thecapetonian.co.za
Issued by R3
About this certificate
This digital certificate with serial number 03:82:9f:6a:24:32:9c:8a:17:f4:10:66:c4:49:75:a0:40:7f was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=thecapetonian.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:82:9f:6a:24:32:9c:8a:17:f4:10:66:c4:49:75:a0:40:7fSerial Number (int): 305785463863976146969215932328007732052095
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c8:ed:86:55:19:ca:4d:c1:b4:ce:40:b9:49:b3:e2:f0:c0:f8:10:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 93:99:99:6d:ad:62:83:72:8a:2c:53:37:7d:06:8d:cf:2e:02:f4:ce
Fingerprint (sha256): 04:f2:a3:c7:63:e1:90:26:6e:34:23:22:a9:80:18:33:9e:db:2d:9a:8a:f5:c5:a7:6f:d7:27:73:bd:0c:65:c7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate thecapetonian.co.za
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thecapetonian.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoworkshops.org
benjaminlynch.com
blockchat.com
brendonmarottashow.com
cannabisholistic.com
confessa.com
domainprofitscourse.com
metroroofer.com
northcarolinamortgages.com
sandydays.com
soundstages.com
thecapetonian.co.za
benjaminlynch.com
blockchat.com
brendonmarottashow.com
cannabisholistic.com
confessa.com
domainprofitscourse.com
metroroofer.com
northcarolinamortgages.com
sandydays.com
soundstages.com
thecapetonian.co.za
Other certificates including the domain name thecapetonian.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for thecapetonian.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISA4KfaiQynIoX9BBmxEl1oEB/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MzAwMDA4MzJaFw0yNDA3MjkwMDA4MzFaMB4xHDAaBgNVBAMT E3RoZWNhcGV0b25pYW4uY28uemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDB4DbOJqxTRhwm3WSAALJroUXk5vb7Nffik35dp6Yae6HGYY9cUglQezle QUp35JYlOFE+G3KYvwXDBzCtjD5x9esDNUk9mdJs2g25a2gLPtpMUnw6E6lrh+BC 4qidneF/3zJlFnbe25nHPCl+ZxzXVfawPZwC25F59yI3SbOYOU9UZq4M4AKs6FIM xMvi9h6zISPWjIM5EQt9c3RyGNWqz4TaVDVxnmFmLPNLoflIvyeqYisdFzc5HSRc DVH0KmAzspg4CJC6KVytAwvLf11qGpxJP2D4ggFcjTnHyR1cGYzkoJy+c4vjbXYg UljvhqWBLSvfwTsRQqDRYPCRI8sHAgMBAAGjggLvMIIC6zAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFMjthlUZyk3BtM5AuUmz4vDA+BAoMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIH3BgNVHREEge8wgeyCEWF1dG93b3Jrc2hvcHMub3JnghFiZW5qYW1p bmx5bmNoLmNvbYINYmxvY2tjaGF0LmNvbYIWYnJlbmRvbm1hcm90dGFzaG93LmNv bYIUY2FubmFiaXNob2xpc3RpYy5jb22CDGNvbmZlc3NhLmNvbYIXZG9tYWlucHJv Zml0c2NvdXJzZS5jb22CD21ldHJvcm9vZmVyLmNvbYIabm9ydGhjYXJvbGluYW1v cnRnYWdlcy5jb22CDXNhbmR5ZGF5cy5jb22CD3NvdW5kc3RhZ2VzLmNvbYITdGhl Y2FwZXRvbmlhbi5jby56YTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABjyyL07sAAAQDAEcwRQIgfFYwqq2tMteg9rbIcs9aCnhzMoeQcKl1kYnyqIoM bj0CIQC64WW6OqA3KfGa1OtH009olEJDuqZADx7OxTs0fJXVAQB2AN/hVuuqBa+1 nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJcAAABjyyL1H4AAAQDAEcwRQIhANo2GjR5 kAN9cUNwsu5saeLNNiRNfKJGrtK9AyH7Md1HAiBDELtDRgB98FmVHAXGutIH8/eG Wkh60i9DGyBvrhHknzANBgkqhkiG9w0BAQsFAAOCAQEAHz57qz0N0g1BBvzof0O3 Hjybcb67jUqSAICPxbyf6ZkWJ6j67pTZBGgKpg52BcGbRaa2dYhKnI4C1gJn0+x9 hQbyXhPSK08Bx7pbpTlgckYyldXbBxMbswULTvYIl5MtkZhrNeKZlwryB7PPLFea AiypxtLSJ3CMQFw8nQduYywl8stQUlZ11pYugJQMmurS1+XEepidyfjT5TZ8GE2i 5I14pFUiTIYxUTeQ0SmCAA7xv7S4PhUttQABYGflM496xt7ftiVjYvhRZxvWd0NA ORW1ct9OaPBBCDX24eW4mBjlGQmIXUNpqVxeAALbzk3OgsMRzirit5i8rtx5c9jd gw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweA2ziasU0YcJt1kgACy a6FF5Ob2+zX34pN+XaemGnuhxmGPXFIJUHs5XkFKd+SWJThRPhtymL8FwwcwrYw+ cfXrAzVJPZnSbNoNuWtoCz7aTFJ8OhOpa4fgQuKonZ3hf98yZRZ23tuZxzwpfmcc 11X2sD2cAtuRefciN0mzmDlPVGauDOACrOhSDMTL4vYesyEj1oyDORELfXN0chjV qs+E2lQ1cZ5hZizzS6H5SL8nqmIrHRc3OR0kXA1R9CpgM7KYOAiQuilcrQMLy39d ahqcST9g+IIBXI05x8kdXBmM5KCcvnOL4212IFJY74algS0r38E7EUKg0WDwkSPL BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305785463863976146969215932328007732052095 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 00:08:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 00:08:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thecapetonian.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24474556943613525555430014385373753272914475676489426421394952378781707535196101377114369649892724998578540070660390173214630024134177096729531957065426903278414934486486142752767171868950431829315748706112582287405899626297721725939933159341998921328983262813520336402773359581879004477044109964405304561701654764809943687975200473332694872475065908562598109460545730327549354160885534664736290203901904219681925246714939140497756474970400311197724219557183719705963890877092550591631779608251974333046844079751032694799157974279127094637791770656714789906516333656945697783522051667476791046577435484299685878024967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8ed865519ca4dc1b4ce40b949b3e2f0c0f81028 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoworkshops.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminlynch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brendonmarottashow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisholistic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confessa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainprofitscourse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metroroofer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinamortgages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandydays.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundstages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecapetonian.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2c8bd3bb000004030047304502207c5630aaadad32d7a0f6b6c872cf5a0a787332879070a9759189f2a88a0c6e3d022100bae165ba3aa03729f19ad4eb47d34f68944243baa6400f1ecec53b347c95d501007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2c8bd47e0000040300473045022100da361a347990037d714370b2ee6c69e2cd36244d7ca246aed2bd0321fb31dd4702204310bb4346007df059951c05c6bad207f3f7865a487ad22f431b206fae11e49f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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