*.windsor.co.nz

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 08:39:e6 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=zHNJUZvLebqOgF76J1x3rT8SVlPSy7yZ,CN=*.windsor.co.nz,OU=GT35535467+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:39:e6
Serial Number (int): 539110
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 2f:47:91:1d:57:1a:57:87:19:7f:45:39:a0:d6:b9:d0:f9:8a:58:0b
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): dc:17:81:3e:c6:c9:45:59:94:80:7d:95:01:e5:cd:5a:d2:e6:fa:f6
Fingerprint (sha256): ff:38:83:8f:aa:df:bb:b8:f1:83:18:02:98:c0:4e:eb:af:58:75:53:df:9a:9c:c4:e9:1b:55:58:21:b6:73:8f

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.windsor.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.windsor.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.windsor.co.nz
windsor.co.nz

Other certificates including the domain name windsor.co.nz

(limited to 100 certificates)
helpdesk.brisbanemarkets.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
helpdesk.maitland.nsw.gov.au
windsor.co.nz
servicedesk.mcson.com.au
helpdesk.benedict.com.au
windsor.co.nz
helpdesk.mstglobal.com
helpdesk.sureway.com.au
helpdesk.sureway.com.au
servicedesk.aqwest.com.au
windsor.co.nz
servicedesk.stgiles.org.au
itservicedesk.windsor.co.nz
helpdesk.benedict.com.au
helpdesk.sureway.com.au
servicedesk.aqwest.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.timberlinkaustralia.com.au
helpdesk.timberlinkaustralia.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.mstglobal.com
helpdesk.mccolls.com.au
helpdesk.timberlinkaustralia.com.au
helpdesk.mstglobal.com
*.windsor.co.nz
helpdesk.benedict.com.au
servicedesk.mcson.com.au
helpdesk.mccolls.com.au
helpdesk.benedict.com.au
servicedesk.stgiles.org.au
servicedesk.4dmedical.com
www.windsor.co.nz
itservicedesk.windsor.co.nz
servicedesk.4dmedical.com
helpdesk.maranoa.qld.gov.au
servicedesk.maib.tas.gov.au
servicedesk.4dmedical.com
servicedesk.defencebank.com.au
servicedesk.maib.tas.gov.au
helpdesk.benedict.com.au
windsor.co.nz
windsor.co.nz
servicedesk.mcson.com.au
itservicedesk.windsor.co.nz
windsor.co.nz
helpdesk.mstglobal.com
helpdesk.maitland.nsw.gov.au
helpdesk.benedict.com.au
helpdesk.mccolls.com.au
*.windsor.co.nz
helpdesk.benedict.com.au
helpdesk.sureway.com.au
helpdesk.benedict.com.au
helpdesk.timberlinkaustralia.com.au
servicedesk.stgiles.org.au
helpdesk.maitland.nsw.gov.au
servicedesk.maib.tas.gov.au
helpdesk.benedict.com.au
helpdesk.maranoa.qld.gov.au
helpdesk.benedict.com.au
servicedesk.pulseenergy.co.nz
helpdesk.maitland.nsw.gov.au
servicedesk.mcson.com.au
windsor.co.nz
servicedesk.pulseenergy.co.nz
helpdesk.brisbanemarkets.com.au
windsor.co.nz
servicedesk.stgiles.org.au
helpdesk.benedict.com.au
itservicedesk.windsor.co.nz
windsor.co.nz
helpdesk.brisbanemarkets.com.au
servicedesk.aqwest.com.au
servicedesk.defencebank.com.au
servicedesk.pulseenergy.co.nz
windsor.co.nz
servicedesk.pulseenergy.co.nz
servicedesk.aqwest.com.au
servicedesk.4dmedical.com
helpdesk.brisbanemarkets.com.au
windsor.co.nz
servicedesk.maib.tas.gov.au
*.windsor.co.nz

Certificate

The complete raw certificate details for *.windsor.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSeaiJRJtUFwtUIIrG9F
Ck3OxCxCVYKc2OTeOXyq4aVOYWg4kGIS0fqyNnYgdHWLpYRuWYb9+CSPfJb3ffla
k3e+kNhDSybyotPYkCJtPHita2tn9uLYJOVxRvHzdlVbqPcaTrJrTQfcQvMFh1H5
cZAR72bq9cPscVGAsl5nEe3/wW5zyq/KiuWy3sPy98YGS74COyyUzkN1qmEejWEi
FDLGlitPX/yjEqST65oOHvozg9moHp/RUUzMn6mg8sP1YWgi7yvekq2d78b5DGQe
7fi1RXi9gLjl464IOpv5tMZp53dtk2ZCBfOPxvv3Papz2/bGnEHxSU7Z9EkQqoDL
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 539110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-12 13:36:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-15 15:27:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zHNJUZvLebqOgF76J1x3rT8SVlPSy7yZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT35535467'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.windsor.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20848849605372025063391145927300006495943959039605166609659130283235649257968527738413718417188850959197850452899050086144646396427214593195146453842914682632864186170995511945444131806899245755078889016236965108092598691229889610085946546232817290739787246999618350607482133064336502867698141608871382888671602807031894742331115625142695481065955871941700155230947345576441871005463091746025218289476653836625417211739183165697931581314765055362051742921860793260727440266159680792601166245636743969997724563451425246237491487601905959269425314432326387608070877470084739184268916758663915738562291885189545167211433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windsor.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsor.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f47911d571a5787197f4539a0d6b9d0f98a580b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014b668dc63a4876b808c8cc1bc55313cb0b0bff551d534be8bf85287765e363988927d25757ca60a554bebd076f0ac08db553633b8c281e21fdae06db5a02f4bc96cbe80d146a0cc440004a085e14a81056e7a5de9efaceb2dcccce86102fa9c671ba47f76d371899b722de0e5b0f1613fbbd6137614f4928eee729e713c130d1bc1653873d0a6026cfc24eb35c961a3243e402af80fa992fe138954a30146d0ebf0043d9c9a70c59c4fc34a64261b526a70501709b94a842599c5ae13ee114795ca7df4bb3e86b45760680b79e266ac98ca7c0e1723edc4b4f46662459c39cb49380623c0be97e31abc79250251947262a86edb73cd750ac73711d3e2de46d6