www.kiwischools.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2b:74:d9:e4:4f:1a:3a:9a:86:ed:2d:24:c5:77:58:1c:6d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kiwischools.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:74:d9:e4:4f:1a:3a:9a:86:ed:2d:24:c5:77:58:1c:6d
Serial Number (int): 363236607311227224743166963240928798055533
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:cd:ed:76:7f:f8:d6:3a:f6:b3:b1:5e:25:79:e2:52:dc:21:55:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:b2:14:b9:79:28:60:89:c5:ae:fc:d1:17:5d:d6:e3:08:66:2e:12
Fingerprint (sha256): f8:e9:fa:fa:00:c9:cb:f4:9b:ca:ff:92:9a:4d:1a:30:d7:59:ed:2a:26:5d:fb:75:f2:e0:cd:aa:64:6b:13:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kiwischools.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kiwischools.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiwischools.co.nz
www.kiwischools.co.nz

Other certificates including the domain name kiwischools.co.nz

(limited to 100 certificates)
beta.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
mailer.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
portal.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
mailer.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.co.nz
support.kiwischools.co.nz
dashboard.kiwischools.co.nz
kiwischools.com
dashboard.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
gitlab.kiwischools.co.nz
kiwischools.com
kiwischools.com
mailer.kiwischools.co.nz
kiwischools.co.nz
mailer.kiwischools.co.nz
beta.kiwischools.co.nz
kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
kiwischools.com
mailer.kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
kiwischools.co.nz
www.kiwischools.co.nz
kiwischools.com
images.kiwischools.co.nz
kiwischools.co.nz
cdn.kiwischools.co.nz
kiwischools.com
www.kiwischools.co.nz
kiwischools.com
beta.kiwischools.co.nz

Certificate

The complete raw certificate details for www.kiwischools.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdkMItEgR/qbpqqZc7MD
SPg58+YnGS2c8vflj/0UuBvVGLufjAcYmndJYF1vgtjJyqXud4g59foNQFw61qJ3
HEFzFRhCwtgZLquxSHSzlAoRyVPvgM9YI10h7dsP8rLiR63nCCauNQ+QdhzWLIz8
euBnxnWQ2rGO3hJBMRNPDCEdkHMjyUSZ813Z/PmHfdGzHfskvt6Vj63/JfWDOtbZ
eNrNlbYxld17z/7EVGI0q8BkzV8BJTPCd4fJZQndjANYRuK40LoqzaSU7+BWiK5e
AyOE5fhy8jhbFBKYMKk98Lyr2vNXEwoXkRl5wFb1vPQzuiZCvHZaf13KPg/pe0gB
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363236607311227224743166963240928798055533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 22:54:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 22:54:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kiwischools.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24471022923543106549081494275691309834822125520097753293903498974817517315949135905261308164870052622242522952486692699596761448945034769059667444060514195397214102453753248267953520217500139358487225228169347727270690515230102734811068615757068192492515592766085980288900099327816255883929844195399579178648282052341185859996348052387330389008831532505850673030855829183342145381585168015938378563502587450077229181918442787713236069983841482776896557406900905020402832611619697400567413137488355379561366898223147821803019312788852986885131461163966334999793148810726453495786340994267590684529649465633173433483577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3cded767ff8d63af6b3b15e2579e252dc21550f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017109d1a15c0000040300483046022100f18ab4450bf049bb65fd8cf180f607cc341b854351bb2c3a73478bc20e9a7126022100dab6365e492bf0ba6b47d6c06b383f0f197704b17a058891345db51b90029a250077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017109d1a19000000403004830460221008a888b9d3ae5f3835196561979e302d490b083696c261294624ca60cf52dba39022100a693b74fa87c63b5770b6473a9d1183ef142e4f916733ed6cce34e88ceeb1f62
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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