DV SSL/TLS Certificate for www.nzvelvet.nz

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.nzvelvet.nz DV SSL/TLS Certificate

This certificate with serial number 05:c8:c7:d9:ac:6d:05:30:70:2d:bc:67:7e:c2:63:33:67:f4 for www.nzvelvet.nz was issued on by Let's Encrypt.

With 22 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.nzvelvet.nz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:c8:c7:d9:ac:6d:05:30:70:2d:bc:67:7e:c2:63:33:67:f4
Serial Number (int): 503883549639780353767476967189575982344180
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 25:82:15:40:c7:da:40:15:2b:86:db:13:9f:7f:08:6b:54:c6:5d:58
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 91:26:16:89:aa:6e:ab:e2:21:3a:d7:d6:f7:d2:0d:eb:75:01:63:3d
Fingerprint (SHA-256): 8a:ce:5e:38:5a:0b:87:b0:ef:a0:8f:42:3c:f4:f9:8e:0a:51:57:36:93:57:90:d6:94:d9:aa:17:e6:63:2a:52

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/117.crl

Check the revocation status for certificate www.nzvelvet.nz
22
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.nzvelvet.nz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

emuoil.co.nz
emuoil.nz
emuoilproducts.co.nz
emuoilproducts.kiwi
emuoilproducts.nz
emuoilskincare.co.nz
newzealanddeervelvet.com
nzdeervelvet.co.nz
nzvelvet.nz
silberhorn.co.nz
silberhorn.online
www.emuoil.co.nz
www.emuoil.nz
www.emuoilproducts.co.nz
www.emuoilproducts.kiwi
www.emuoilproducts.nz
www.emuoilskincare.co.nz
www.newzealanddeervelvet.com
www.nzdeervelvet.co.nz
www.nzvelvet.nz
www.silberhorn.co.nz
www.silberhorn.online

X.509 Certificate

The complete raw X.509 certificate details for www.nzvelvet.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyieAKFDImLSB8NHinBF/
22nwg3giIGrtSvGgrFhc8C104MJbzuhb9j6eGYZzX9TPeJkdgXr/MIzN1SzEr0Zj
fWDK6c8lSVZ/T/wO+CM96KzWCcbf2FJ/HrVcZrNZ1qdTvN2GOi+dEh6Izaopl9PA
K23LBz0mfEEUhagwssUGnB8WV8mUPe83PvdvdWBShRZXXbzgMrqVOTUn0f2L7ytF
U4k/8F+9njfbPFtv44YNmTSYZgGtDPFo+73nQBl0qFaQVDRtQa2KsDQsG/ngJNT3
U8AcL95n9ekPtiXwny4U17G6JYVDcgoByM/tbT8VWK/ko1UTL9S43yXBVAOQv9kG
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 503883549639780353767476967189575982344180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-07 06:53:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-05 06:53:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nzvelvet.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25519616082455377270997271792564743724991258273287875432131606563676430290931240022390517156734188603966061536071022460130115845142402103049212191645009689904951648223325000795721904465544268861194209025042092037141057511436319889595841952118204599566351834769760708965745436974909197781991297084365434049927929365625500240181743519845150545692710362488511511493038838123154972170597891429578594910442071696352188636106798095872207456130031418668162247611224324198083738572486232633889868589388542579824908856838074706546005693399469108970222640167970241363856783492496995013532797878360639346654303892147815830849177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25821540c7da40152b86db139f7f086b54c65d58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (458 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuoil.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuoil.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuoilproducts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuoilproducts.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuoilproducts.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuoilskincare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealanddeervelvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzdeervelvet.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzvelvet.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silberhorn.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silberhorn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuoil.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuoil.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuoilproducts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuoilproducts.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuoilproducts.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuoilskincare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealanddeervelvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzdeervelvet.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzvelvet.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silberhorn.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silberhorn.online'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/117.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197e3df065a0000040300473045022100ac2f89e393cb57a71372f5a199a61223cb7e4d0c3fe79b595e63b7cef531b74c022031be0c6075a1ca864451d8ad30392332f0b0aa37a93ce14106160af355c3752b007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197e3df0e3e0000040300483046022100f5c54408dbc2ec6594f4463d1a1054bea74dc5aa3c3d8e68010203a31eddf257022100cc1993ff27b97bc6b15f79c09508929d0a0488044fd2fe6bfe41aa91612ee776
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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