myabsa.absa.co.za

- Absa Group -

Issued by Entrust Certification Authority - L1E

About this certificate

This digital certificate with serial number 4b:1f:db:5b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Certificates typically do not have multiple attributes in a single RDN (subject). This may be an error. (lint.AWSLabs certlint)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Absa Group

Company registration number: 1986/003934/06
Organization: Absa Group
Organization unit: Electronic Banking
Locality: Johannesburg
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:1f:db:5b
Serial Number (int): 1260378971
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: e6:d0:ed:a5:8e:9b:7d:fe:be:39:23:31:24:33:c2:f5:9d:80:8f:13
AuthorityKeyId: 5b:41:8a:b2:c4:43:c1:bd:bf:c8:54:41:55:9d:e0:96:ad:ff:b9:a1

Fingerprint (sha1): fe:95:88:4b:5b:31:7d:ab:fd:82:8c:7c:ea:60:85:08:17:de:1d:58
Fingerprint (sha256): 00:d2:cb:2e:10:09:a2:68:b3:eb:2d:2c:be:ca:3d:ad:f4:77:b0:30:18:af:d2:74:a1:b1:fe:8c:a2:00:08:d5


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1e.crl

Check the revocation status for certificate myabsa.absa.co.za

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myabsa.absa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name absa.co.za

(limited to 100 certificates)
pcvdb.absa.co.za
everydaybanking-ivx.absa.co.za
sts.absa.co.za
salesportal.absa.co.za
myabsa.absa.co.za
cdn-ff-dev.absa.co.za
esdtracking1.absa.co.za
choice.invest.absa.co.za
investmentmodels.absa.co.za
degitlab.absa.co.za
adfs.eng.absa.co.za
paymentpebbleuat.absa.co.za
esb.ext.uat.absa.co.za
thumbtranuat.absa.co.za
paymentpebble.absa.co.za
capi-uat.absa.co.za
skybranch.absa.co.za
bionline.absa.co.za
ss.absa.co.za
credit.test.absa.co.za
qeedb.absa.co.za
onlinebanking.help.absa.co.za
workspaceuat.absa.co.za
rewards.absa.co.za
ss.absa.co.za
qaaroapi.absa.co.za
vpn-za.absa.co.za
relationshipbanking.absa.co.za
pfortnerghana1.absa.co.za
bulksms.absa.co.za
ib.absa.co.za
pcvapp3.absa.co.za
paymentpebble.absa.co.za
qfedb.absa.co.za
claimsuat.absa.co.za
marketplace.absa.africa
conso-status.prophix.cloud
absafx.absa.co.za
instantbusiness.absa.co.za
capi-uat.absa.co.za
pfortnertanzprimary.absa.co.za
bionline.absa.co.za
wbiu.absa.co.za
docuploaduat.absa.co.za
dpedb.absa.co.za
seedb.absa.co.za
Mail.Absa.co.za
eu.absa.co.za
author.absa.co.za
esec.absa.co.za
mobility.absa.co.za
myfleet.absa.co.za
Testext.absa.co.za
digitaltoolsuat.intra.absa.co.za
pfortnerghanasecondary.absa.co.za
esb.ext.api.uat.absa.co.za
vsuat.absa.co.za
surepin.absa.co.za
e.absa.co.za
clientca.absa.co.za
pilot.absa.co.za
absafx.absa.co.za
ss.absa.co.za
s3edb.absa.co.za
seo.absa.co.za
postilionssl.absa.co.za
vs1.absa.co.za
api.internal.intra.absa.co.za
onlinebanking.help.absa.co.za
absa-rbbshortterm-test.absa.africa
vraspin.absa.co.za
pfortnerzamsecondary.absa.co.za
secure.workspace.absa.co.za
vsuat.absa.co.za
remote.absa.co.za
embu.absa.co.za
research-trk.absa.co.za
ohss.ABSA.co.za
ss.absa.co.za
qpedb.absa.co.za
vsuat.absa.co.za
developernp.absa.co.za
esd.absa.co.za
esd.cib.absa.co.za
ugpfortnershau1.absa.co.za
esdtracking1.absa.co.za
www.absa.co.za
mail.absa.co.za
xduat.absa.co.za
e.absa.co.za
corpstore.absa.co.za
dv3db.absa.co.za
esb.prd.absa.co.za
developernp.absa.co.za
ecssp.absa.co.za
XZAPBCC1APP0043.absa.co.za
GBSLE-LD-Cluster.absa.co.za
XZAPBCC2APP0063.absa.co.za
vs1.absa.co.za
leedb.absa.co.za

Certificate

The complete raw certificate details for myabsa.absa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1UEVu9Z1x9TeVO31HrW
aPu2msX/OhNBNXJBL+WcjB5aqPaMgh5KBVB5d6Pwm2RC3EtRJc6gsWdUMJUIH6FS
TuMxWgalstRHmZeAEHBSV+15OPVS62Uqx+ODDAf8Y2pTe7uvmcO6WzniSl7zlrJH
GlS/z23fk/PIwL8UvDI3p4XUbZxAASLzrIBZldkaEPsAI2Y93JpxwaI7RfgFpqa3
esAFpSPqBna9YmRZRI0stE8vgXqt25GtMnqS8dA5ogsfl0hkm6jBeNnn/u9ch4kz
KUttsEJXmaTRqDs3hMF2P2qgdtx6uGRpbF9rOshcXhWbMtEpIZ564qYM573aCDGj
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1260378971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1E'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-02-24 11:31:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-02-24 12:00:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'V1.0, Clause 5.(b)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Electronic Banking'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1986/003934/06'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myabsa.absa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20618767130770505020533756633477716679249944634925884775375203372458927032290402647350032938135498977050701298694391001923267416884376494478335809927645385275701219042267640454636647210302949525924724052397364687246518318618896493207645345346409721870569422720110106285962351784546867638169970563969847599052529430432364629856715969238035416715711403932072291596771048192631260832730615460869294943004008507607103713532424060816043599063792557590443015185254505231107468005211001486862542505217039707809427152860122068894305958468058562167400319043148133600637835884387591243369865666638682781780970120886534899082203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1e.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5b418ab2c443c1bdbfc85441559de096adffb9a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6d0eda58e9b7dfebe3923312433c2f59d808f13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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