exuhomeloans.absa.africa

- Absa Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:4d:1c:dc:af:8e:09:48:ff:22:5d:bc:f1:f6:9c:41 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:4d:1c:dc:af:8e:09:48:ff:22:5d:bc:f1:f6:9c:41
Serial Number (int): 12363444212167668001426196061092224065
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 27:29:4d:97:dc:86:ac:e3:ab:8a:4c:8f:2d:d9:67:03:74:d4:81:6b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8a:13:8c:46:69:98:44:1d:54:20:a2:67:50:8c:a1:48:ff:a7:10:fe
Fingerprint (sha256): 06:33:a2:3d:e5:10:7f:8f:01:66:3b:ae:00:a3:65:29:4d:26:f1:ac:4e:e8:ba:f9:a9:29:a6:d9:7f:e9:ab:f5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl

Check the revocation status for certificate exuhomeloans.absa.africa

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exuhomeloans.absa.africa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exuhomeloans.absa.africa

Other certificates including the domain name absa.africa

(limited to 100 certificates)
click.cibmc.absa.africa
sso.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
sdr-estatement.absa.africa
sso-test.absa.africa
netbanking.ke.absa.africa
marketplace.absa.africa
exuhomeloans.absa.africa
webchat.absabank.co.ke
gena.absa.africa
Mail.Absa.co.za
demo.prod.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
ssohub-test.absa.africa
pocketflow.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
absa-rbbshortterm-test.absa.africa
ib-secure.mz.absa.africa
shugo-internal-nonprod.absa.africa
cloud.absarbb.absa.africa
readytowork.absa.africa
latelier.absa.africa
eventsdesk.absa.africa
mail.absa.co.za
cibclientaccount.absa.africa
supportandservicemanagement.absa.africa
akamai-san130.exacttarget.com
iboc-test.absa.africa
image.email.sweet.tv
chatbot-ug.absa.africa
short.dev.absa.africa
ea.uat.absa.africa
webchat.absa.co.mu
akamai-san130.exacttarget.com
mra-e-cluster-1.absa.co.za
api.absa.africa
www.absafinancialservices.co.za
iboc.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
habari.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
image.email.sweet.tv
webchat.absa.co.bw
shugo-bc-uat.absa.africa
shugo-b.absa.africa
digitaldistribution.absa.africa
ibocnbc-test.absa.africa
ea.prod.absa.africa
trk-estatement.absa.africa
webhook.absa.africa
notify.prod.absa.africa
image.email.sweet.tv
iboc-dev.absa.africa
webchat.absa.co.tz
homeloans.absa.africa
ea.uat.absa.africa
mftmobile-uat.absa.africa
demo1.dev.absa.africa
events.absa.africa
shugo-a.absa.africa
jhbpsr000001200-cluster1.absa.co.za
image.email.sweet.tv
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
netbanking.ug.absa.africa
MailInbound.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
Readytowork.absa.africa
ea.dev.absa.africa
kyc.uat.absa.africa
shugo-internal-prod.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
latelier.absa.africa
sso-test.absa.africa
onboarding.absa.africa
latelier.absa.africa
onboarding.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
api.absa.africa
kyc.dev.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aroweb.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
ea.prod.absa.africa
webchat.absabank.co.ke
shugo-b.absa.africa
webhook.absa.africa
tails.prod.absa.africa
webhook-staging.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
tails.dev.absa.africa
notify.prod.absa.africa
MailInbound.absa.africa
cibclientaccount.absa.africa
digitaldistribution.absa.africa

Certificate

The complete raw certificate details for exuhomeloans.absa.africa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum3zApwreibjZLXkzdM1
Va60JISLBa0LQMka0XYV5txaCJao8WslsOAzoVVHe2L5CeEuZLQ4XGwwf8yVWWjf
o7EDtsuSqkjG9SFvphKRK/iFjfLozdv2Rg6pTW+ZH/GZm1HhqBEfQBA9/wXv84zh
ENMuoioDpFJ9nxw5VeVwZMVAx4j9aFHmLHEP8zlk1xAyfFcYH4sVawdfBz9ep8ra
wYr2YoRuDCz2m29vQc0PsGAlJ3wGcebXEV1Geg7beKjkLDgI478Ke868y2svCByj
wTH2JjWON+qV0oeT3Y1u2xjMnW1p7ReGJ0M0HcSFkriJLwj8Coz2gfLIu63h8yA/
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12363444212167668001426196061092224065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exuhomeloans.absa.africa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23534542723823280095397763109519008808670079253472495988217158191617906127784636586788537402980631362288876549313202992786635679010507672507730404215530874784586456057050328218265375372878266454551558426453435570224981817941599245856762162120800466645243520650508334194609812209453057129038340601971518362659569698625016043406515824147492781982849785757905921049177039948395837880147727249512106799343719813767658710992645522885911967944818633570529803688011666804173681292583526200165068299640238984207736943286926708544884923277269977502959111009868492191500043293681894903033355448677101986879496208555869544136547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27294d97dc86ace3ab8a4c8f2dd9670374d4816b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exuhomeloans.absa.africa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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