www0.sun.ac.za

- Stellenbosch University -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 82:f4:16:fb:20:55:cd:a5:5f:b5:c4:94:f9:ea:28:c9 was issued on by Sectigo Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Stellenbosch University

Organization: Stellenbosch University
State / Province: Western Cape
Country: ZA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 82:f4:16:fb:20:55:cd:a5:5f:b5:c4:94:f9:ea:28:c9
Serial Number (int): 174067025994808882980643102426737027273
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ef:02:aa:07:1c:3b:13:17:88:14:61:58:fd:b4:2c:96:d9:74:6c:dd
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 01:1c:6a:22:68:b4:f3:8d:ff:06:03:9d:f8:e9:80:be:fe:47:f3:82
Fingerprint (sha256): 08:9d:dd:e1:1a:68:6c:fe:43:e9:6b:de:9e:3c:ce:68:2e:30:e1:ee:b2:54:00:ac:8f:67:e3:46:74:cf:40:d6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www0.sun.ac.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www0.sun.ac.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www0.sun.ac.za

Other certificates including the domain name sun.ac.za

(limited to 100 certificates)
lyncdir.sun.ac.za
sympa.sun.ac.za
giscsat.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
berg.sun.ac.za
sites.sun.ac.za
dsp.sun.ac.za
piwik.sun.ac.za
berg.sun.ac.za
sympa.sun.ac.za
willows.sun.ac.za
www.domus.ac.za
learnarchive.sun.ac.za
dev-midtier.sun.ac.za
servicedeskdev.sun.ac.za
research.ee.sun.ac.za
icelda.sun.ac.za
sympa.sun.ac.za
bpcnps01.belpark.sun.ac.za
sympa.sun.ac.za
neuroscience.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
uag.sun.ac.za
federate.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sso-prod.sun.ac.za
www.aidscentre.sun.ac.za
sungis10.stb.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
crest2.sun.ac.za
hermes.mb.sun.ac.za
sso-dev.sun.ac.za
lib.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
www1.sun.ac.za
hermes.mb.sun.ac.za
sympa.sun.ac.za
languagecentre.sun.ac.za
www.sarcpl.sun.ac.za
sympa.sun.ac.za
redcap.sun.ac.za
civeng.sun.ac.za
sip.belpark.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
shortcourses.sun.ac.za
web-apps-test.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
blogs.sun.ac.za
libguides.sun.ac.za
sympa.sun.ac.za
phambiliqa.sun.ac.za
eduroam1.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
www.domus.ac.za
www0.sun.ac.za
process.sun.ac.za
sympa.sun.ac.za
study-democracy.sun.ac.za
www1.sun.ac.za
sympa.sun.ac.za
apex.sun.ac.za
sip.belpark.sun.ac.za
sympa.sun.ac.za
shortcourses.sun.ac.za
www.ifr.sun.ac.za
blogs.sun.ac.za
phambili.sun.ac.za
sunsurveys.sun.ac.za
crest2.sun.ac.za
www0.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
study-democracy.sun.ac.za
sympa.sun.ac.za
dev.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sungis08.stb.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za

Certificate

The complete raw certificate details for www0.sun.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 174067025994808882980643102426737027273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stellenbosch University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www0.sun.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754134070634320776239898649779049263575696134614651611017005229731420645373223357031581275076906857188194275978867396595788498538415093717632640052875956075600409780361844531688550961470565938700645329435517210547439700575045052301912711338076328059917910183454970875265438601936531769543206867347751312860892258742818005646481231727774873337001696736788394538562709634012841877121005504269078235140105722407198456957630748654524543147229312930324324118926774970693131084824915546523597392361937871838826366597062922564112738236343120450404754223892283588691056808801685425845242830759549764513843634756454541077391229136493920157451039579012335900744769848935415142585203989992990990885666080690460270596215053901143280572255019981367945542998762646559064549858492112795922075865256515397905024114601955056991246974548529529184269390350092685142066428273770688988489563080695919908236935687964229897790610469277493976015334073705558122511551509099080790717741268070330060684656387499419264699938207343521670763450265716350056106931926177150896531258608368564458691950581282816590187192148650244635669744113854678231999070521456497523910477550998360558132011445034017902954134903352286026163882431247295639678610753736024399160051003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef02aa071c3b131788146158fdb42c96d9746cdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0.sun.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00878fa9205393accf8d9052d77d685c168d4dafee379db55c4ca71da5549aa93bdc616a5a06b2a602702fd2393e9042b96fb38bcc0d05dcad0ba7a252540405d102dc3def710c49838dd27036a5545ee4e158845328d30a4615be0acec7e004eac7898b814942f6fc633f31a06262651c069c832ee902e1a410e8116fdc13c1d950db107167b14a638fb3cc9acfc391f967d8ba963a07437292d809bcd3d1600a534a99e6033bc325a2080603d15b80412e5f2154427a4d5319e7fce0e650331b7b3c798becd39f6943f0b6f70309e4d3777f67542ed1d360a55cabc42d4e703d97897062289d5ed11bb26fdc5d2b5c4ad4b1e0459dd6765e8abef6608331ca43