sa-rugby.co.za
Issued by R3
About this certificate
This digital certificate with serial number 03:7b:d1:c8:54:56:79:20:7e:7b:09:8e:4a:b8:04:8f:fb:59 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sa-rugby.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7b:d1:c8:54:56:79:20:7e:7b:09:8e:4a:b8:04:8f:fb:59Serial Number (int): 303470437747620440980898850995221906324313
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0c:08:1d:9b:02:ac:ef:33:63:63:dd:fb:aa:25:e6:a8:db:59:ce:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:6b:d6:71:84:59:21:1f:2f:11:80:80:12:92:3f:45:26:4e:94:a3
Fingerprint (sha256): 04:89:eb:db:71:bd:3f:ab:88:4f:4b:7c:81:e1:cb:97:c5:65:93:17:0c:a4:c2:06:cc:15:92:c4:41:45:8e:f9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sa-rugby.co.za
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sa-rugby.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bhctexas.com
bombinthebrain.com
connecticutgov.com
discreetlypersonal.com
fortworthnewhomesguide.com
fructose0.com
gapublic.statenationals.us
impossible.uk
koreastockfund.com
latemen.com
maurian.com
qratedapartments.com
sa-rugby.co.za
stoneoakmedicine.com
webmail.statenationals.us
www.working.dog
yonkerslawyer.com
bombinthebrain.com
connecticutgov.com
discreetlypersonal.com
fortworthnewhomesguide.com
fructose0.com
gapublic.statenationals.us
impossible.uk
koreastockfund.com
latemen.com
maurian.com
qratedapartments.com
sa-rugby.co.za
stoneoakmedicine.com
webmail.statenationals.us
www.working.dog
yonkerslawyer.com
Other certificates including the domain name sa-rugby.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for sa-rugby.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgISA3vRyFRWeSB+ewmOSrgEj/tZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTgxODMyNTBaFw0yNDA1MTgxODMyNDlaMBkxFzAVBgNVBAMT DnNhLXJ1Z2J5LmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 9D6b7LEP6AnZNwD7hUW5PAkedHTAuy9SkRklCX2i4+BmEULhfMPb30dSLtzCUVRB fllcUSkBT4DfTSbZOuINwx2ZwIlcCxVMeWxTgVYbcgwfTUokTq4xij1SYWM0HEId umBF5jixb0Z6NWgXx8lBAxjuLfWkq8fe32IvdtjL683JK9tQl5SLpoL4CXHWgaoG CQoSjPCLh4EVRP4byxtjFRSpk4sw/r5WAx/mbeEyENaBLjCZszw0L4qQaJVXY0Cs 39l8bhoDd+PuyAQhy2T3YcQISJcYmdh5w0Yu+a0yz6rk2iDHTWL8VfUeJmZ3mPGm pyRMP0nl6CKBWRQDg0ikawIDAQABo4IDVDCCA1AwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQMCB2bAqzvM2Nj3fuqJeao21nOyDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAVoGA1UdEQSCAVEwggFNggxiaGN0ZXhhcy5jb22CEmJvbWJpbnRoZWJyYWlu LmNvbYISY29ubmVjdGljdXRnb3YuY29tghZkaXNjcmVldGx5cGVyc29uYWwuY29t ghpmb3J0d29ydGhuZXdob21lc2d1aWRlLmNvbYINZnJ1Y3Rvc2UwLmNvbYIaZ2Fw dWJsaWMuc3RhdGVuYXRpb25hbHMudXOCDWltcG9zc2libGUudWuCEmtvcmVhc3Rv Y2tmdW5kLmNvbYILbGF0ZW1lbi5jb22CC21hdXJpYW4uY29tghRxcmF0ZWRhcGFy dG1lbnRzLmNvbYIOc2EtcnVnYnkuY28uemGCFHN0b25lb2FrbWVkaWNpbmUuY29t ghl3ZWJtYWlsLnN0YXRlbmF0aW9uYWxzLnVzgg93d3cud29ya2luZy5kb2eCEXlv bmtlcnNsYXd5ZXIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGNvbT4/wAABAMASDBGAiEA+BPSk7JOhvRtCtJkfIYIOsc/hoRzxB3/vaxBNCss gw8CIQC+h53xsqyIwwfkx1i0GnJPNcLeXuGhq7RBY48PrilyvAB2ADtTd3U+LbmA ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjb20+QAAAAQDAEcwRQIgamIPAxDF fXUmisdAjO9tHWCU4k5/B3h3vfLLRAUyGPsCIQCs3QqUWBiJlMb4NItblfQGuPEg 1vnrVVJJWNMJ8SdObjANBgkqhkiG9w0BAQsFAAOCAQEAtpfzaEhBahHkqAbckxaS /BCDB9yN3X2Uah8mC0DpEVqNErqNVUZDm17z8KBVCbUWoGJ4ncj/5l/OlBOaCsK9 