staging.nerpmarine.edu.au

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:72:b6:93:11:b7:36:a1:10:12:27:1f:cb:25:bc:51:bb:c7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.nerpmarine.edu.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:72:b6:93:11:b7:36:a1:10:12:27:1f:cb:25:bc:51:bb:c7
Serial Number (int): 126147158882934914695647297507911523220423
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: bd:14:65:c8:87:33:5f:84:34:a9:2b:75:0c:ab:30:3d:b3:eb:6e:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:5a:59:d6:1a:b5:55:d7:13:16:9f:1b:f1:7e:6b:e6:fb:c4:8b:32
Fingerprint (sha256): a8:be:91:48:bd:5c:59:7d:cc:20:bb:f5:3f:45:81:22:38:1c:bb:e1:2a:9c:0c:10:41:c5:66:df:e7:0c:ab:da

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate staging.nerpmarine.edu.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.nerpmarine.edu.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.nerpmarine.edu.au

Other certificates including the domain name nerpmarine.edu.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for staging.nerpmarine.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126147158882934914695647297507911523220423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-15 22:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-14 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.nerpmarine.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767325058503680709118558315438154273739289074706605215824658045440217867001290096726344098466612939545846675590404122772930517495054840110937055753579985965010943427495153900184042047981469431388888173917843381731258054095198570473448863703289010026711289305197166173442437807188021278523629220009356396054061484556029057063461484427888628881310325557786641833745323746872011905581160786843653342195968357840724876252803708186000436717248633384817066491816265061633243021504979031995820342773205869143689490147421371542037315126624795923135097025850579449999123074538494108825151783772334425338161989495871470284744048028911214271481312353056462202029767923867849364718384263995924457615592437199020969061552615294634672242435913764587232805027967587490683908620114415786370124988909730912309445233766363913260272815908859026932882864560562019632981804084100213257126490704734519222180028156607474647257380154264406008923543745377908072245450664108827124635993462264552448545503511218373337709723817828264626618342986381716565100211004231304988469958150590732255934968192532873442845540674080246305524576274783903210203776869340954741853767824552972248211632501343196914946441112271879786797983739984306055650919106459680834497601181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd1465c887335f8434a92b750cab303db3eb6e74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nerpmarine.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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