hybrid.thewarehouse.co.nz

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 62:d5:00:99:ba:bd:17:8e:ed:18:d1:31:a6:72:95:9f was issued on by Sectigo Limited.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hybrid.thewarehouse.co.nz

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 62:d5:00:99:ba:bd:17:8e:ed:18:d1:31:a6:72:95:9f
Serial Number (int): 131370314997491348569522486800853144991
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cf:32:ce:c2:b8:6a:7b:a0:83:f8:f3:76:a3:d8:ea:ce:83:7e:12:d3
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 93:35:88:f9:83:33:1b:70:bf:17:4f:0b:24:27:ef:ac:56:ba:25:ec
Fingerprint (sha256): c8:0a:41:f4:34:4f:91:d4:41:f2:e0:69:21:6d:ee:f0:51:ed:ed:4e:1b:e5:d3:76:ab:a5:63:65:50:d8:29:ad

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate hybrid.thewarehouse.co.nz

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hybrid.thewarehouse.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hybrid.thewarehouse.co.nz
autodiscover.nlg.co.nz
autodiscover.stationery.co.nz
autodiscover.thewarehouse.co.nz
autodiscover.torpedo7.com
autodiscover.twg.co.nz
autodiscover.twgroup.co.nz
hybrid1.thewarehouse.co.nz
hybrid2.thewarehouse.co.nz
mymail.thewarehouse.co.nz

Other certificates including the domain name thewarehouse.co.nz

(limited to 100 certificates)
www.yottaa.net
www.yottaa.net
*.thewarehouse.co.nz
akamai-san10.exacttarget.com
www.yottaa.net
akamai-san10.exacttarget.com
pages.emails.thewarehouse.co.nz
www.yottaa.net
akamai-san10.exacttarget.com
pages.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
*.thewarehouse.co.nz
akamai-san10.exacttarget.com
www.yottaa.net
thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.yottaa.net
*.thewarehouse.co.nz
www.yottaa.net
*.thewarehouse.co.nz
*.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.yottaa.net
pages.thewarehouse.co.nz
www.yottaa.net
thewarehouse.co.nz
akamai-san10.exacttarget.com
petinsurance.thewarehouse.co.nz
pages.thewarehouse.co.nz
*.thewarehouse.co.nz
hybrid.thewarehouse.co.nz
akamai-san10.exacttarget.com
SkypeWeb.twgroup.co.nz
view.emails.thewarehouse.co.nz
www.yottaa.net
*.thewarehouse.co.nz
www.yottaa.net
akamai-san10.exacttarget.com
thewarehouse.co.nz
pages.thewarehouse.co.nz
pages.emails.thewarehouse.co.nz
thewarehouse.co.nz
*.thewarehouse.co.nz
curtains.thewarehouse.co.nz
*.thewarehouse.co.nz
sni.cloudflaressl.com
petinsurance.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.thewarehouse.co.nz
hybrid.thewarehouse.co.nz
www.yottaa.net
*.thewarehouse.co.nz
www.yottaa.net
click.emails.thewarehouse.co.nz
akamai-san10.exacttarget.com
hybrid.thewarehouse.co.nz
www.yottaa.net
extranet.thewarehouse.co.nz
*.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
www.yottaa.net
hybrid.thewarehouse.co.nz
akamai-san10.exacttarget.com
redmail.thewarehouse.co.nz
www.yottaa.net
pages.thewarehouse.co.nz
www.yottaa.net
pages.thewarehouse.co.nz
akamai-san10.exacttarget.com
www.thewarehouse.co.nz
petinsurance.thewarehouse.co.nz
cloud.thewarehouse.co.nz
*.thewarehouse.co.nz
*.thewarehouse.co.nz
sts.thewarehouse.co.nz
pages.emails.thewarehouse.co.nz
pages.thewarehouse.co.nz
www.yottaa.net
hybrid.thewarehouse.co.nz
www.yottaa.net
akamai-san10.exacttarget.com
www.yottaa.net
www.yottaa.net
pages.thewarehouse.co.nz
www.yottaa.net
www.yottaa.net
thewarehouse.co.nz
extranet.thewarehouse.co.nz
www.yottaa.net
hybrid.thewarehouse.co.nz
*.thewarehouse.co.nz
gtm-sst.thewarehouse.co.nz
extranet.thewarehouse.co.nz
www.thewarehouse.co.nz
t.thewarehouse.co.nz

Certificate

The complete raw certificate details for hybrid.thewarehouse.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKGeSnM0kJR8xbs71TxU
/NgH3pyLQ/FmthmiyU9xVeSc+AMAQPDSyUXD/wrfB7zlgnbeB6PTkiUdOC5OAbd0
PbVy7Jd/gCSCCBYJxxTlPCjoT2x9q+X0w60FDgfmhCd/93aJikwbWRbwB3gk4AVD
lcoSaoKe6uqYBQnpdoR8qMrq/ASbonUCYNyOMAGhx+texoTV9gsE2RudKZwYBamJ
seaUt1DrgDEJHDkx/ke0bc0/7/j3NU2CKQFytvDTE/B418+cngfRc16c9AOziALK
XrVTwjhNBgtc9m/rF18P2DuXUYBjueoTZscuXUnmR8bI5Q6BqPAQ/ZrI/X5AMqsK
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131370314997491348569522486800853144991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hybrid.thewarehouse.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16743153221192639722773880248584454425720090201774202797208185230599931192027615108943752749666347659729362759440753162313892771241481335472401419382788251946668305134581129147886290793829386410221774773551962539552105194336824813264941489459450456967800528240479915702440935357386066192911040523967348392785881305301377703180162013997684469157983055074812608634986588097213637125955957184969461968032084464539356008310589534718524192191243689073475762925617144424842606696444073602375143151828916873938960884094653813483568482751058361581086406081353329290747799601966201008976912469000487427592758000543368586398247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf32cec2b86a7ba083f8f376a3d8eace837e12d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.thewarehouse.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nlg.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stationery.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thewarehouse.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.torpedo7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.twg.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.twgroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid1.thewarehouse.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid2.thewarehouse.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymail.thewarehouse.co.nz'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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