DV SSL/TLS Certificate for *.debrugge.co.za

Certificate has expired

Issued by Let's Encrypt (R3)

About the *.debrugge.co.za DV SSL/TLS Certificate

This certificate with serial number 03:f4:46:ed:c3:af:8f:10:a1:23:4e:e6:53:9d:b1:fe:de:ce for *.debrugge.co.za was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some minor issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.debrugge.co.za provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 03:f4:46:ed:c3:af:8f:10:a1:23:4e:e6:53:9d:b1:fe:de:ce
Serial Number (int): 344460035827029219502428213978386787131086
Serial Number Length: 138 bits, 18 octets

Subject Key Identifier: 19:9c:77:f9:1f:14:ba:a2:3d:cc:0c:25:2c:4f:03:3e:c9:d4:1d:5b
Authority Key Identifier: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (SHA-1): 25:c2:c6:19:2f:b7:02:dd:17:bb:cd:cf:b7:55:0d:1e:07:bd:3d:db
Fingerprint (SHA-256): 73:2f:2d:3f:6c:99:0d:c1:97:2a:0c:fe:05:2e:22:9c:45:27:2d:dc:bb:fc:d1:01:03:74:f0:9e:5d:4f:50:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation Information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.debrugge.co.za
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.debrugge.co.za

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.debrugge.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g2R3UkRIrxKRlPebRjY
sk7BphokSfFVSmN3IoVhfUTp2Sq4xK5i6Oba3t9rr2C7gZ8JrobIvWxYbiZOwvGL
TttfPp+tcqqUSLTDeJ6XjnmH9ajc5wmSoeLbrMyYCU64fZWBDpNGcjp4F4+LooDr
LRwyZvQzWKZ01oNfvWgu2sJQM1K8Po31O5c1sG23oSOSeogk44bAsGyRPwotRZE1
OjmN7Nq7FAz7a7oSXBYBlMpb2OGX3CEiLm+rOIa8p4MGAbqEEjhbhLD6JpyYZege
6tTZ2VT7HODYzpldyMpy0OkC5LBPxmmRSkSVu1JkW/NFi1ylDiXLDSlO7zNoV1J7
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344460035827029219502428213978386787131086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 00:47:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-07 00:47:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.debrugge.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27021688772029964871286289930770087912122382475012366717315886047181279969132077364673643383254104333946936588068270222695933615338281405510660908151655937229692584131158304588963084412933596539985527926012360936596110184795097501111957292380601818684567106557730904906586500386127719505953546827099579951570481889220380508897578627962758058092444100571044623604978523545990552063866493114051641247642579209288947903202391817911998767756756120342411052321851535200703160638214550223261555452233194985421982411290227639763994492310663351982863167695299213591369777463294224967941668300667423035603880557918968077253413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							199c77f91f14baa23dcc0c252c4f033ec9d41d5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.debrugge.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debrugge.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001862467d6bf000004030047304502203c8c984ecc8260fc419a501184ead2a885a74c9e981992b3d0b8a23c9bdc8517022100cdfa3859d97c22fb9fb740aa955e43bb22b2f78ad1ebc7fcf53e9667d3f3f3270076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001862467d6dd0000040300473045022100a2af0d18510d4d0af402f09094ba13416caed5624edccc82f7baed45904018e402203354f77584127c9620c57e8ebeefc1fb42d2573731e810863ae342ce0be71ac2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d1d55d364b4cca8ef116ca81753d9ab528858945e0f99a784b4ce99e7728f57d73267fb423952ecadf442d6e2c7861b7650c68d0549db882ee91507507cd17e4ef9fd262ad8d3ebfd09b8f9b6f275b23335028dd2acdf76df4dd3f2527011d6c980c1532656182ac22e60a6c9adb8cc5152eccd98ff1c9fc99541934dff57c6b89db3d6226988493fb02534217c6d43f484912b5f1056965c4a73416941474e65224862d526f210199786ca87988deca0e76a9793a5226f5f4a2b145fa7e2c31e3711c551bde59c3c0175c8e78be793b2c7996374b67343160a692c0800723205daba8f9c33590e25cd44548a3aa7b5daebf43905ce4e28a314df7ec99db537