*.featureit.co.nz

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f5:c4:8b:76:5c:9a:f1:1a:0a:5d:9a:33:b7:d4:43:7a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.featureit.co.nz

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): f5:c4:8b:76:5c:9a:f1:1a:0a:5d:9a:33:b7:d4:43:7a
Serial Number (int): 326681377784095233392474511131987428218
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 48:4e:40:a0:ac:dc:f2:75:ed:07:5e:9b:f4:29:12:c9:fe:2e:fc:4f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 03:cd:71:53:0f:89:29:23:e7:d3:0c:94:fe:6e:2a:0d:e5:b9:67:2c
Fingerprint (sha256): f3:0a:55:d0:57:6d:a6:77:61:b6:ce:c2:d5:86:8d:27:9e:f9:1d:50:cc:69:8d:a5:78:7b:65:1f:2f:53:d5:50

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.featureit.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.featureit.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.featureit.co.nz
featureit.co.nz

Other certificates including the domain name featureit.co.nz

(limited to 100 certificates)
support.featureit.co.nz
support.featureit.co.nz
*.featureit.co.nz
support.featureit.co.nz
support-intl-paydev.shijigroup.com

support.featureit.co.nz
*.featureit.co.nz
support.flip.training
connect.echodevelopment.org
support.flip.training
support.flip.training
connect.echodevelopment.org
connect.echodevelopment.org

connect.echodevelopment.org
*.featureit.co.nz
portal.yellowdogsoftware.com

connect.echodevelopment.org
integrationsbase.featureit.co.nz
support.flip.training
connect.echodevelopment.org

support.featureit.co.nz

it.grand-benedicts.com
support.featureit.co.nz

support.featureit.co.nz
support.hellotownew.com
connect.echodevelopment.org

support.webcert.com.au
msft-support.emboldhealth.com
*.featureit.co.nz
support.featureit.co.nz
support-intl-paydev.shijigroup.com
support.featureit.co.nz
*.featureit.co.nz
*.featureit.co.nz
support.flip.training

support.flip.training
support.featureit.co.nz
desk.inocrea.be
support.mdteam.com
helpdesk.tapjets.com
*.featureit.co.nz
support.rentgt.com

support.dotcad.in
support.featureit.co.nz
support.flip.training
service.pswpr.com
connect.echodevelopment.org
support.flip.training
abas.outth.ink
helpdesk.divvydose.com
support.collexasoft.com
support.flip.training
portal.spc-impact.com
support.flip.training
support-intl-paydev.shijigroup.com
support.featureit.co.nz
*.featureit.co.nz
support.featureit.co.nz
support.flip.training
help.booktix.com
*.featureit.co.nz
support.featureit.co.nz
support-intl-paydev.shijigroup.com
connect.echodevelopment.org
support.featureit.co.nz

Certificate

The complete raw certificate details for *.featureit.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MfCrbum4R28tn5hGtwZ
K9yoqj0zPYudT8hWTMTMIsnLfvqEuRDiZuHP251ZGfknvkNNtdfwuoi8MttDugrn
hsmAxR7ZP+nH6e5zsIrm+twA1jYee8F4Su9l/hT0010rFHmv4BqdeguCdlHy54WV
tyzE7tx3yem6urak5V3CARRaI0k6ThiFus5MHJntyD3qB7es5yDF83gAK5Zbt8Hv
0d0TWXBUPYurfwh2tGPNw5IKmhSccLhFXP7qv7ufKd1bpWfPS7nXK/fC8plPb1k0
PSgTysz/Gm0a+y7nX8WG3fXPTBtSTXbW48EZdYIlzSAkYZKiw0Eg+fFTZqnhObFg
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326681377784095233392474511131987428218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.featureit.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27365979428550880804289500882847456106602187099050729293776093915702091858222179542361125956465501302591540241503726431262433205667766850588074319600341424853119124906149590970873767537883287665575801162412226682397540238315788760482689911091568314180789745646284500819990569339010632844431608700590126003775550993542199129193164035240242016328195312141484680258134810879017606466278601985767395618179359226482391525775266589568740404552171471554435580695122022747646453885626009166745404804318506599861016280466956681843552551238603262034471561269073822689511093764277697882592947288112289773245906259268688873087221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							484e40a0acdcf275ed075e9bf42912c9fe2efc4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.featureit.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureit.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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