nkba-api.aus.simplesoft.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:2b:fc:08:ff:49:6c:09:7d:ce:e0:b2:19:77:cf:62:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nkba-api.aus.simplesoft.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:2b:fc:08:ff:49:6c:09:7d:ce:e0:b2:19:77:cf:62:10
Serial Number (int): 282492829989491208118576472070563679920656
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:48:bc:1f:b9:a9:e1:2e:4e:49:09:5b:c3:c3:e8:8f:bf:09:a4:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:14:e0:0c:1c:56:ed:49:dc:d4:db:3b:14:20:75:21:56:45:9a:35
Fingerprint (sha256): c7:fc:c8:84:0e:55:a4:5d:29:59:89:d6:a3:16:1a:46:45:8c:80:07:49:7c:2d:5e:85:8a:db:fd:22:c2:55:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nkba-api.aus.simplesoft.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nkba-api.aus.simplesoft.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nkba-api.aus.simplesoft.co.nz

Other certificates including the domain name simplesoft.co.nz

(limited to 100 certificates)
app.gioiacard.com
www.krypto-mobiles.xyz
success.waldenu.edu
mech.parts
nkba-api.aus.simplesoft.co.nz
app.enhancedapp.io
www.caterscatering.com
rival.ly
www.anonymousrequest.com
www.fastvb.co
market.manybuild.app
app.lockone.dk
api.critterpic.simplesoft.co.nz
metalparts.hu
www.ukraine-back-on-track.com
api.critterpic.simplesoft.co.nz
penzionstaraskola.eu
app-v2.aiii.ai
yocorroporeldravet.es
nkba-api.aus.simplesoft.co.nz
www.gzz.me
www.institutoexito.com.br
yocorroporeldravet.es
schoonheidsinstituutlaurence.be
api.critterpic.simplesoft.co.nz
dot.polkashots.io
elsewhere.xyz
feedback.cemtrik.com
api.critterpic.simplesoft.co.nz
datavideo.felixxgroep.nl
core-api.dev.aus.simplesoft.co.nz
www.aapsinvite.com
mehsys.com.br
nkba-api.aus.simplesoft.co.nz
rival.ly
beanstalk.simplesoft.co.nz
www.mywellth.app
api.critterpic.simplesoft.co.nz
www.balticinternationalgroup.ee
verisure.verbeterthuis.nl
chicken-dinner.com
www.ifdef.io
0800hungry.simplesoft.co.nz
store.nithinorganics.com
hub.contract-jobs.com
api.critterpic.simplesoft.co.nz
api.critterpic.simplesoft.co.nz
www.songtue.com
fanlife.tech
simplesoft.co.nz
nkba-api.aus.simplesoft.co.nz
beanstalk.simplesoft.co.nz
www.advisor8.com
app.g2g.church
nkba-api.aus.simplesoft.co.nz
api.critterpic.simplesoft.co.nz
grhapersahabatan.org
plaintext.sh
app.enhancedapp.io
staging.clevertrack.dk
betiaenglish.com
sunnyspotpetsitting.com
mustsolar.com.br
app.gioiacard.com
api-test.landskies.com
api.critterpic.simplesoft.co.nz
api.critterpic.simplesoft.co.nz
nkba-api.aus.simplesoft.co.nz
www.nobelar.com

Certificate

The complete raw certificate details for nkba-api.aus.simplesoft.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282492829989491208118576472070563679920656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 20:11:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 20:11:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nkba-api.aus.simplesoft.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743579871486311102979075487962610546827911451797170760843161955316291871460645506318464341817917239339700135275310463413303023996807455059881137267241972734787584781263807781455219974122025503794949282669542176886706270464109022013399168994888238219847919535009730079917993124965020036284977981039119196348115738327234143606685185594206026293506782897865637930584621117382848855150812583137355427516515659597919959927827155630633300305754026872692359457570079461527695391292752007005103278802696099767641859172864458265156611098161455450438509719401876311308345551487370608690153733247539974639450649892947539549863847501674902348169707142882817976484317833570669475714313205936756083783823703035503955363589941315777947918910450377889693437237149457086283375303526334597159857445845874976189618696547087352213006672386338689305356199806061533089305519857926959680315299269408102001437221368745866518913179524114349114009723272830758631329619365123624624646694099667585989367862766842109764152837804536686331047528023252461655325315909989843272599703526872510131447763282325350800880021220392560535734012228611805337876006496423777992994556184488263265260982507554101008535912160385718053305265212065608771949600125877819697699313391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a48bc1fb9a9e12e4e49095bc3c3e88fbf09a413
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkba-api.aus.simplesoft.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170120b59b80000040300473045022041392f05c449d38c2e052b9c29b84d8fc2a6d8627d6970c2101994ab3a57524a02210095c5843cd91a48a82ca35754e7717c0d083d2dae74b87abc73c06d0f278a679b007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170120b59ad000004030046304402205ce3a66de1c1cfb73f1114231c3943e05bbb0ca59c1d6f4a06f61b7dfa6679f202202dea22e19d7438eb8dd2bdad8c792ee43d3a76aa7cf57aba2ad9e411186e5df7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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