chamber.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:bb:36:39:be:2e:a5:22:fa:a7:da:f7:e8:22:b3:b3:9c was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chamber.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:bb:36:39:be:2e:a5:22:fa:a7:da:f7:e8:22:b3:b3:9c
Serial Number (int): 329982460736796645479186645451520408269724
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:ee:6e:21:0b:93:c0:7e:1f:07:e0:a0:0b:81:15:fa:f1:79:bc:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:82:d2:93:18:3e:ee:c1:1d:f9:3c:95:d9:12:73:09:f7:9b:70:1a
Fingerprint (sha256): ea:53:cf:72:bf:5b:8f:e6:b1:d0:9f:d8:82:bc:5d:91:1a:05:ff:79:d8:f9:e3:60:d4:43:e0:e0:43:ee:94:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chamber.co.nz

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chamber.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aucklandbusinessawards.co.nz
aucklandbusinessforum.co.nz
aucklandchamber.co.nz
cambridgechamber.co.nz
ccnzexcellenceawards.co.nz
ccnzexcellenceawards.nz
chamber.co.nz
ebopchamber.co.nz
hawkesbaychamber.co.nz
mcoc.org.nz
newzealandchambers.co.nz
paychecknz.co.nz
penlink.co.nz
queenstownchamber.org.nz
rotchamber.co.nz
rotoruachamber.co.nz
rotoruachamber.nz
scchamber.org.nz
taranakichamber.co.nz
taupochamber.co.nz
www.aucklandbusinessawards.co.nz
www.aucklandbusinessforum.co.nz
www.aucklandchamber.co.nz
www.cambridgechamber.co.nz
www.ccnzexcellenceawards.co.nz
www.ccnzexcellenceawards.nz
www.chamber.co.nz
www.ebopchamber.co.nz
www.hawkesbaychamber.co.nz
www.mcoc.org.nz
www.newzealandchambers.co.nz
www.paychecknz.co.nz
www.penlink.co.nz
www.queenstownchamber.org.nz
www.rotchamber.co.nz
www.rotoruachamber.co.nz
www.rotoruachamber.nz
www.scchamber.org.nz
www.taranakichamber.co.nz
www.taupochamber.co.nz

Other certificates including the domain name chamber.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for chamber.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3aI8Hjy8cZh9tI7bcF
EDl8KMTfJxMEQmq7iYnR2ZmWB3whxUZWDTVCQLdCqqOqcRvCm71oX01fgkt9n1JQ
2HGGksxwPes7Whyq3/+L0SMqx+9C2fw8pnbKDa5mjVQjjXQpJyImpyH4Asj/mhNf
7dudoEQ+8JpTi8rlP3csP9KF0FE0huEqTn75XSnbEmQF/FH/6S5c18RPg2z9sUhF
sjHjbVvEma/fnR5lTgQ89+vhvqk4Munr1Z6Yh6ZMKZlT0Rz8uln5gBq65GQc22a2
E5IK1evKHZ4vhlFrFey6lSBI5IEbzkkQ/heEzizG4GvbDHwOaGzZbCbLHPDzeCBD
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329982460736796645479186645451520408269724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-14 02:25:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 02:25:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chamber.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21972295793190146846691742039919074907903389138389859646970295772940664273767815085600309739948641559277520610376011249743165474865394794748972785788526111485834444215819779187987877040961470987229759516007461426112491553466083398867737478817898812179996946410896227292054927726301065828837824148398131122314552639936214668492671232621241064765554410986617628197052925449757175446147330960007741089447392591820612502606735804489567934731243503842018120138089929080691472279812197414968412190735297790484508755171218236134816364193528797186520382594795663723515033060414650323856113586002148032753438699983034604602347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91ee6e210b93c07e1f07e0a00b8115faf179bc08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbusinessawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbusinessforum.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgechamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnzexcellenceawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnzexcellenceawards.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebopchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaychamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcoc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandchambers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paychecknz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penlink.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenstownchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruachamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruachamber.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakichamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupochamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbusinessawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbusinessforum.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgechamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccnzexcellenceawards.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccnzexcellenceawards.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebopchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaychamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcoc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandchambers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paychecknz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penlink.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenstownchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotchamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruachamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruachamber.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scchamber.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakichamber.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupochamber.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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