*.uhcc.govt.nz

- Upper Hutt City Council -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4b:ba:a7:54:04:22:c4:42:00:00:00:00:50:e3:76:77 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Upper Hutt City Council

Organization: Upper Hutt City Council
Locality: Upper Hutt
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:ba:a7:54:04:22:c4:42:00:00:00:00:50:e3:76:77
Serial Number (int): 100661260718405599752325387870405883511
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 73:ac:e2:a4:41:c1:7a:e6:f5:96:cd:c6:f8:6a:b9:01:16:97:5d:e9
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): af:31:a5:a7:bd:2d:59:a1:d1:0e:2f:48:f7:d3:b6:35:89:40:72:6f
Fingerprint (sha256): e7:b8:89:01:9e:e5:26:39:0c:2c:ba:05:1c:71:88:a9:29:73:85:47:6a:10:87:72:4c:a5:25:f2:37:4b:a9:3a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.uhcc.govt.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uhcc.govt.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uhcc.govt.nz
uhcc.govt.nz

Other certificates including the domain name uhcc.govt.nz

(limited to 100 certificates)
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
eservices.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
jatheon.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
*.uhcc.govt.nz
jatheon.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
*.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
jatheon.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz
*.uhcc.govt.nz
newspaperarchives.uhcc.govt.nz

Certificate

The complete raw certificate details for *.uhcc.govt.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHK5rOeBytnJ1xm8wcMu
l5daGIr+ijyLaE5caEfqR0NdH6EcG6cW2zZFkKmcZMr1BFBpYoOIZ0khS2J2R8UE
i/REdXGaEG6OmPeuFi+TiWKUF6qoJcmv+jHBk+Eq/IGblfslpidosF0ogG5Ep0Qq
UoeB3P8fX5omf/ucZxaZDpR6RCXgSJJJ9XX0TesKYNxtadp+eD6/KjTwZQHlW6Vn
tgHW/GP/NWmMVTzbauf6R2QbktTuWzNCEHpvL5Uo9s2PTOx3yDAiJxxt2ecqHTrq
VhmgAjjjesCbO2cV2LncNc5PhnWZsf4982SQJ4HjsmSpNLLx/VY8FKouhPrXLKFT
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100661260718405599752325387870405883511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 07:16:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 07:46:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Upper Hutt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Upper Hutt City Council'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uhcc.govt.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24799280924605549966530390307883660712602329233662189069521482133503969003559263627196308525043936477403422503492595070232564873132147772651091153926973915819266547058184364242044160099213619612825202554379853835321209900440920316210641146487600738201752185533296251056406226106733203627152892384461570840138093015785484639180162838701485057023865837353630125163214152865211990231347709420773678023626758114789382285526822796110296119300600453423803489323582401220739368901095884485513958813468233717846403206838438717762160853591223959494053051034382099105931893970906448600771512934529784506468990244090593010602899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhcc.govt.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhcc.govt.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73ace2a441c17ae6f596cdc6f86ab90116975de9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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