fabians.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:a6:de:44:71:11:d6:ce:45:79:4d:9b:f4:ac:55:a9:33 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fabians.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:a6:de:44:71:11:d6:ce:45:79:4d:9b:f4:ac:55:a9:33
Serial Number (int): 287760405973558048734993990021490859682099
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:84:ae:ae:72:6a:15:d1:12:4e:51:81:8d:a6:dd:c4:54:2b:10:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:e8:79:08:7c:c9:96:67:f3:1f:5f:bc:85:a8:1e:b1:d4:bf:07:b6
Fingerprint (sha256): e0:9c:1d:c0:43:d7:82:76:eb:2f:e8:2c:fd:b3:2a:7b:f2:6c:39:87:18:78:75:97:b6:4b:6e:59:db:1a:4b:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fabians.org.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fabians.org.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fabians.org.nz
www.fabians.org.nz

Other certificates including the domain name fabians.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for fabians.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7KEn0TGHqMmrPoJdpy4y
ZyXz/5pBLQac5va2jZ9tb1Z9dEqUmblU43lkiCgz73kZ7OlAv2Dff24LjaeM+1tj
sj6unuhURSa9uS84D5LusH3Bcoa9IDj36Lmc5/8wSRhx0CPPZyCMgD7INtVYTO3/
21Yz3+A+Fxw7DAqLqorl9KC2SA9snxEdprbORZKX3l4q57OgEkgtsZrQDIrvDutU
8sviorUCW7tzCpZBD3B9JwJa06Au1MpByuzC1lOIJubZWngatTlQshqwQ75M2X70
pvG0qComTwAskZOxZX0+o8XwdsYSpiIKOc4lUDacBjHKHONLvdc02tCbQ3lJnbEN
gaoCqaCeklLm84lOAc/+b+dK92xyA94w/QZzwCzyk+qqNeAXUHybaWEx3GMIQOEZ
yAHFTPG+fc47BE7Opj/qm9UG97UkyANHbGQ14f/KCYYRgqTzGclbPY6fsCEbiSgO
PwH7/sBYtXbFR2cIGJevRzTlU1xtCVk2pnVn08qlxzixqb9XZ2ibz5JyOjF/0GiA
ligyR6k1czwI1ncxQ/onfKfmm/79F4XCkQDqG6/BmCh5IEH+iaxwJ+bLMVILtQpJ
5x7wapuiyE5To8gS7SqIzxKl5AOLL2nJoRcVIVK7dP+GNlh0HvN9fBfz8emfaXOD
xhYAd7/Y1ADYFxl34XHBqvUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287760405973558048734993990021490859682099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 13:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 13:00:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fabians.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 965364192340291836179669855087444297649009896594529312138437829308738486655790160376461519731684097989427371893800907640960728144075468169824853262971333711398454296881463614367950784113987341956175854697405137206220485236188572863866328011276449132635755888359818393678561025570802564157910549043573257617151943966949798772744322986843097484921175720929259628910691387944651712270937671012707493670207984727450034651021844680420768343589099695770119287377653655873528973887357523362941335219125802272221429092302677208746982124211854701793407288244900878177826722700008871208177250533547171941615424170407732319589700734360158401218166820715749508777359544642886348096689560291030185997725536914198013732479566024269683311458059194225950373499715320627892091620904746269234813427673491769922654763829261557660355200037376432478770434504684382822307945546997440468771123135868539403377318235527234826448923259618223505087683873942200237339714612334662245184477729675309047660794678230320132967839129872000258851913037690082942054420216337088394917402605785091603635389502329918788313156485384207669691797868791119660048785921450663116957871193736889028062047667483769770159084929713481167945788516197712427441264153576041904961858293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0484aeae726a15d1124e51818da6ddc4542b10fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabians.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabians.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169964114960000040300473045022027ba60def32f5aa44d8d6f3c938fcfd294cfb4f55abde5a5001e894b8831f7e7022100dd067042d0ebf36613b44cad153acc4c7ff4f42459c067501debe38eb9af216f007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001699641168b0000040300483046022100862743c83c47dd0d3a34736e46bb387d91341fccaa4b86f7437d4647e099fec8022100a7a65a5516494b5d9c166fe874ac709c23ef5c94e336acdaf6bf8e3112f66337
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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