kathmandu.co.nz

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:ba:65:77:6c:bd:83:8f:01:b8:f1:9f:ca:1c:7f:92 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kathmandu.co.nz

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ba:65:77:6c:bd:83:8f:01:b8:f1:9f:ca:1c:7f:92
Serial Number (int): 7613965179786854628224905381376982930
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 50:9a:fe:9c:df:62:43:94:ce:0d:7c:b1:40:06:75:d1:62:be:78:d1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 41:d6:ed:2d:a8:c0:0e:64:4c:c0:83:6b:bb:e2:2e:fd:81:5b:c2:0e
Fingerprint (sha256): bd:b6:6b:eb:66:be:60:85:1f:b0:e1:4a:1a:1b:b7:d1:a2:61:be:d2:7f:6f:78:06:7a:22:19:fb:31:ab:03:0c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate kathmandu.co.nz

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kathmandu.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kathmandu.co.nz
*.kathmandu.co.nz
kathmandu.co.uk
*.kathmanduoutdoor.com
*.kathmandu.com.au
kathmanduoutdoor.com
*.kathmandu.co.uk
kathmandu.com.au

Other certificates including the domain name kathmandu.co.nz

(limited to 100 certificates)
sip.kathmandu.co.nz
sni.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
san-1-s4.tlsprovisioning.exacttarget.com
sip.kathmandu.co.nz
*.kathmandu.co.nz
sni.cloudflaressl.com
fbworkplace.kathmandu.co.nz
*.kathmandu.co.nz
ssl437943.cloudflaressl.com
ssl437943.cloudflaressl.com
fbworkplace.kathmandu.co.nz
ssl437941.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437942.cloudflaressl.com
ssl437941.cloudflaressl.com
www.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
image.20210419.195922.s4.et.yellsatcloud.com
webmail.kathmandu.co.nz
ssl437943.cloudflaressl.com
*.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
ssl437942.cloudflaressl.com
kathmandu.co.nz
ssl437941.cloudflaressl.com
webmail.kathmandu.co.nz
filetransfer.kathmandu.co.nz
san-1-s4.tlsprovisioning.exacttarget.com
san-1-s4.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sip.kathmandu.co.nz
*.kathmandu.co.nz
ssl437942.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437943.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437941.cloudflaressl.com
www.kathmandu.com.au
*.kathmandu.co.nz
ssl437941.cloudflaressl.com
ssl437942.cloudflaressl.com
sni.cloudflaressl.com
ssl437942.cloudflaressl.com
fbworkplace.kathmandu.co.nz
san-1-s4.tlsprovisioning.exacttarget.com
kathmandu.co.nz
ssl437943.cloudflaressl.com
webmail.kathmandu.co.nz
*.kathmandu.co.nz
filetransfer.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
gjljde.kathmandu.co.nz
kathmandu.co.nz
*.kathmandu.co.nz
kathmandu.co.nz
kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
*.kathmandu.co.nz
ssl437943.cloudflaressl.com
ssl437942.cloudflaressl.com
kathmandu.co.nz
*.kathmandu.co.nz
ssl437943.cloudflaressl.com
www.kathmandu.com.au
san-1-s4.tlsprovisioning.exacttarget.com
kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437943.cloudflaressl.com
gjljde.kathmandu.co.nz
remote.kathmandu.co.nz
sip.kathmandu.co.nz
webmail.kathmandu.co.nz
remote.kathmandu.co.nz
sip.kathmandu.co.nz
kathmandu.co.nz
sip.kathmandu.co.nz
ssl437942.cloudflaressl.com
*.kathmandu.co.nz
www.kathmandu.com.au
kathmandu.co.nz
fbworkplace.kathmandu.co.nz
kathmandu.co.nz
filetransfer.kathmandu.co.nz
ssl437943.cloudflaressl.com
www.kathmandu.co.nz
*.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
ssl437943.cloudflaressl.com
ssl437941.cloudflaressl.com
ssl437941.cloudflaressl.com
remote.kathmandu.co.nz

Certificate

The complete raw certificate details for kathmandu.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgp7aI7fGxtSpcfrpeUm
iHK7JS7CGqSmx+/PKw4YYRPXtzxawXla5QlrmNo5JqxVJ6IizuXYrUciloixbAzk
5O2SWAUipWv8BbO2+cP3DkT5Glh8WLpXsa8Fng9xADFqITyp4vDTGSENfeFC/80J
mEbgr9XMLoy/jcbZgqnNE2ZW/EVs2jeBSfr+uGg7m8KICEHBFKOZ0V7vOrhAHPnZ
+TIfuhSz6nJuh0GLBm3/sr9YjvJb83yTUyYfD8F4R+IyAO2/Lo4dewr9vcOm9ZDq
MthbKmLQDybOtHpQ0LxdYC5TYfKoWC5aXe0Ql0RO6DCHAme9LJ8CdtsGjg7+jo0q
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7613965179786854628224905381376982930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kathmandu.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25000353281774185212308436804612572290474907965989754101727909715730024103688328343520939568588952392432410389842628915051918501888472266914047674499394016964476995077540994193554298552999027761762745956137927634270047966852330543302836348086619642439595172119755081328714417982921610281940932709175451587243229441950294216666927404123897085564730691898605683673356760770068366494662949559162314590832623501908014419166490054312924199313216573172010029678166325872453654445367712254192096757529077651494821021442096185424681276965336845892611070333948146067667577927797842320180203307613358450070264831617974882085591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							509afe9cdf624394ce0d7cb1400675d162be78d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathmanduoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathmandu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmanduoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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