AJIAZLNP6sGkA2wlrUuT4FOSYpgTiqpap9LBJE/zmuhZQKCwedwtJWverh92imP1 BGEOlFkuEiICVDZ4nEPe8JzKT5LSG4NPXATz5/O8yvMYDSpd+D+P5gVIBsDxY8J3 gyVFJWkppUDAEw3S6QN0nufKA6uYwJxJUwTu1Py3siRqp/NpJesWpcIHdpmHwlur ulqDGUa5Xa8gYrOqsPkJoGyWr5mvUev+p74oxGMpm1Pveuogp6lgL1zLi+1Q2LmR 8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9D6b7LEP6AnZNwD7hUW5 PAkedHTAuy9SkRklCX2i4+BmEULhfMPb30dSLtzCUVRBfllcUSkBT4DfTSbZOuIN wx2ZwIlcCxVMeWxTgVYbcgwfTUokTq4xij1SYWM0HEIdumBF5jixb0Z6NWgXx8lB AxjuLfWkq8fe32IvdtjL683JK9tQl5SLpoL4CXHWgaoGCQoSjPCLh4EVRP4byxtj FRSpk4sw/r5WAx/mbeEyENaBLjCZszw0L4qQaJVXY0Cs39l8bhoDd+PuyAQhy2T3 YcQISJcYmdh5w0Yu+a0yz6rk2iDHTWL8VfUeJmZ3mPGmpyRMP0nl6CKBWRQDg0ik awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 303470437747620440980898850995221906324313 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 18:32:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 18:32:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sa-rugby.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30833020099930785937174260767386324499801009367859241726255307975921968273542684825643269523532780786792139842965737749807709076401756669433403244079072469718252922495400913866541197557326664980899976243168162389180105855598142003211292459534921155101781663953601700263162579005138301360717978241932965161448332912395014314231462589241840081864298970025592852327819678185734626077579570527183993541016103228369009556306669198922372139537761754878013840817762415714407404142073255356031391993431262049725121089364607433733928195230927767000709292305314526408647648613312336832612632726952780555806403687909996085421163 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c081d9b02acef336363ddfbaa25e6a8db59cec8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (337 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhctexas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bombinthebrain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutgov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discreetlypersonal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthnewhomesguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fructose0.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapublic.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossible.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreastockfund.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latemen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maurian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qratedapartments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-rugby.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakmedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.working.dog' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonkerslawyer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbdb4f8ff0000040300483046022100f813d293b24e86f46d0ad2647c86083ac73f868473c41dffbdac41342b2c830f022100be879df1b2ac88c307e4c758b41a724f35c2de5ee1a1abb441638f0fae2972bc0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbdb4f900000004030047304502206a620f0310c57d75268ac7408cef6d1d6094e24e7f077877bdf2cb44053218fb022100acdd0a9458188994c6f8348b5b95f406b8f120d6f9eb55524958d309f1274e6e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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