whenuapai1.kiwischools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:78:5f:3f:2b:00:a6:87:11:a9:eb:91:af:45:77:78:26 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=whenuapai1.kiwischools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:78:5f:3f:2b:00:a6:87:11:a9:eb:91:af:45:77:78:26
Serial Number (int): 273406742546408154212162950142586086979622
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:ba:5e:2b:cf:4f:8e:90:ff:ab:cd:3a:13:d5:ff:82:fa:5f:14:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:0d:63:5c:0c:d4:30:3d:74:9b:68:27:a5:36:66:98:a4:e6:d2:71
Fingerprint (sha256): f7:f4:90:55:80:8a:30:17:6b:4f:b8:6a:fc:9e:4c:62:c6:d2:0e:da:24:6c:ac:d6:fc:0c:55:0d:31:dd:6b:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate whenuapai1.kiwischools.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for whenuapai1.kiwischools.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

whenuapai.school.nz
whenuapai1.kiwischools.com
www.whenuapai.school.nz
www.whenuapai1.kiwischools.com

Other certificates including the domain name kiwischools.com

(limited to 100 certificates)
*.kiwischools.com
kiwischools5.kiwischools.com
kiwischools.com
otahuhu.kiwischools.com
boulcott.kiwischools.com
greenhithe.school.nz
kevins.kiwischools.com
tamaki.kiwischools.com
tekuraowaikare.school.nz
kiwischools.com
kiwischools.com
boulcott.kiwischools.com
sunnyvale.kiwischools.com
dannevirkesouth.kiwischools.com
kiwischools.com
maristhb.kiwischools.com
kiwischools.com
raivalley.kiwischools.com
otahuhuint.kiwischools.com
wrm.kiwischools.com
kiwischools.com
kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
kiwischools.com
kiwischools.com
otahuhuint.kiwischools.com
kiwischools.com
kiwischools3.kiwischools.com
peps.school.nz
matangi.kiwischools.com
balfour.kiwischools.com
pakurangaheights.kiwischools.com
ridgeview.kiwischools.com
leabank.kiwischools.com
jireh.school.nz
awahou.kiwischools.com
tokanui.kiwischools.com
demo.kiwischools.com
jireh.school.nz
kiwischools.com
*.kiwischools.com
balfour.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kiwischools.com
*.kiwischools.com
kiwischools.com
kiwischools.co.nz
kiwischools.com
tikokino.kiwischools.com
kiwischools.com
kiwischools.com
peps.kiwischools.com
manurewasouth.school.nz
kiwischools.com
*.kiwischools.com
dairyflat.kiwischools.com
tokanui.school.nz
greytown1.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
birkdalenorth.kiwischools.com
balfour.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
manurewawest.kiwischools.com
stanhope.kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
*.kiwischools.com
kiwischools.com
whenuapai1.kiwischools.com
ridgeview.school.nz
ruahine.kiwischools.com
kiwischools.com
manurewasouth.kiwischools.com
kiwischools.co.nz
ngakonui.kiwischools.com
kiwischools.com
matangi2.kiwischools.com
birkdalenorth.kiwischools.com
kiwischools.com
kiwischools.co.nz
tekuraowaikare.kiwischools.com
whitikahu.kiwischools.com
kiwischools.com
peps.kiwischools.com
whenuapai1.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kevins.kiwischools.com

Certificate

The complete raw certificate details for whenuapai1.kiwischools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXjGiZXLDZOqkfF00BVG
NjYteou4SXU6+tzGFy0Xr5S6Scj9SVjVRvj2/MfImEC1NzT3PSt65HhAlM2YzHeN
AUiP9Mue6uwIjzFDnXEC9mCBoboCgXBcVxIR1QkeWUkSKClKMoM5Hdiqp2uFSNgz
zHLratzGxKc3MekSL8myNSG/S8+RQLogluEjJdS6GtkQW2qNIrjfPkftwgGPgwM6
/RaD/MIOmWjLYD7g1AFQAb1JgtA7BFjInCM1oacr+FVDkW6H9/aao2Wt/J1LluoS
/PPQ2UP9sgiv4AMONptEn5qF2RCWQFWdgG17SOIxYrH5R3JZx12xjjrwCcsIBDWl
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273406742546408154212162950142586086979622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 05:14:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 05:14:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'whenuapai1.kiwischools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24423549495392317164150002572820347649961191292303755571761411735554266122140905561035286628687370858526731169306446895301896470102545655923616380278993277904499753921710291471124635197746589425841810578892500962414192450427861618429776998522378181488478825493126526430611994715663664027719143549125574500410645864401252985978799255406237794507667327630462934906998007910502687493394287973727000383316536528328363399402090161572757715339233161781403478810918256778395376463838513046102617060092024554252039187044318357604426916085443927244764112069337372596315469851712138227120598078403754281940243204873697642259783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54ba5e2bcf4f8e90ffabcd3a13d5ff82fa5f14fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenuapai.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenuapai1.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whenuapai.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whenuapai1.kiwischools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168a7b15bc80000040300473045022100ae955dbd32dcd59ebe8ab976c27940e66439bac83a2429d902fdfd2371cd232c022056b823aacae2dd5aacd2be960d5f9be854a2d2122f5f21c37543d51fac40b1dc007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168a7b15bd000000403004630440220061350925b0c03888dad0923d65e3edf2c72f1eef5f20fe6d517d615c9683a4d022034529ad80121cbaa2f643dd11337f0df94ba103ff667c1995042ff070f50821b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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