ciam.npe4.kaingaora.govt.nz

- Kainga Ora - Homes and Communities -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:f5:b3:45:4c:49:6d:3d:0f:0c:61:d9:a5:27:1b:01 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Kainga Ora - Homes and Communities

Organization: Kainga Ora - Homes and Communities
Locality: Pipitea
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f5:b3:45:4c:49:6d:3d:0f:0c:61:d9:a5:27:1b:01
Serial Number (int): 5263432759367675716483036932156627713
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 19:d2:ad:ab:fc:69:19:63:b9:bb:71:cd:5b:b9:f7:90:80:18:97:65
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 4b:c5:7d:56:11:43:4b:fe:6a:f7:00:64:80:5f:df:4a:04:47:b9:b4
Fingerprint (sha256): ce:8d:f4:22:37:b4:c4:a2:c9:a6:24:86:3a:32:5e:72:de:02:6b:29:31:3e:9b:91:dd:fa:6d:1e:de:fb:a2:92

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate ciam.npe4.kaingaora.govt.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ciam.npe4.kaingaora.govt.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ciam.npe4.kaingaora.govt.nz
www.ciam.npe4.kaingaora.govt.nz

Other certificates including the domain name kaingaora.govt.nz

(limited to 100 certificates)
my.npe4.kaingaora.govt.nz
careers.hnzc.co.nz
ucweb02.kaingaora.govt.nz
live.madeopen.co.uk
live.madeopen.co.uk
access02.kaingaora.govt.nz
iaf.portal.kaingaora.govt.nz
ucweb01.kaingaora.govt.nz
my.kaingaora.govt.nz
ciam.kaingaora.govt.nz
live.madeopen.co.uk
kaaingaora.govt.nz
kaaingaora.govt.nz
myaccount.firsthomepartner.kaingaora.govt.nz
access01.kaingaora.govt.nz
ciam.kaingaora.govt.nz
my.kaingaora.govt.nz
help.cloudpayroll.com.au
kaaingaora.govt.nz
ucweb01.kaingaora.govt.nz
live.madeopen.co.uk
live.madeopen.co.uk
kaaingaora.govt.nz
my.kaingaora.govt.nz
desk.aquion.com.au
kaaingaora.govt.nz
access02.kaingaora.govt.nz
careers.hnzc.co.nz
live.madeopen.co.uk
kaaingaora.govt.nz
access01.kaingaora.govt.nz
helpdesk.csxpi.com
live.madeopen.co.uk
mail.hnzc.co.nz
desk.mygpmptool.com.au
kaaingaora.govt.nz
careers.hnzc.co.nz
access02.kaingaora.govt.nz
zohosd.mbav.com.au
kaaingaora.govt.nz
live.madeopen.co.uk
kaaingaora.govt.nz
kaaingaora.govt.nz
my.kaingaora.govt.nz
live.madeopen.co.uk
my.kaingaora.govt.nz
kaaingaora.govt.nz
ciam.npe4.kaingaora.govt.nz
kaaingaora.govt.nz
my.kaingaora.govt.nz
live.madeopen.co.uk
live.madeopen.co.uk
kaaingaora.govt.nz
rawa.kaingaora.govt.nz
my.npe4.kaingaora.govt.nz
live.madeopen.co.uk
kaaingaora.govt.nz
ciam.npe4.kaingaora.govt.nz
ucweb02.kaingaora.govt.nz
my.kaingaora.govt.nz
hnzaadexpwe01.hnzc.co.nz
ciam.kaingaora.govt.nz
ciam.npe4.kaingaora.govt.nz
kaaingaora.govt.nz
ucweb02.kaingaora.govt.nz

Certificate

The complete raw certificate details for ciam.npe4.kaingaora.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5263432759367675716483036932156627713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pipitea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kainga Ora - Homes and Communities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ciam.npe4.kaingaora.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719719698570028652987830833672890689432628067244714934379909585647586443140360834214546573705685730514663167642518897498711640368733590040408230182950068752152245593658828003727970991400899103715134244616334772358832427891314512654364704890528997513785658823074459706055879159815543215990144831512378607787357206256979130785422357695368488676161632330439652989716959180990492385148602651292926885857856582681990135354632761865761736983737153568986825621333575349333575049196916369665186434213591510255726919003519934905142883306387566889762206534864240960936482796423063589598459468083401652979021083372963813163191224366307400109931793744883728522748843439022896316323597540806344472047203833441673494458358345002722984072560027608765569603478910186566436204710823751290365423520391704308202430124111983472705218233989201551090589709608355529050410679818048486793934568484182648570707853131093723112349891243450486768420323528901103079232802662399151816960234697139501985338927383898679835423838751685245796154677087616961259204901845184260458539184600135196299244480572663437972284328798913251535944725482760884679370607044712007868525281572224069426920936405545320979920117164000012963159819626331455176437460861316489136802444339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19d2adabfc691963b9bb71cd5bb9f79080189765
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciam.npe4.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciam.npe4.kaingaora.govt.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ab1cdb2d3b234ad3ffe8cf327c7a37fe3892e36174058bcc61aae48bfbed2e1159f2bc4081faaf68d82e9a0c2f4fb4cd2f453838ea838de3d83a206947c69899807dca85cca215b37b43ec997f3412861ffcd619d8cb5e1847b830a83239eb44a9f11d6dfcbe161b3d603e0e298de9dc8bdc72ac17f4467d5699c7721488597353db37b819680d756ec4abf423d71d2d93d621f6e51de5a4d2b4d0332030290231c00d1d61f1b732e43156ae604e06489d00f3b6d5b2c95b35af6bc1c5e99c59c60d4e9c8495f773da55253ca5ea0f4d6a49dba2f49f213e54491291a6344a0930a6d7acfbc0ccf7010544c5e81c0de5cd418542737f0c6168e687ace478e590