crest2.sun.ac.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:00:01:8e:ba:ce:17:8d:15:43:22:6f:7e:0a:fb:a0:81:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crest2.sun.ac.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:01:8e:ba:ce:17:8d:15:43:22:6f:7e:0a:fb:a0:81:2b
Serial Number (int): 348451214050047159919215471479129204883755
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:0b:ec:95:37:12:6c:21:7d:dd:94:1e:e2:84:9d:56:b2:76:e4:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:68:8a:82:d8:9e:b4:5f:0f:e0:f3:d5:a8:92:f5:cf:cf:25:f4:39
Fingerprint (sha256): 0a:ed:82:ca:a7:48:eb:7f:7d:1d:f6:c2:9a:69:fa:7a:92:e3:89:f2:50:85:c2:41:b7:6a:d9:e5:3c:0c:82:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate crest2.sun.ac.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crest2.sun.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crest2.sun.ac.za

Other certificates including the domain name sun.ac.za

(limited to 100 certificates)
lyncdir.sun.ac.za
sympa.sun.ac.za
giscsat.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
berg.sun.ac.za
sites.sun.ac.za
dsp.sun.ac.za
piwik.sun.ac.za
berg.sun.ac.za
sympa.sun.ac.za
willows.sun.ac.za
www.domus.ac.za
learnarchive.sun.ac.za
dev-midtier.sun.ac.za
servicedeskdev.sun.ac.za
research.ee.sun.ac.za
icelda.sun.ac.za
sympa.sun.ac.za
bpcnps01.belpark.sun.ac.za
sympa.sun.ac.za
neuroscience.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
uag.sun.ac.za
federate.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sso-prod.sun.ac.za
www.aidscentre.sun.ac.za
sungis10.stb.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
crest2.sun.ac.za
hermes.mb.sun.ac.za
sso-dev.sun.ac.za
lib.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
www1.sun.ac.za
hermes.mb.sun.ac.za
sympa.sun.ac.za
languagecentre.sun.ac.za
www.sarcpl.sun.ac.za
sympa.sun.ac.za
redcap.sun.ac.za
civeng.sun.ac.za
sip.belpark.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
shortcourses.sun.ac.za
web-apps-test.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
blogs.sun.ac.za
libguides.sun.ac.za
sympa.sun.ac.za
phambiliqa.sun.ac.za
eduroam1.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
www.domus.ac.za
www0.sun.ac.za
process.sun.ac.za
sympa.sun.ac.za
study-democracy.sun.ac.za
www1.sun.ac.za
sympa.sun.ac.za
apex.sun.ac.za
sip.belpark.sun.ac.za
sympa.sun.ac.za
shortcourses.sun.ac.za
www.ifr.sun.ac.za
blogs.sun.ac.za
phambili.sun.ac.za
sunsurveys.sun.ac.za
crest2.sun.ac.za
www0.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
study-democracy.sun.ac.za
sympa.sun.ac.za
dev.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za
sungis08.stb.sun.ac.za
sympa.sun.ac.za
sympa.sun.ac.za

Certificate

The complete raw certificate details for crest2.sun.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx34ErISUvboBQ3JaBzQF
et6dsTGKl9K3hyDWbC3f/5WSmrVB6on/wCcUPaAcDweoAh5A0TwaTSjqxVeXLamv
bLD+4F3Nk4VRUWcz29UDxZ7/YoXhf6Y7e8GNzndtgXxi/Xj3qPsIrxL5eSGtWhT/
wv0wuzAk8PMJeSVbDJDjzQiLzrLmpJ0xTR46Adfwp89g5e3wdzYliauGgP2O7YkB
Q/B+Ql2H0JONytWQXYnmPuYFhYlcC9dhUdWatiXaIMn278i972v1L8vmmpIm1nAz
L25gE3Q0WpkT4dAMlZHoHU8FYCUxA8Mb31Bb0pooMuo99evF8u6WbKmRXTao34Y7
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348451214050047159919215471479129204883755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 22:33:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 22:33:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crest2.sun.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25183564607037620640551656323403773648994152533914852737302483835045432463672702867050829246955258918947983358388954823198524788258500043207766775776319953663633401630990865720591381185230170579659803214932556850793021224023449597770286406840673306829355527677642150113402708994990497277226590014830230655826939900254661519884452475985209150124822274541459433113067571152113367075515404850527802486190399582395696376315794507941424673800590553166137332083262346508017241878123524726992526987127654917784232271111052245743105929591220090250881071898000399518038156732936337344034583234986742331727510869421502673337151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							850bec9537126c217ddd941ee2849d56b276e414
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crest2.sun.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bba2f9c35000004030048304602210096df4291f7a677e0e95f4a0d0d0e2d5366553b1ac39aaa9522be24ebf621b995022100bc8fbf782e2a31a3ff364e2dbcda4f698532ea58c4d81de3c0c837c9a4ed427e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bba2f9e2600000403004730450220458c4bc527997477576c52f2626f8cf6addd3d5f7d4086a6716e6eca3ca0ab34022100fdda7049fc1de9f7c4d70190fdc70ea12336d4f301949f1e2ee74e45c9ee7b27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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