): 122006813913135786597577217430372325945
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07

Fingerprint (sha1): f3:23:a2:61:7b:a7:aa:91:3d:41:ae:31:fe:30:76:31:60:5e:f1:cd
Fingerprint (sha256): bc:dc:48:a4:49:a1:62:75:2d:44:fa:c7:0b:9a:72:c3:66:a5:b4:69:69:eb:da:0b:97:ca:d0:25:a9:82:7c:66

Issuing Certificate URL: http://tn.symcb.com/tn.crt

Revocation information

OCSP Server: http://tn.symcd.com
CRL Distribution Point: http://tn.symcb.com/tn.crl

Check the revocation status for the current certificate on www.nzcio.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nzcio.com
nzcio.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIQW8moWqqW616y1TX9SfWaOTANBgkqhkiG9w0BAQsFADBj MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEeMBwGA1UEAxMVdGhhd3RlIERWIFNTTCBDQSAt IEcyMB4XDTE1MDQwMTAwMDAwMFoXDTE2MDUzMDIzNTk1OVowGDEWMBQGA1UEAxQN d3d3Lm56Y2lvLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMQb GwCvCSzsM8Yxtf7CI/rbdUUGFm7/we9TlbENGSpxxEa7ELVKmOhCHi97d5pkGyzP w2TcjJSnnRqlWq48yjDSv+aJxQzTbxgd+vWuGsCmWljsOzStBPpFRrfYmSg8SVan Z9NfmfIFznnIyzLNTN1UunIstTf+YBZwL6gOwU1iHCaU5UwbaJIckwLdiaJTReC3 orzCaXfXaILLJEQiZ9+7EXadC2RKmTuAwdUWUrhbXOK92BPlxvKw1OEXZsbRnL7R dcnI7447SkYQfUWBvkpTlM1g5W+cpK0FK7SQ9qWQfElvQxAf3z1SI/DXg6G6q0JK qiAWJG/Nl+DWPSEEDhO6EpvDi+jfVEcSILTmriLKgcOODMEC4+ET0nnTst3idpCr QvLDDBj/ao49lgYYGEqzk+0SEzECKYFYLMczBoWRkwfBTKtXSikwThoLrnQczila xNKp3jkVLuWbarGmz5zQnZPRoq5eKOlOZcDoZINtSi7YcCpGYkmbx9kF/JL20NBJ GxoBXf8o+FnFyEkgczEsbtVal42ocnXo6T+1CbpLBr7PALzgPxSeisXuR0RRHYOv BAukMAa7kFVA6GGbdL7o/ovhkwqEWqT9/aeFpr/T+0fb+4lFbV1tvgxqg9xaF3EU 5vun6FrRAcRBF2PLKkL5qMJvGLeKRp81TYUMrVcZAgMBAAGjggF6MIIBdjAjBgNV HREEHDAagg13d3cubnpjaW8uY29tggluemNpby5jb20wCQYDVR0TBAIwADArBgNV HR8EJDAiMCCgHqAchhpodHRwOi8vdG4uc3ltY2IuY29tL3RuLmNybDBuBgNVHSAE ZzBlMGMGBmeBDAECATBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUu Y29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29tL3Jl cG9zaXRvcnkwHwYDVR0jBBgwFoAUn7jBqWzy9cAiKpTtXJms1OzXxgcwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEF BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90bi5zeW1jZC5jb20wJgYIKwYB BQUHMAKGGmh0dHA6Ly90bi5zeW1jYi5jb20vdG4uY3J0MA0GCSqGSIb3DQEBCwUA A4IBAQAYrL1fvh4Rlt0aXb5n6LW7uNLociRC2k0QwR5eNHWmp8zA/uQM2PA7suO9 PBv/Yj3/hOu7/6bvqbowDmQE1i6zr6tjyxp3NKJ4a7Wo6knzqSCdMHHqlEQk37Qa W2poKAEGin4PkiolfRa/mg7XYKq+xKbFQF0CxUqLZktdRq0+9AOZDxK9H8SjchaZ z7UnN1R8I+UkO6RjtkYHO5TxO9IM3d1bb47sW+DmOPhuXW/FrUtprrbhmciiZF5i pir3tMz1iu0EUu+dp3ADh1Qbq7+1HMlsoKlPFZ7oYFtkpT6Opx7AEw/R/hfjNsK6 TrGJ9vLQDAtR4nGSxstZzNzXG3dO -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxBsbAK8JLOwzxjG1/sIj +tt1RQYWbv/B71OVsQ0ZKnHERrsQtUqY6EIeL3t3mmQbLM/DZNyMlKedGqVarjzK MNK/5onFDNNvGB369a4awKZaWOw7NK0E+kVGt9iZKDxJVqdn01+Z8gXOecjLMs1M 