www.kathmandu.com.au

- Kathmandu Holdings Limited -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 06:99 was issued on by GeoTrust Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Kathmandu Holdings Limited

Organization: Kathmandu Holdings Limited
State / Province: Christchurch
Locality: Christchurch
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:99
Serial Number (int): 1689
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): 43:29:55:81:34:3e:48:53:75:c7:2e:56:be:70:9e:8a:10:4a:78:56
Fingerprint (sha256): de:fe:28:73:a1:94:f1:e5:7c:9f:6d:93:5e:7d:f5:0c:b7:70:0b:76:37:6d:9c:6c:99:2e:2c:6a:70:c9:6e:01

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.kathmandu.com.au

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kathmandu.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kathmandu.co.uk
www.kathmandu.co.nz
m.kathmandu.com.au
m.kathmandu.co.uk
m.kathmandu.co.nz
kathmandu.co.uk
kathmandu.co.nz
www.kathmandu.com.au
kathmandu.com.au

Other certificates including the domain name kathmandu.com.au

(limited to 100 certificates)
help.kathmandu.com.au
sip.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
san-1-s4.tlsprovisioning.exacttarget.com
sip.kathmandu.co.nz
*.kathmandu.co.nz
*.kathmandu.co.nz
ssl437948.cloudflaressl.com
ssl437947.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437949.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
webmail.kathmandu.co.nz
ssl437947.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437949.cloudflaressl.com
ssl437949.cloudflaressl.com
kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437949.cloudflaressl.com
ssl437947.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437949.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
www.kathmandu.com.au
www.kathmandu.com.au
sip.kathmandu.co.nz
remote.kathmandu.com.au
image.20210419.195922.s4.et.yellsatcloud.com
san-1-s4.tlsprovisioning.exacttarget.com
www.kathmandu.com.au
ssl437949.cloudflaressl.com
remote.kathmandu.com.au
ssl437949.cloudflaressl.com
ssl437948.cloudflaressl.com
ssl437948.cloudflaressl.com
san-1-s4.tlsprovisioning.exacttarget.com
ssl437948.cloudflaressl.com
ssl437947.cloudflaressl.com
vdrebz.kathmandu.com.au
webmail.kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
kathmandu.co.nz
kathmandu.com.au
www.kathmandu.com.au
ssl437948.cloudflaressl.com
kathmandu.co.nz
kathmandu.co.nz
image.20210419.195922.s4.et.yellsatcloud.com
ssl437947.cloudflaressl.com
sni.cloudflaressl.com
kathmandu.co.nz
www.kathmandu.com.au
ssl437949.cloudflaressl.com
vdrebz.kathmandu.com.au
san-1-s4.tlsprovisioning.exacttarget.com
kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437948.cloudflaressl.com
sip.kathmandu.co.nz
webmail.kathmandu.co.nz
ssl437947.cloudflaressl.com
sip.kathmandu.co.nz
ssl437949.cloudflaressl.com
kathmandu.co.nz
sip.kathmandu.co.nz
www.kathmandu.com.au
kathmandu.co.nz
sni.cloudflaressl.com
kathmandu.co.nz
ssl437947.cloudflaressl.com
*.kathmandu.com.au
sni.cloudflaressl.com
sip.kathmandu.com.au
ssl437948.cloudflaressl.com
image.20210419.195922.s4.et.yellsatcloud.com
ssl437949.cloudflaressl.com

Certificate

The complete raw certificate details for www.kathmandu.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuTKC0wK5e+ZkOoH7Wjz
pzsuUn8hcOrBdOFFarXWHMTmT+P3ypTSgrRE7c3SAVvUY6jBIMENAyBnQVXuuGEe
6TY7RaByyoAc/b/9bxGn/Hkvougl5K6/TqtypH7SQa/yI0gcUHR+/MPD/iA6XRxO
q98YZBX1Ij9N0NvAipA3tWW6YH7x7QE4+ytsWOojBik4Wt9CEAMoEdxO73X/MIK7
VbWVgvzu7P9QAgkEs1lqfbQkOdQEvT3WnVMkI0nb86zlPsbUpJ1fXq3HTFOf75el
a4pZy2ziPORYwA58+e5xZSqjleeBeCqaY9/bL6qWUj6Uk18c38zDkulYmDU2g2BL
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-23 20:54:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-24 22:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Christchurch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kathmandu Holdings Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kathmandu.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25612957779728325659994846995052075247886527208187640123266654234891416699708125786380147940629627230571484902004481032693601000246756852045163314483075822036393662034941745445316153633513096250445090031310395330365001830459188566615635554717555565162766466238535881614878954086646068968326344907589030588603343461457243006225474021942936879559155812892659092070012098803899294055951393195283349640433357805110711999924959726265306525520019923184204002349950212963543441089084500681978768014081906088111381905226220498809644282546680908877864197881591216239294125931054942820558631678886906518159450065423684897622791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kathmandu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathmandu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathmandu.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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