otagorotarytrusttramps.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:48:bd:2f:a9:0c:10:02:7b:05:d2:7e:9c:ff:21:96:8d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=otagorotarytrusttramps.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:48:bd:2f:a9:0c:10:02:7b:05:d2:7e:9c:ff:21:96:8d
Serial Number (int): 284913027839294814955299667769991255660173
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:91:27:24:5b:1d:71:e2:4a:26:e6:2d:ef:e9:08:57:4a:0f:1a:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:ac:4b:43:16:2b:a1:7a:be:01:f0:59:8f:ff:f6:bb:e3:89:5d:75
Fingerprint (sha256): a4:54:dd:5c:87:02:c0:7b:eb:57:f6:e7:ce:30:75:4e:9c:02:c0:ae:5c:22:8a:fb:73:e7:ec:0e:ae:a5:65:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate otagorotarytrusttramps.org.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otagorotarytrusttramps.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otagorotarytrusttramps.org.nz
www.otagorotarytrusttramps.org.nz

Other certificates including the domain name otagorotarytrusttramps.org.nz

(limited to 100 certificates)
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz
otagorotarytrusttramps.org.nz

Certificate

The complete raw certificate details for otagorotarytrusttramps.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYl7XX2QIcGHI26hIBpP
Cqi8noP87A3WzBdaiRQdtW14YQqbFng7klmhpUQ75NZc5ICodVZvr94IuESwwjz5
2cLwKUy+23dE6mGWQQCURK7/cro1+BNhE3kZLPmagyDYgobcgycKAfYzExWCZdzo
QP76JFnBaEOKNZwoWMx+dUteFCUOWmWnKgznOX44E8lMXl9zCyC4OAgz01oy86gc
gSuYxpaqIdfpxskzC9w+FegX/pmC2BO0r37TP5VRZQjZWADzH7P+/TtYI0rVSaPJ
TnoY3k4OBlg44wk69UxNovwYYFglDLA5aicsIQV6VRBGhVL8PYMKWBrAqq7VQGTy
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284913027839294814955299667769991255660173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 03:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 03:41:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otagorotarytrusttramps.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24431787707771131446595729313238796767094036930977297088455751966359684384794347925200516464221352912508321136449163319245132554523868564465562699606232930229336953926884767182503851436466258728408861257818187726724469799503224794390560661883698320549553072511940294044577480697285984984338981770156017884933092109451656326635159076775083602481111165303404267399239623745485257362610626113647928335032408473583336429122401992893122133765747093495481287823352845151734274949611735171685136131088300973345125311871604837318197249761161498775665479992595898494716755136106648192332056800209882313134988721286814537937581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							299127245b1d71e24a26e62defe908574a0f1a70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagorotarytrusttramps.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagorotarytrusttramps.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b9c63424d0000040300463044022013c652930b7129595cded85bceab68bc303633c29bc89eeed4ca3789ec8e7c93022045927122074fd2ddb88196ce41b2357b75904aa0dccb5666645347fa63d59efd007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b9c634433000004030046304402203f5e27c25c8a331824e67f79f3906ce5a6fff6bd38c0c590fad123e9f2927cb4022071505d4a1fedf542e02f46e106c7840c2c0b58e16df5edee20c05e8078c05818
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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