3VS6ciy1N/5gFnAvqA7BTWIcJpTlTBtokhyTAt2JolNF4LeivMJpd9dogsskRCJn 37sRdp0LZEqZO4DB1RZSuFtc4r3YE+XG8rDU4RdmxtGcvtF1ycjvjjtKRhB9RYG+ SlOUzWDlb5ykrQUrtJD2pZB8SW9DEB/fPVIj8NeDobqrQkqqIBYkb82X4NY9IQQO E7oSm8OL6N9URxIgtOauIsqBw44MwQLj4RPSedOy3eJ2kKtC8sMMGP9qjj2WBhgY SrOT7RITMQIpgVgsxzMGhZGTB8FMq1dKKTBOGguudBzOKVrE0qneORUu5ZtqsabP nNCdk9Girl4o6U5lwOhkg21KLthwKkZiSZvH2QX8kvbQ0EkbGgFd/yj4WcXISSBz MSxu1VqXjahydejpP7UJuksGvs8AvOA/FJ6Kxe5HRFEdg68EC6QwBruQVUDoYZt0 vuj+i+GTCoRapP39p4Wmv9P7R9v7iUVtXW2+DGqD3FoXcRTm+6foWtEBxEEXY8sq Qvmowm8Yt4pGnzVNhQytVxkCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 122006813913135786597577217430372325945 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.nzcio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800042193220068175486948459826972942025374143703630859702377432425030192557933386611735047214463499562605271552845223649597082769300032835537856070118244072303607687480294259393497105882939504007359150873357199784460020657231536694302788069873064381295774736505083307239402294732296049860511772260218672083869316009836338061947965887094768904009699954729696169971827566442264360615420923216516349495271776278637282081062059374999938832206037824112882686376383670425548301611207760576607613735866704736021777779021349296137238379327283480103526390754791896604508833301914235294823012049428710313375573363946696217516214491356710416684327645797470885827580509597362352094709649178513789487165163756220696117660547393905219121261629213552204257387966857238199087731239960162977115793808598341455991722215964204302531628431708317674288292267160983977093898592839901877200193691455815636983877063057754451057124974285538873769173974276917171693949430834890305640257017224421778137933513106069272748492862878108277800535300671921642294515366060767267216060261543354970164179965609176754883540144103838006108173120740925623067688837248274358456901091171042818617955450964423566510067699544171666621299861256289278581913365931897109542164249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzcio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzcio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0018acbd5fbe1e1196dd1a5dbe67e8b5bbb8d2e8722442da4d10c11e5e3475a6a7ccc0fee40cd8f03bb2e3bd3c1bff623dff84ebbbffa6efa9ba300e6404d62eb3afab63cb1a7734a2786bb5a8ea49f3a9209d3071ea944424dfb41a5b6a682801068a7e0f922a257d16bf9a0ed760aabec4a6c5405d02c54a8b664b5d46ad3ef403990f12bd1fc4a3721699cfb52737547c23e5243ba463b646073b94f13bd20cdddd5b6f8eec5be0e638f86e5d6fc5ad4b69aeb6e199c8a2645e62a62af7b4ccf58aed0452ef9da7700387541babbfb51cc96ca0a94f159ee8605b64a53e8ea71ec0130fd1fe17e336c2ba4eb189f6f2d00c0b51e27192c6cb59ccdcd71b774e