clientzone.cititech.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:a4:0f:6e:03:59:98:fd:ab:9b:d2:9d:87:ac:25:ef:f0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clientzone.cititech.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:a4:0f:6e:03:59:98:fd:ab:9b:d2:9d:87:ac:25:ef:f0
Serial Number (int): 318722368945090476037038847265846889672688
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:b3:94:49:f2:02:1a:0e:d1:7b:ea:06:b0:c6:df:1c:d3:91:b8:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:01:12:bc:d8:50:d3:3a:57:1a:e2:ab:97:04:e2:b9:89:dc:e6:62
Fingerprint (sha256): 07:0a:36:c9:a5:f8:f8:86:22:51:6b:e2:f1:40:d8:77:90:21:d2:0d:2b:67:41:b2:ab:ea:7d:78:14:49:b2:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clientzone.cititech.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientzone.cititech.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientzone.cititech.co.za

Other certificates including the domain name cititech.co.za

(limited to 100 certificates)
systemstatus.rrc.ca
hr.web-ai.studio
mail.traficus.club
status.hpiinc.com
status.digitary.net
mail.transantino.com
mail.congosemcg.com
books.sidestreetmedia.cc
email.crossroadconsultants.pk
team.theblaregroup.com
systemstatus.rrc.ca
webmail.vianovabeneficios.com.br
status.stability.ai
status.dutchmillerauto.com
mail.supersonnig.org
hr.welhunt.com
healthstatus.clinicmaster.com
cititech.co.za
status.cofh.org
mail.detectorsecurity.com.cy
mail.taironacoffee.com
clientzone.cititech.co.za
healthstatus.clinicmaster.com
people.generictechltd.com
hr.intellisystech.net
acc.ts.printo.in
statusp.dotdigital.com
people.cititech.co.za
empleos.sasseguridadprivada.com.mx
stg.dotdigitalstatus.com
mail.sycharsolutions.com
webmail.ultrasys.com.br
cititech.co.za
cititech.co.za
statuspage.vantage.online
mail.whatslive.com
mail.dibi.co.za
status.fmgsuite.com
people.basic.am
acc.ts.printo.in
radius.cititech.co.za
mail.melkor.tech
mail.traficus.club
site-status.motor.com
mail.supersonnig.org
mail.shibanigroup.com
people.fajwah.com
mail.taironacoffee.com
systemstatus.rrc.ca
portal.cititech.co.za
systemstatus.rrc.ca
mail.ppg.co.ke
correo.fyndecolombia.com
careers.paicsolar.com
webmail.ultrasys.com.br
status.esafetysystems.com
status-salus-eu.uleeco.com
mail.traficus.club
clientzone.cititech.co.za
subs.scarletglobe.shop
monitor.cititech.co.za
shop.cititech.co.za
careers.movere.ai
employee.passportogo.co.il
webmail.sgsf.adv.br
people.sarisuki.com
mail.bramble.me
shop.cititech.co.za
status.ssactivewear.com
healthstatus.clinicmaster.com
status.reliancenetwork.com
systemstatus.rrc.ca
team.aat.team
systemstatus.rrc.ca
status.crewbuilder.ca
formularios.martinic.xyz
webmail.vianovabeneficios.com.br
mail.ncc.mv
mail.ventana.digital
hr.atc-portal.com
people.caliber.solutions
hr.indicoweb.com
mail.taironacoffee.com
caloes-status.ravemobilesafety.com
books.djltraining.com
cititech.co.za
status.c9cg.com
email.dearborns.us
employee.passportogo.co.il
status.esafetysystems.com
systemstatus.rrc.ca
people.cititech.co.za
careers.theskunklabs.com
status.ssactivewear.com
people.basic.am
radius.cititech.co.za
wobily.noc.cloudi.cloud
mail.lanari.fi
hr.web-ai.studio
systemstatus.rrc.ca

Certificate

The complete raw certificate details for clientzone.cititech.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxr8pufM+4xca48xmG5T
CK88DT98cj3bZhLtzoolyWsTW6+bv1F5NzH9QLA55vqEgpjtMgLe5AdJ1XzrMPef
lm43b1Oi50ycJ+Vy4qifyY8tei2bAHCCzs8chgI9ipNNRdXA05Wa2cKa3X/f5eBG
criqCiCZ0cr6czMDjf8sKcbvtF1vrbgYJoVSYJZZn3WpbDG9R+3x9YmNpiCq3jox
aTlpH3Cz0F5hDuBQA0QZlWaSzfiqqfRbNvHzpPCgo+BjhxYHLh4VIZiiTk9udh84
/QlKvcKLh0lip/pIy7MeIxeZGMXE9RhAE6aj395VVH/L1cKyZKsPzcC1XmNKi4a8
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318722368945090476037038847265846889672688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-26 09:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-25 09:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientzone.cititech.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19075291796988820856786128854371825244006534837640996569619278042923196313327057199125627528549445572105718573352446732599475074045463518302513894533518563686280280945850159880373260274575545962616633743031822126110549459725521945049310919082961011647457821024175992697764380471478239860804215236389142930955743154878413007704899379928819072424201959985957749611577055037800680157861337190849641516892593150129882785053062733646548620710022334057758539699358844532564988590693693572547204496875258987069492918991668424147251832703784311186033705321545715231772647202037862444948777292050445734013339887363522847751307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3b39449f2021a0ed17bea06b0c6df1cd391b8e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientzone.cititech.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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