subcontractor.shape.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:06:e9:76:cd:73:4f:e5:81:bb:75:c6:57:61:5e:04:42:08 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subcontractor.shape.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:e9:76:cd:73:4f:e5:81:bb:75:c6:57:61:5e:04:42:08
Serial Number (int): 350801164909643744085487317039879205175816
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:ef:63:6d:bb:f1:b4:c4:2c:ca:d7:8f:29:15:19:5c:7f:f6:cc:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:41:3b:14:87:6e:8d:be:47:76:3b:87:01:08:4c:b6:8c:76:ed:d5
Fingerprint (sha256): db:45:ea:3f:90:01:0f:4e:db:ba:82:37:d9:b6:44:e5:50:f9:1a:4a:67:78:d0:1d:7e:57:3a:7d:fe:5e:b0:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate subcontractor.shape.com.au

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subcontractor.shape.com.au

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bot.shape.com.au
redirect.shape.com.au
redirect.shapegroup.com.au
resource.shape.com.au
resource.shapegroup.com.au
shapegroup.com.au
subcontractor.shape.com.au
subcontractor.shapegroup.com.au
webhook.shape.com.au
webservices.shape.com.au
webservices.shapegroup.com.au
www.experiencebetter.shape.com.au
www.resource.shape.com.au
www.shapegroup.com.au

Other certificates including the domain name shape.com.au

(limited to 100 certificates)
www.financesharedservices.navitas.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
123.shape.com.au
helpdesk.nswbar.asn.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
servicedesk.stjamescollege.qld.edu.au
helpdesk.arn.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
helpdesk.arn.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
servicedesk.atsichsbrisbane.org.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
*.shape.com.au
akamaisecure6.qualtrics.com
services.navitas.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
www.financeservices.navitas.com
*.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
akamaisecure6.qualtrics.com
mail.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
subcontractor.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for subcontractor.shape.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350801164909643744085487317039879205175816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 22:03:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-03 22:03:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subcontractor.shape.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3027291131807009483757421066462738280838640257525279396615666021522856117097246972378003027135536169918097458031279237813009100988505352041201233025763226655585998561538689737744354918963106016848412981713887865328150312056798887891673156928391442291977850003682070383498289052668299008921130444844895609255447007438822886950590960412727440285963268659678104179241225082866477497755976459494906341695027934357912566897886000974964518791872921136624244668397289149499010476584621679597785535653721874336155070004097219455126482760722191335235186399596177308238597975737685022230560472999392554700904289133003472837366347035093117229199581085730730418581979276807635560958095351199989023471189440682303037323262622937721396957028604573212091865331614663422626845432570083503299521552614389341612799541932431194353608665869488125721579307843862297206331292656408976779438715770765730441522432262746846976450882244202749884256739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8def636dbbf1b4c42ccad78f2915195c7ff6cc15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subcontractor.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subcontractor.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencebetter.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resource.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shapegroup.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186b4043ac00000040300463044022065dd78f9587f760a125c301069923fd352c7be911a973f383757e33ee151ba79022009f45fb6d0d38a1ea491cd59dd54cc9e01a3bb416d53dd4da45da08050e8d872007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186b4043ac0000004030047304502210084aa4a35131cd919eda4f32de87909d47630e92d2c0e848b76bb83376dc58f9602207259d2a5d668deceab51fff0733d35d5b1de0049d11f4b2ddbb394aa492060ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a45875368d612842396658ee1e2c2fd7b85505a52697f9272425171109eba49c3257d49ddfa7c977b0b0aea7b2d1e0146ff9f6e2e10d5b99bcb600a08b04c6cc5ae1480981a535288fdef0324184db37719831abe9e04cba6d6cf53a133a7b1145b9b22567c20fc7a1e47c085babe104f97232ca48c34ee466d2f81c96def02eb16e7c045640610053140d3e0accf2c66a6b90d5d3628c328649880054f1278dd42538d57a39e2f2c0eb15ea2b3cfa038b2c4dd899786e53dfcc045e6bf6375b34128a90e45cf555f7d35b837ed4d6b92bd58f2ba712cf06c897730a591cbddf7b874174a56238d9b464bac2e5e09e99dec4dbd5f4d2b819c9fbdc05a93480f9