*.laneneave.co.nz

- Lane Neave -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7c:d2:89:a5:3d:f4:45:95:51:01:ec:3a:5b:d0:1b:98 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Lane Neave

Organization: Lane Neave
State / Province: Christchurch
Locality: Christchurch
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:d2:89:a5:3d:f4:45:95:51:01:ec:3a:5b:d0:1b:98
Serial Number (int): 165917445599558289271304673438601321368
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 4d:1c:5d:36:5c:10:40:82:bb:5e:82:34:ab:f7:10:16:2c:d0:3b:7c
Fingerprint (sha256): d6:a3:eb:57:d3:be:3d:de:64:ae:ff:36:8f:53:70:91:85:44:d3:70:a9:f6:72:ba:a0:07:96:c7:65:f9:b4:eb

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.laneneave.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.laneneave.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.laneneave.co.nz
laneneave.co.nz

Other certificates including the domain name laneneave.co.nz

(limited to 100 certificates)
smtp.laneneave.co.nz
dictation.laneneave.co.nz
*.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
citrix.laneneave.co.nz
*.laneneave.co.nz
smtp.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
citrix.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
*.laneneave.co.nz
smtp.laneneave.co.nz
dictation.laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
clinet.laneneave.co.nz
smtp.laneneave.co.nz
dictation.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
*.laneneave.co.nz
storefront.internal.laneneave.co.nz
clinet.laneneave.co.nz
www.laneneave.co.nz
*.laneneave.co.nz
www.laneneave.co.nz
smtp.laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
laneneave.co.nz
www.laneneave.co.nz
*.laneneave.co.nz
citrix.laneneave.co.nz
laneneave.nz
laneneave.nz
smtp.laneneave.co.nz
laneneave.co.nz
citrix.laneneave.co.nz
laneneave.co.nz
smtp.laneneave.co.nz
www.laneneave.co.nz
www.laneneave.co.nz

Certificate

The complete raw certificate details for *.laneneave.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165917445599558289271304673438601321368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lane Neave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.laneneave.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665318658906029370243109349039028159884243337562766026001759233151266285238744796305495530716206239953434862012068236609375091462582599495379445834712814020092266666234497313011664933499952891255806129505456312934839752055810214654009318818535218247063833610350442241045513699938930352684617157306133658066703918053754992206405181670988855809173051851354264379184296687718394772516170264248673355298566722887384908196477642936950202268772730207820147776082269469801836853829869086146459452443869744743323075874897634302817242967253462872744729823640715537410932019921938663304862582020415502459038856045731752756697208661509116961581194391386568832441027699571216794551920194886919593533666083184059531463219083348919834599222626702417503148776876729015539333732788906963951737223878415517384668361561166035927295133818945794491407549436446528604876777161405867640350842085216707563051496378664232439640421225753105505812121459828394230574399488045599637894164127013018675257082809613722449270706553653736016586153208770400030233657773342823211648038585171132338579982817244767926667402262192019063460634004769247163181215828544400533451749958946462090384924256308228542886372123222383110248138450330917154527097417441775621934876433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laneneave.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laneneave.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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