DV SSL/TLS Certificate for pureblissthaimassage.co.nz

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the pureblissthaimassage.co.nz DV SSL/TLS Certificate

This certificate with serial number 06:17:0e:bb:59:3f:ac:d3:00:d4:af:4c:d9:a9:0a:e8:c1:b9 for pureblissthaimassage.co.nz was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for pureblissthaimassage.co.nz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:17:0e:bb:59:3f:ac:d3:00:d4:af:4c:d9:a9:0a:e8:c1:b9
Serial Number (int): 530519791991375914846746073980060637381049
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: cd:bb:d6:ae:6c:2d:a7:29:24:88:ee:fc:80:eb:b6:e4:65:6a:e6:43
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e1:c1:1a:24:dc:c9:d3:ed:c4:8f:21:5a:1c:b9:41:00:66:96:c2:3e
Fingerprint (SHA-256): e0:02:6a:33:2d:06:36:9f:c8:6c:a0:e5:b5:14:89:9c:74:00:74:94:3c:e6:60:b3:6f:3d:ac:cc:d8:fa:c8:80

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/58.crl

Check the revocation status for certificate pureblissthaimassage.co.nz
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for pureblissthaimassage.co.nz

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for pureblissthaimassage.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISBhcOu1k/rNMA1K9M2akK6MG5MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTE0MDk1NjM4WhcNMjUwODEyMDk1NjM3WjAlMSMwIQYDVQQD
ExpwdXJlYmxpc3N0aGFpbWFzc2FnZS5jby5uejCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBAM2ux0mSpLCl6NeqhcxAShmJYQftySXXiWR0JW8bNz4NET+H
BMEiekye+xajUFsOA7mIa5hNe4R8fDISw3RtAkIkMLqMVAToH1m4ckmvVmIz6CDa
YP1pvjWtp4+vgcBz4UN5fQHFYg1K/Zo4axGyadRywBZvsoe4wkhioBq45pvPK7aW
j212jOfJqkenO2dXD4eKFFmcyd6BbIjOrG+4zgDYLrS0s2uEo+gqcbPmZzV5horf
ZQ5WMFFbUVnGTBK126h0GZXMbntm9+lf/bW58C7TvBj1xqBVhwiQFUMrajTjd29V
vCE8NC/LtZ4pP1UlU9MZRKugIyw6XPK2vAI7sKOZu5SYdT0qooleCU9zu5qUtUta
dvWNpfDGKIY+4Q3juTpgoTmz4KAc2nqtfUV6WNHo5dPXOs7bx6q3FCPvu8e/8Q4I
O7GLCY+SfyS0mdcFSoNsrhwFk2GCyOkhz6bjnz9TFn/HbVlyk8N+nx5lOGIeXqBs
qazGI4Vxpb8iVnBWx7TVDImJ2FY2IM8BgV2ZnrwGxrm4GO94TaRZgktG3skNEYao
DxiXK4MbN1aCUQunqYXdg94+0FNFN8GaHQLb3V+lgwKtM4vWBfmzIfqNla8kBhsR
yg9JeR7sGfBDUYf9kVLEg3vTbf2cmav37m6cfcv2oDEno4jAdNxWMQv9Mfi5AgMB
AAGjggJMMIICSDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM271q5sLacpJIju/IDr
tuRlauZDMB8GA1UdIwQYMBaAFLu8w0el5LypxsOkcgwQjaI14cjoMDMGCCsGAQUF
BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9yZy8wRQYD
VR0RBD4wPIIacHVyZWJsaXNzdGhhaW1hc3NhZ2UuY28ubnqCHnd3dy5wdXJlYmxp
c3N0aGFpbWFzc2FnZS5jby5uejATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E
JzAlMCOgIaAfhh1odHRwOi8vcjEwLmMubGVuY3Iub3JnLzU4LmNybDCCAQYGCisG
AQQB1nkCBAIEgfcEgfQA8gB3AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+
TA2wAAABls5vFTQAAAQDAEgwRgIhANx3CyYA2NY/Hl/wnkoQ1Ii2G5scpn2F2x96
iX3uNFLDAiEA0wrYZIyQWlelnAMOfH0gAg2KLpym7hHCTwMCz2XnVmAAdwAaBP9J
0FQdQK/2oMO/8djEZy9O7O4jQGiYaxdALtyJfQAAAZbObyAnAAAEAwBIMEYCIQD0
UbexsT5xH8bEGCDqpMd0S/oQroZId/xoBlC4Kq1A4QIhAL9FKSzUewCBSLpW4bcz
nW74d1DRRGki4d+nM5d/MBEvMA0GCSqGSIb3DQEBCwUAA4IBAQAen39OXL8QOGh2
FPcm3C2oa+IT/lyaCxiZ0IYIktxCeI/dugAI623NJu2IAZ0juozzulD1McPyYfN2
rBZBjOXrST2g2covSxyb5m/DH0voNNwUikHxtzIEjX/bxQg0Z29/nN02pAi2l88n
q+0DMOP1sMOijgU67UlF24ku8GJhOGNR9DyMBw9LkB8Jhjx+BHteO0cQwq0HgUk2
C0DhrdQCvzxbYZ42cbabLzvWZDgtMC2wmt+fsERZpAPHfASLNAOte6fP3r6GQOEZ
hgoMjQrYflCI8AMTmirWM0qaewsbUtwGgiRpNZVMsTq/Bihi+CsjuiMU24QErDZW
kr7pjHWX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 530519791991375914846746073980060637381049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 09:56:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-12 09:56:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pureblissthaimassage.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839112322747227193696599029552957930804612147683416866071077389373983682932207769701491850690244676543975306645150787253842915956499777410455182046450104903404811986846106008948577912113111070065702625905766951722330614857249629734122855706513637207625451729889673316966650552849407335014496463250868145671306476520345419730621144369715760874286102138268828019318353873726474955395875305631183310783679172189531450486956536516221811896629253211963669553208370467446191378783297094434369349641772183031540906470322559302824628940485560307215565275437928589001471683928082088893095099472430373435605135451538337376823003417458453573411271916210559056251585568728356212631627491376921401063301864746767777500361641580269237719291054186081629265090467977442642140661081727072682140751891836128028038773653574826314952982598687832612315269800036208871930592642978268290081177617501803676386343297105265632141221440586871733070559625527481399147582916638421472816121642464508445767928489059746972132119751181066803312307227009676861908278373409812551601291767160870274177656302782903517542902956769450912751891123138806360510908003418868513590930245030796749446318087961429165823608951614156330281484513245444986215111797070778722637969593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdbbd6ae6c2da7292488eefc80ebb6e4656ae643
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureblissthaimassage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureblissthaimassage.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/58.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196ce6f15340000040300483046022100dc770b2600d8d63f1e5ff09e4a10d488b61b9b1ca67d85db1f7a897dee3452c3022100d30ad8648c905a57a59c030e7c7d20020d8a2e9ca6ee11c24f0302cf65e756600077001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d00000196ce6f20270000040300483046022100f451b7b1b13e711fc6c41820eaa4c7744bfa10ae864877fc680650b82aad40e1022100bf45292cd47b008148ba56e1b7339d6ef87750d1446922e1dfa733977f30112f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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