tekuraowaikare.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:a7:f8:37:68:1b:7a:8f:61:9f:24:7a:0d:07:d0:ce:e3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tekuraowaikare.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:a7:f8:37:68:1b:7a:8f:61:9f:24:7a:0d:07:d0:ce:e3
Serial Number (int): 322130388995905545388018932351308135452387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:43:82:68:fb:f4:16:f6:8f:a3:40:b4:35:7c:56:73:a3:44:16:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:12:1e:a4:35:15:57:4a:57:86:54:28:89:70:0b:04:3c:82:d2:3f
Fingerprint (sha256): d5:89:e1:9b:33:a5:36:7a:64:c9:67:19:58:b2:a4:2b:d1:c8:ff:e2:a1:dd:1d:d8:a4:c5:5e:0e:0d:52:3c:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tekuraowaikare.school.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tekuraowaikare.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tekuraowaikare.school.nz
www.tekuraowaikare.school.nz

Other certificates including the domain name tekuraowaikare.school.nz

(limited to 100 certificates)
tekuraowaikare.school.nz
tekuraowaikare.school.nz
kiwischools.co.nz
tekuraowaikare.school.nz
kiwischools.co.nz
tekuraowaikare.school.nz
tekuraowaikare.school.nz
kiwischools.co.nz
sni.cloudflaressl.com
tekuraowaikare.school.nz
kiwischools.co.nz
kiwischools.co.nz
tekuraowaikare.kiwischools.com
tekuraowaikare.school.nz

Certificate

The complete raw certificate details for tekuraowaikare.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IS/2AM3xGBpgJ/OVyQy
+4lcspzTbSN4G4VQpEELUi9qcbL2Z2qqwOO0HbvyKQrLbdrynzvYMkpN3n0BorK5
Mw6BBKds9II/kYoXm4S6i5zKfwg+xNLqofNygFN8mmQUITBNghYYDqxZeRSs3aBB
yBg2h2PCvcmuqOE9I4tTEiCU+AeGPixXtU8AjpHKDYS+XPfSYMSIDjjqZLZl13hS
3DJuflV5RI+6/eKYXR7EnsIacXvwJfLfq6dI8NPJrMq2kCnQbOKRvL2JppD7E7Th
OrlHulZRwY6Qm6pIveMxg+mtt+YM0koJp1j/MvRApqAUajeICKxfRZ0NqC2sggHt
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322130388995905545388018932351308135452387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 22:55:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 22:55:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tekuraowaikare.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26323028596841403905716369045154186419241736813810328947843144692109121125620597138878627618006190145657117640872749356715853879202908014620010201389727510195341239447965812647700018800439346218762939857080305112146175238138142872691657871007674681975618277855860302881243699192782325726223790847787397374948718476787355264878769790944341698116006118165371551464131602024705134883927831814322407482492850223700623599213946521845527071752171100300502874166295638237531911676162268153233618279454521384512358357378635936000272088315099310912040560830768621551854665930751860715979929754051325575368038563602873211546993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91438268fbf416f68fa340b4357c5673a34416c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekuraowaikare.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekuraowaikare.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd4d506c00000040300483046022100fcbd17c958fde98fcf40341f59f918ddf780f58d73dec58e48938fcce853b0c0022100f94455d954e3dd2bda7c9fd2349782550014a928b4d50cd6690917a7cc2ea8dc0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fd4d508cb0000040300463044022018479df84568eb8e143be2862457c8204ac777147d95188a408b24485e6b437002202a9b094092b397177f8dc097a5a8e702da0c49691d3ba3688841b6d83720c141
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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