redshift.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:7e:85:15:a6:93:bc:db:a0:a9:e1:bd:b4:91:e2:77:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redshift.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:7e:85:15:a6:93:bc:db:a0:a9:e1:bd:b4:91:e2:77:d6
Serial Number (int): 434708756300117701640502612228874315134934
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:7b:51:93:4c:fb:03:9b:f4:2c:8a:32:44:f5:77:af:7a:7f:29:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:65:89:4b:45:5f:f8:e3:8c:a3:97:5c:09:4d:f2:49:8a:86:c5:bf
Fingerprint (sha256): bd:4f:7a:80:1b:19:06:d2:84:37:24:c3:c1:a0:8c:44:01:21:f6:11:8c:f7:5a:10:a4:6e:ea:f2:de:30:f3:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redshift.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redshift.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redshift.nz

Other certificates including the domain name redshift.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for redshift.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434708756300117701640502612228874315134934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 01:09:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 01:09:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redshift.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813697321848179709726048988427444747557897953580115708219594019221926228406843265956581147404948826826357949785378685086092045387163697604616678972438431327009014226599683543092173456711120219044221411742481216100224999856722591319524171810244423212491125574496542904179770782662088640381888449181423026077199614124925076553980640063817120010273787937951337661377911677743585083729937705196020162180169708987712229527841539725185502668363332379777129574503674205569306137477836588731542300552641033404140306740474923593152361682525003159940242530062256507588108436373931826963166086194709775948957311915521349861003655609958986780402653923849020657132586997862184448976125498336654205638807487353137128817382025243244798114258566196457608227081668032640116316995637764795261235063340310137219785159346754867488477242492721071472604663710088611869609621914138860558606815357474472216502462968240440357524217884348218988637443780470015935700107708520575900161510398251290460390810144529364647338165539905367033320266021813374248885724811420041407414491692772587558200732124818258214154140804019423502121118557279597228555447992561478669201356472430217184171989519299469418957058277453862738576535143930992817151940673422948297764423159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f7b51934cfb039bf42c8a3244f577af7a7f29e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redshift.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a01419a240000040300463044022074b21f00116b151451e377ee37b23a1937863322083455c88e19312f97b5bdd6022051570b5845c667429d6dc8948a6a66075fd0343194789974eef0ef27ab36551f0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a01419a37000004030048304602210095d0a9bfac20506f886b101857b22a634baef6811fe448e0857c93bde78173c6022100ae5933d50463ba5dd301df659495c8ff8e358e6a165e65f09d3edbcf7d80d6de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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