www.easypuff.co.za

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 41:56:02:46:bd:d0:8d:2a:5d:ff:5c:4a:b6:33:66:d4 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

www.easypuff.co.za

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 41:56:02:46:bd:d0:8d:2a:5d:ff:5c:4a:b6:33:66:d4
Serial Number (int): 86846403425388900278570191458755897044
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 58:de:1f:3b:ab:95:83:f5:28:49:eb:37:1a:d4:c0:58:14:d2:3d:9b
Fingerprint (sha256): 00:18:b4:93:a4:0e:90:d3:33:af:b8:f0:f4:76:7e:ae:dc:57:3d:8f:22:e1:90:eb:46:85:68:1e:62:7d:12:0e

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate www.easypuff.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.easypuff.co.za


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.easypuff.co.za
easypuff.co.za

Certificate

The complete raw certificate details for www.easypuff.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86846403425388900278570191458755897044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.easypuff.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818066518971322790597592484298139417019353321154022147959483420073446093515445779132781167502151444694096919240680543632527745201798701002893686542577200743840038048150201659787791259466950370765675576540822724959252420545747220896967759190069514076607506819920229038248253776859972325710648435317177889339705010659531424385348468768686873313730647790254039009127050433007650717076490197771386874965243814776615080197064142120143708897552152024287720499568743706287051014902918133753915806569833899369250105342421646274899069325828207591238755600851480466175070698304300927370986356262938508765885965898394944966300679429975995761996707718463143554418985148067439622976370341192495233653416143393196950930706202363813130629437382902956193221405224411231423946507940681199942706606165138753918214893390202899328685179200201228773579078433711809711051006030102103686908793826104093380970338853105385477343453366680077775406673735984043705049388953826122509152241552165873305934124707356769030500178706970151558901874002034343978971663848801078785924983694185879404389175794261007388520567601271469188417832194105079304945612788447855493095448013490920947573084028440815292150003162036832483309822033992636586763770604211904676977867331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easypuff.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easypuff.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000154c165b70800000403004630440220726970639c83aa017061373f189cc890322a5eda46cf4f7dd184cef4f3a47f8b02203ba088156e86e5892de3bacdc854d54fe444438f0813e9414d184c7f91cf9cbf007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154c165b7400000040300463044022054da20e422be3669b351814902d30757887bb05cba26cd0aafc0686aeaccdf1a02201a8d7305a972d39fcd45e83be51ece080059509946f1a28b58bd3f5e71099a48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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