DV SSL/TLS Certificate for nicovr.co.za

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the nicovr.co.za DV SSL/TLS Certificate

This certificate with serial number 06:4d:2d:e0:f3:21:21:1f:17:62:a1:0a:65:8e:4f:4d:13:ed for nicovr.co.za was issued on by Let's Encrypt.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for nicovr.co.za provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:4d:2d:e0:f3:21:21:1f:17:62:a1:0a:65:8e:4f:4d:13:ed
Serial Number (int): 548936441109030688224877666761150972105709
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b3:b0:45:99:ff:a0:a1:9e:be:eb:c4:84:d3:a6:5a:60:13:88:82:4a
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e4:65:5c:92:64:96:50:4c:12:30:d0:a6:65:e3:fa:39:33:f2:a2:d5
Fingerprint (SHA-256): 67:d3:1e:7a:29:7a:16:74:4e:31:be:6f:b3:92:2c:1b:d0:fd:73:11:60:4d:fd:60:7e:e8:e4:ef:c9:a3:d9:97

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/110.crl

Check the revocation status for certificate nicovr.co.za
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for nicovr.co.za

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for nicovr.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7s9c1KNvegBdGrvwn8J
za3FOAI7KcYiWXmFv4dN6xB4RBrIO/YgN+eOFM+zBZJDTxO47sC5QyE2rWVneP/7
tERn0Xu0HTDXkPnXBJuADzx8dmAwEvq6BQXeNWD8HQ5zyVjKqFgqOpHlmahzaOkr
IEr6L3GoG+fa1KNdGFVbUdi7FbkQhSa6SFQMB4ut+4PVxWzU+CFZY5NJ9/wy9VZV
c59ioiOQwqonsH+glrErxLk6fR+KY4cEIdS3GEFZyoBia0eAl/XN2jC0Vz3qogEG
6c2tT7at7F+gtn6T8IEU/79sikmL5YqQm6ZQkqMKy7csNEMl6IaRBNZrqC9USyyj
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 548936441109030688224877666761150972105709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-07 13:06:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-05 13:06:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nicovr.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25718707413535470209731011717987773111743050229201851031910759831022156829599631985820616763023693234318851561881203176103351806932588718592069799638906487044126788248143751175466148744013962260756742232477214032164899445030184562044531977524633493481672573470101044712309743223432575161870883407914168378513057634245246773873770851182493725963255614909945793074471922342316933632147513448139554686856786250889306995686729500428570953500601040307831417254839784186491256188378007513962500996099234224469660778473300047605520590631854621172878811282687851656280612456973552621519863505418317638319832808574919025402831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3b04599ffa0a19ebeebc484d3a65a601388824a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.nicovr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nicovr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicovr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.nicovr.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicovr.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/110.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001974ab5d96f00000403004630440220326b282db6a56ba4c4079908c62ca727bd16f9f1e35eb01adaa3db657131740602200b9472f1fa4a54c5f379370475cd06d2f8b1322bcc174dde65c0396f4984db8a007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001974ab5e1380000040300473045022100b92235d1cae1e487d53277a886d9fca2f8b76f1b25ca575f7c7ec81b5098282a02203df87e79aaa95c8e93e69603e020f693993f221b0db729e3658d0c2bc3b84297
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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