www.fdmc.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:00:17:ad:b4:0e:9c:0c:9f:4a:7a:21:f1:51:21:6a:19 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fdmc.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:00:17:ad:b4:0e:9c:0c:9f:4a:7a:21:f1:51:21:6a:19
Serial Number (int): 264399522043519384538556245740107115620889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:87:ce:0f:81:5f:b8:18:e5:78:d9:fc:45:79:ca:b6:28:bf:1a:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:0c:87:16:15:8e:6f:3b:00:9c:aa:ae:22:ad:41:c1:8c:24:14:26
Fingerprint (sha256): cc:49:0c:3d:9e:1d:ad:65:f5:f8:3b:b4:c7:39:4d:47:00:78:82:db:aa:03:ba:85:d8:6b:a5:82:b7:77:23:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fdmc.school.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fdmc.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fdmc.school.nz

Other certificates including the domain name fdmc.school.nz

(limited to 100 certificates)
cartoonsbyjim.com
www.giafc.co.nz
sporty.org.nz
www.sportsground.com
www.fdmc.school.nz
fdmc.school.nz
pp.fdmc.school.nz
sporty.org.nz
pp.fdmc.school.nz
sporty.org.nz
fdmc.school.nz
sporty.org.nz
www.chbc.school.nz
pp.fdmc.school.nz
sporty.org.nz
www.fdmc.school.nz
chbc.school.nz
sporty.org.nz
sporty.org.nz
cartoonsbyjim.com
www.fdmc.school.nz
pp.fdmc.school.nz
cartoonsbyjim.com
sporty.org.nz
cartoonsbyjim.com
www.fdmc.school.nz
pp.fdmc.school.nz
fdmc.school.nz
www.fdmc.school.nz
fdmc.school.nz
pp.fdmc.school.nz
pp.fdmc.school.nz
www.fdmc.school.nz
fdmc.school.nz
www.sportsground.com
pp.fdmc.school.nz

Certificate

The complete raw certificate details for www.fdmc.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+LdGUvPa8eKW/pizfrm
/AzUAL16fxREyfvmaXk5vxqh9vwBZCGpVXGUezjo8tDjFvJ5YRapg4HPcSD4sObJ
C2OAwIDbFKX3rZYO+bQkWDJ6FdViiUs6eZiI6gVE1P2j+WsNvZfXrBK+XSTXBYmU
Iq3cwhs+VI/NeQOfNWTR7FnGgR+eEX2FB0eX7Q8FSHZNuQuRLUlgrKC1ioDYpe8j
noMVmcspL7viSMu4Ndif5WmKNZXGgBEG8MO6/Sv+twau/uTv8yb55KPZib6/vocw
wGiCeokb0a83F9BOGIgoJU7eJ+gFkcp+hgAxV5EllKyGDp2Cj7dzypBoz1c+d6mx
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264399522043519384538556245740107115620889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 14:15:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 14:15:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fdmc.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26748152991629602322289172408529134266529890767864497046476868205581773748665705899235827685217063659876174495081216505026895030002316070933301023485074436654361554380576006630880322236720072979139679587142635718293881098346971521173093047619196718971933769103340539061561418370809806655715273248811429771779231985342720009451036236102984584493204662730957116801128431240628356312586701718203353490990995089858548140002859726857127586194791726749446891652761038550274300011593776471796557442356576476656336098176131168314809709712441064042406520473169853708350770375590725842212468422809002984173927937666947752767911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d87ce0f815fb818e578d9fc4579cab628bf1a66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdmc.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bc2b482e8000004030047304502202644262fef5625f4010d293030bf56bc40ea7a68fb4e7c84d9f030f5651cd15a02210083654127eb84195b2f69682cde9e285c2464f3dcdb3cc210a8191518cc90b20a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bc2b4829c00000403004730450221009a77bcb7e221d662fdb8e6bc973a581c3e89ab1367cb1e21cf51d118d4fa051302201ec243493d1d8bf8f860945f2a64125d3c9d9857a965fd6785afc3a7dd4f938e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066bde02bb5d4bf3e70e2aa921e0344cb9136e421f6faf1d010eb675ff030b4468db656dcf1d795eaf0a10c4e873ea4cf109129cb8aecb0d197304296ddd02eddc0c04c758b97f4c8a1611f02695e8274713369bb02fd818ab2fd9da1072ec63aa86df2d93a4b7b892b16f67c0471cb9b8c9530d065327cced1a70f0a984395e1d87a27c4a049abf8b3d52ab5c418334ffbea0af6f61ece136f7509c8e22d1d8b86b60f65139576da8fccd7803e8e690ddb5c442cc17bbc3a963502b8595ce2fffcffde9a59854e9b6793b0c618c847eac5444d83d6ba70263b8466983e2457f1dca226d280d3d0ba2c98a9ddca1b530c07cf6e6d303bd01af122070a14e53933