speedtest-pri.rsaweb.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:b9:cb:e6:12:75:bd:b6:b6:37:a4:be:19:0b:00:99:97 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=speedtest-pri.rsaweb.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:b9:cb:e6:12:75:bd:b6:b6:37:a4:be:19:0b:00:99:97
Serial Number (int): 324876343924474541011657148451593576814999
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:04:4d:80:81:68:02:f1:38:a6:e0:c1:e0:18:a4:e8:3d:8b:89:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:d9:73:00:bf:1d:71:9d:c9:50:4e:e0:a4:fb:a3:4b:31:b6:b3:2b
Fingerprint (sha256): 07:2a:8c:44:ef:58:c9:18:d4:05:88:51:0d:2e:a7:60:16:7e:89:e8:2a:d6:20:28:34:47:d9:47:42:97:0e:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate speedtest-pri.rsaweb.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for speedtest-pri.rsaweb.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

speedtest-pri.rsaweb.co.za
speedtest-sec.rsaweb.co.za

Other certificates including the domain name rsaweb.co.za

(limited to 100 certificates)
careers.rsaweb.co.za
careers.rsaweb.co.za
sni.cloudflaressl.com
iris.rsaweb.co.za
iris.rsaweb.co.za
sni.cloudflaressl.com
support.rsaweb.co.za
careers.lewenet.com
sni.cloudflaressl.com
speedtest-pri.rsaweb.co.za
insight.rsaweb.co.za
careers.ukbts.co.uk
ssl517333.cloudflaressl.com
jobs.thepmocompany.com
careers.ukbts.co.uk
sni.cloudflaressl.com
ssl510343.cloudflaressl.com
jobs.42nerds.com
jobs.profitroom.com
gis.rsaweb.co.za
careers.geninvo.com
careers.danecca.com
jobs.bamero.de
careers.rsaweb.co.za
support.rsaweb.co.za
support.respondit.co.uk
sni.cloudflaressl.com
sni.cloudflaressl.com
careers.rsaweb.co.za
sni.cloudflaressl.com
desk.capitalbytes.com
iris.rsaweb.co.za
support.rsaweb.co.za
support.rsaweb.co.za
gis.rsaweb.co.za
careers.blueprintsecurity.nl
gis.rsaweb.co.za
support.rsaweb.co.za
ssl510344.cloudflaressl.com
careers.ukbts.co.uk
support.rsaweb.co.za
careers.kalixa.com
sni.cloudflaressl.com
sni.cloudflaressl.com
speedtest-pri.rsaweb.co.za
support.rsaweb.co.za
careers.tecamb.it
sni.cloudflaressl.com
sni.cloudflaressl.com
careers.rsaweb.co.za
kb.valsplat.nl
ssl510343.cloudflaressl.com
sni.cloudflaressl.com
ssl510343.cloudflaressl.com
careers.ukbts.co.uk
jitsi.rsaweb.co.za
careers.ukbts.co.uk
sni.cloudflaressl.com
careers.tecamb.it
support.respondit.co.uk
support.respondit.co.uk
jobs.spectrum-dm.de
jitsi2.rsaweb.co.za
sni.cloudflaressl.com
jitsi.rsaweb.co.za
*.vcloud.rsaweb.co.za
sni.cloudflaressl.com
gis.rsaweb.co.za
support.rsaweb.co.za
careers.ukbts.co.uk
support.rsaweb.co.za
support.rsaweb.co.za
careers.rsaweb.co.za
support.rsaweb.co.za
ssl510342.cloudflaressl.com
jobs.silverside.com
support.rsaweb.co.za
careers.ukbts.co.uk
jobs.madas.gmbh
jobs.aarini.eu
customer-recruit.zoho.eu
pre-production.rsaweb.co.za
ssl510343.cloudflaressl.com
ssl517332.cloudflaressl.com
iris.rsaweb.co.za
sni.cloudflaressl.com
careers.rsaweb.co.za
sni.cloudflaressl.com
jobs.liverestaurant.co.uk
*.vcloud.rsaweb.co.za
careers.rsaweb.co.za
careers.tecamb.it
support.rsaweb.co.za
careers.rsaweb.co.za
sni.cloudflaressl.com
bootcamp.rsaweb.co.za
careers.onqor.co.uk
support.respondit.co.uk
iris.rsaweb.co.za
jobs.tsn-media.com

Certificate

The complete raw certificate details for speedtest-pri.rsaweb.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/IGrtJzq+VbgfHvwcK3
6ONye1kqgzuiCNyf6TlI1h25IgbT+CcfmX44Yf2mNXRit7IWaKdFw15DLXgWyWZU
uuffwE1KYuOdp7wdtiFNDFk8vaaIwgEQYjgHApgIGRNDbGUvaeSR5auoT/iGtb8H
726ZVzdo+Y/V6j8nD/mkcpqTD/hylx0UGO76zpf6JrHjWbmVY/+UXsBatoCuBc7L
InHDJhxFKSxGEJCKENS9Ui9hGiA3p6fxMxr57X4M2J9IJJzPCpR8OfPg0kPO6mMf
JbHJMi48Q6xx78AuQl1wrGQugMpmFLTz02X8UfoZtwMWGWXD1DoQVKSaIbdQLuIX
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324876343924474541011657148451593576814999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 10:57:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 10:57:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'speedtest-pri.rsaweb.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23220957329343331360025453374495880331792817688273240073247974872661889103136104028916821186993345662227208729812194994315420261340500093026829250994633353191332570257461965421850954429768668830990820055284261782542389995041939260075127940847384284635582598228207182204028651213281164547900339077302657799477954727341152089017161591414957699323446636446875010177079707554973442043268198183290333747963649124519322193171209926703734011483084656849986336492954161077015540596056136645437311194207311198610922069884092202068315572223634488767083945706756136857455441831394059039289312527204625130226537167420609861392191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9044d80816802f138a6e0c1e018a4e83d8b89e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedtest-pri.rsaweb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedtest-sec.rsaweb.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f044535770000040300473045022100ab0065f3e72fdc1ec2af15b84a7487cd31ab630687a5cd670dd9dbed27f01f3002206c12d652fa8d9e8799818431118f6cc76133490885da8cf892a9f2639535d4e500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f044535a100000403004630440220739237f3ad8ca54ea35da912d014301f5305b28427f4052160f3ccd09327fb750220483dcbdc743d372dc4aa1b1e417d995b92646f1960a90b8cbf1c482730f8d508
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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