everydaybanking-ivx.absa.co.za

- Absa Group Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 17:db:98:ca:2b:cd:80:a2:58:7d:40:3a:16:01:3b:c5 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 17:db:98:ca:2b:cd:80:a2:58:7d:40:3a:16:01:3b:c5
Serial Number (int): 31712455858977067935733882417783585733
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 76:80:23:d0:13:60:2f:f6:17:2a:d7:f3:06:ae:d0:e6:78:02:ec:26
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4e:a5:7b:92:16:70:31:2b:00:cb:1d:17:48:32:a0:56:65:b2:1d:1a
Fingerprint (sha256): 00:35:18:75:a6:9f:10:a6:fe:7c:b5:75:fb:1e:51:86:36:c0:da:d3:bb:c5:69:8d:ba:db:23:1d:09:76:34:37

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate everydaybanking-ivx.absa.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for everydaybanking-ivx.absa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

everydaybanking-ivx.absa.co.za

Other certificates including the domain name absa.co.za

(limited to 100 certificates)
pcvdb.absa.co.za
everydaybanking-ivx.absa.co.za
sts.absa.co.za
salesportal.absa.co.za
myabsa.absa.co.za
cdn-ff-dev.absa.co.za
esdtracking1.absa.co.za
choice.invest.absa.co.za
investmentmodels.absa.co.za
degitlab.absa.co.za
adfs.eng.absa.co.za
paymentpebbleuat.absa.co.za
esb.ext.uat.absa.co.za
thumbtranuat.absa.co.za
paymentpebble.absa.co.za
capi-uat.absa.co.za
skybranch.absa.co.za
bionline.absa.co.za
ss.absa.co.za
credit.test.absa.co.za
qeedb.absa.co.za
onlinebanking.help.absa.co.za
workspaceuat.absa.co.za
rewards.absa.co.za
ss.absa.co.za
qaaroapi.absa.co.za
vpn-za.absa.co.za
relationshipbanking.absa.co.za
pfortnerghana1.absa.co.za
bulksms.absa.co.za
ib.absa.co.za
pcvapp3.absa.co.za
paymentpebble.absa.co.za
qfedb.absa.co.za
claimsuat.absa.co.za
marketplace.absa.africa
conso-status.prophix.cloud
absafx.absa.co.za
instantbusiness.absa.co.za
capi-uat.absa.co.za
pfortnertanzprimary.absa.co.za
bionline.absa.co.za
wbiu.absa.co.za
docuploaduat.absa.co.za
dpedb.absa.co.za
seedb.absa.co.za
Mail.Absa.co.za
eu.absa.co.za
author.absa.co.za
esec.absa.co.za
mobility.absa.co.za
myfleet.absa.co.za
Testext.absa.co.za
digitaltoolsuat.intra.absa.co.za
pfortnerghanasecondary.absa.co.za
esb.ext.api.uat.absa.co.za
vsuat.absa.co.za
surepin.absa.co.za
e.absa.co.za
clientca.absa.co.za
pilot.absa.co.za
absafx.absa.co.za
ss.absa.co.za
s3edb.absa.co.za
seo.absa.co.za
postilionssl.absa.co.za
vs1.absa.co.za
api.internal.intra.absa.co.za
onlinebanking.help.absa.co.za
absa-rbbshortterm-test.absa.africa
vraspin.absa.co.za
pfortnerzamsecondary.absa.co.za
secure.workspace.absa.co.za
vsuat.absa.co.za
remote.absa.co.za
embu.absa.co.za
research-trk.absa.co.za
ohss.ABSA.co.za
ss.absa.co.za
qpedb.absa.co.za
vsuat.absa.co.za
developernp.absa.co.za
esd.absa.co.za
esd.cib.absa.co.za
ugpfortnershau1.absa.co.za
esdtracking1.absa.co.za
www.absa.co.za
mail.absa.co.za
xduat.absa.co.za
e.absa.co.za
corpstore.absa.co.za
dv3db.absa.co.za
esb.prd.absa.co.za
developernp.absa.co.za
ecssp.absa.co.za
XZAPBCC1APP0043.absa.co.za
GBSLE-LD-Cluster.absa.co.za
XZAPBCC2APP0063.absa.co.za
vs1.absa.co.za
leedb.absa.co.za

Certificate

The complete raw certificate details for everydaybanking-ivx.absa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GkSkRzH8J7TPoD6vGVU
08O1KNYLhYn6m6V25qDt97CsyOHgcwJB1ng4wThtKQvmOjHsLfyvmDKu8kddJfvD
ith07jaWEnCPt2VvE1WwDe7g2tHJ2zSXxEiEKQD+HUYoMJwHC3ZOn7xR8n/B2G3B
PAosUmN3Eq29RjyvB3nCAJ1Hw1pOWLUWIURAQC0uau0eiTQy2oIG8O2JDcuEzyWk
cMaB6Kycdn5BeWKo3hwiBenlynSzbtM5hRdOBPOfBPBatX7SvG4Yf9AefwSMEtwm
bHk35md8Vl8WubROdfmLOWCNVuBAdR1GDpAdvdnlkrlIPWTGs5TEQbyoNzKJe8gV
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31712455858977067935733882417783585733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-14 08:45:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-14 08:45:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'everydaybanking-ivx.absa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30349006385893699708000059001981921896290312986191637272450457412576966579002672590467355500100863188955429905156573195183050226592933437730315565691986998955425998257670860284596918688526610739095246196416135058563522551004066836053676210271916638373325849282136023406557974434240264628514500276015808871645956136815344879687316457207924875020539231635286525671765750843522144587720390780625415976563958969414644157590856167487104547735598934228309663755049376831687426497061834655962152162030235907501692126156427816323410602273078982138703467289859801912112287663768252954292857653537189187314717474675303578604869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							768023d013602ff6172ad7f306aed0e67802ec26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydaybanking-ivx.absa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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