brentonhaven.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:35:96:a9:6d:b4:7c:23:de:80:5e:78:30:04:d1:c7:a0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brentonhaven.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:35:96:a9:6d:b4:7c:23:de:80:5e:78:30:04:d1:c7:a0
Serial Number (int): 292714066916731409453054186558768188344224
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:a6:0d:fc:9e:48:ca:ab:2e:70:78:e4:d2:10:1e:fe:13:d9:49:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:2e:3c:8e:83:db:6d:7e:8c:8b:08:ba:3c:64:93:d0:88:cc:86:c0
Fingerprint (sha256): 0b:8d:04:e4:21:95:31:1a:7f:65:1b:1d:58:df:47:16:03:40:d8:aa:04:f7:e7:8a:0e:2e:bf:31:ab:0b:6d:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brentonhaven.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brentonhaven.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brentonhaven.co.za
www.brentonhaven.co.za

Other certificates including the domain name brentonhaven.co.za

(limited to 100 certificates)
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
booknow.brentonhaven.co.za
brentonhaven.co.za
booknow.brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
booknow.brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za
brentonhaven.co.za

Certificate

The complete raw certificate details for brentonhaven.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqho/Q0SbXjpYIvA4EbU
HYo7bWdFp7XYdAMc6+rpkWXAtX105yfoMIwQ83I1BAcTn48heQJM7/8bY8Ayac2o
84Hy1SEYg/Trnc2KHL0CCkfCzjsvyL8Em0OYE214Zqa6DlrlSraodQTkKK7mwskD
SEpG4ffY9uotYCX1MHjGRxXkv0bX/LTuv2pq9q5LYvNTAdGHmUSF2OK1VJePGamI
OtNwe5t5Zt7ffbpsayRCcuZTX8canAG2jIJGEWX5SPp+6KvJeG34QzPG01Ibmkid
+RVC+Ka1+6hQXWpVHnYKVgD4YLm/OErCpoiBZ+zXpbKaz2BlU3NdQXXPhDtXzQxK
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292714066916731409453054186558768188344224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 23:01:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 23:01:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brentonhaven.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26088136944038141698874329977920663272707692702415802231305946234407149840296654575280332378040719975785871739253008893058524694458516757103197107708759353481092437000170620206246549052598103332264359544390521304120064973702210553473216369693802770868754486035311592917739289970082268632686236809315799414990383043975046719820846758214146351966982542193339202102061750159738442411288013116058676503493087280313903413741679148987242279101799532483136632474028290932157599374326204252924089854954504223596246381922103401444728855938590062306591320026022589374392189065183351882423012753426035819402384471239820967692987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2da60dfc9e48caab2e7078e4d2101efe13d94949
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brentonhaven.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentonhaven.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cc613ecbc000004030046304402202b1f3d40662fc3f74450b9edd310cc459cef9724cabfeafccc4a2db62069034502200c6cfddb5d3769dc139e9138677846633fa91f3ece93b6d01e52c788539a095f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cc613ece10000040300483046022100f645412dd86f07beaf4aee2dc1da7a975d7807912580c16dcd4dab710eb199490221008ab5a86be801312a3d3c3991e31f8ad8d8c9948e0a53a323423d55f0d4465926
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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