beta.kiwischools.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:27:f2:1e:88:5d:6f:78:47:f2:f6:90:e5:35:31:99:d4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beta.kiwischools.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:27:f2:1e:88:5d:6f:78:47:f2:f6:90:e5:35:31:99:d4
Serial Number (int): 283168026325172413825037655298569437026772
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:0e:9f:94:3c:4b:f1:23:26:89:bc:a0:d8:d6:6c:e8:c1:ed:bc:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:12:b6:ba:57:b9:fe:e2:0b:73:ff:da:04:29:48:fc:6b:29:0d:a7
Fingerprint (sha256): a5:e6:71:95:ff:77:b2:ac:07:fe:b0:4e:9c:d6:28:c8:17:0c:b9:2b:82:bd:46:1c:a1:99:4e:0f:ce:10:01:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate beta.kiwischools.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.kiwischools.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.kiwischools.co.nz
central.kiwischools.co.nz

Other certificates including the domain name kiwischools.co.nz

(limited to 100 certificates)
beta.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
mailer.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
portal.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
gitlab.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
beta.kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
mailer.kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
www.kiwischools.co.nz
kiwischools.com
beta.kiwischools.co.nz

Certificate

The complete raw certificate details for beta.kiwischools.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqymLv7aX9HbXLdE6INRi
fI5VgqTGJ+jfJc1ugHpzoAfUYj1DLBn3/voDZAvYwSqZd1Rfvl9F3kZw/ls4NR+B
d14NW2stplVlFNrEtHrWYo+wkOmxOI0bdjCLGManoPsMgUOT7tAch4cJE4Tdz9lY
xamSdqfUqxmdDW6g26zT5WU7Ul9QKhpGE758rYg9J4wyAVVfT75aqn6mCbhADeZa
/MSX6rJ22BvQAkte9a6L5QAeQx6GWHclPD8G0J7zfEteoyzAidnBK8ADqpKIDqVE
DgU7UYUiN776choewVSxmaihd+rF4y3YLao94bqGnNnMklEcMOZDUTbBG0geQO7D
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283168026325172413825037655298569437026772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 22:36:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 22:36:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.kiwischools.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21607237193120647435602603407807360280118534767667860416741339542391877604875589396232372923737550178995038954891174124128775275725901618332961019893486709461363648534787676554239631060071313607490866629324349400618221829454510576697694675363094787364519062065749787502360752418500217620527905817606599339137620244641822125379805795170271309142955085443769743807182409673844766467958604614313818396759942920878284895877881633407653614379215895939301133307844417441688875900853983989482703225541557608126814845717072469171883698638755520956535039352554648482502012057321085826310109807208677887065759836194153889186743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a80e9f943c4bf1232689bca0d8d66ce8c1edbc26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.kiwischools.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.kiwischools.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001705fcf0040000004030047304502200f465cba2835ad229e5cf218999e6537efd22124c31e646c2212a867ff3bd1a40221009d5babd6c6a7f3f530fa84952776cc4a6faa4a783394a93c953d7a2fe8061eff007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705fcf00310000040300483046022100fa7b7766b0dcb1fa2d065b82c88501dc6cd90d0b57c738b641b9bcefd0844061022100c4ffc9e57e33405b6ff0aeea069fdc3062551001420a2cf7638a527e1eb83df0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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