www.asbsecurities.co.nz

- ASB Bank Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number fd:e2:8f:09:80:dd:5e:e3:00:00:00:00:54:cd:56:07 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ASB Bank Limited

Company registration number: 398445
Organization: ASB Bank Limited
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fd:e2:8f:09:80:dd:5e:e3:00:00:00:00:54:cd:56:07
Serial Number (int): 337471043161121073659088037544683460103
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 40:6c:fb:48:ef:f5:c3:62:b8:71:5d:8a:05:72:d7:29:1a:b2:ec:70
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 90:4e:2e:83:f6:44:06:55:b1:1b:a9:bb:c3:54:1b:d1:9d:6f:fd:25
Fingerprint (sha256): b9:2a:b8:fc:e6:ed:e7:6e:8c:f8:10:10:c0:5e:92:eb:29:70:a7:3c:61:f7:91:df:6b:6a:20:6f:2b:10:11:59

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www.asbsecurities.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.asbsecurities.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.asbsecurities.co.nz
asbsecurities.co.nz

Other certificates including the domain name asbsecurities.co.nz

(limited to 100 certificates)
qa.asbsecurities.co.nz
qa.asbsecurities.co.nz
qa.asbsecurities.co.nz
asbsecurities.co.nz
qa.asbsecurities.co.nz
asbsecurities.co.nz
qa.asbsecurities.co.nz
www.asbsecurities.co.nz
www.asbsecurities.co.nz
www.asbbank.co.nz
www.asbsecurities.co.nz
qa.asbsecurities.co.nz
asbsecurities.co.nz
www.asbsecurities.co.nz
www.asbbank.co.nz
www.asbsecurities.co.nz
www.asbbank.co.nz
www.asbsecurities.co.nz
www.asbsecurities.co.nz
asbsecurities.co.nz
www.asbsecurities.co.nz
www.asbsecurities.co.nz
qa.asbsecurities.co.nz

Certificate

The complete raw certificate details for www.asbsecurities.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFvqy1loqj63/u0xEdTi
jI6fdxMdKtkEMhvi4eUBDg7xf6+tbcELtjHKO2J/kjt/f7wK/0TyqIet2PEY6/XP
t/L8ZH5mOiNzdAsBgZDQaqZCT5B254wQZtIEuc1YgtH8bHdH1mw4LLDT8Cgv9bWj
5i1HfGwyEgfx4mI4FOIEHHwo1RwBGbkeIk/9Lij8VfjnlvK7/IGoOoxKhEb/0GH6
A3pSlncd9Iez1mPSjncXtGGWhArE1VRI5IXLZ3zOtk/52zLgHh8jNu+lFm+KyLrz
g1mhMZlSNWDLKmmjNN4OHHNr8/Zsg/jdG5FHvJyXjAeNQt58bbtagecVXOwUeQTN
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337471043161121073659088037544683460103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-12 01:51:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 02:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASB Bank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '398445'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.asbsecurities.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19738501618270597301080705075503522067074620363134925996594136802109431225312642750057132844313178408541568981562790001750783261535578137690097003136766869001076949767395477421818604069178818770356735199248828391747638219450852751282999153383527550124491571103602043204340660414095118395090731872186464898628268682057473603657488001814320548479851757358900639255409421346670507527035764412069553752297149756043971919797288906547875499576050896263851316850523601433185437752518157444276058387249544882685699663471587408334799252897448670920778279674109031279407860824882396681804368446505200631346476933872163848768931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asbsecurities.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbsecurities.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							406cfb48eff5c362b8715d8a0572d7291ab2ec70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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