CSQ6.resbank.co.za

- South African Reserve Bank -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4c:83:5f:71:87:de:aa:a5:00:00:00:00:50:e7:2b:a8 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

South African Reserve Bank

Organization: South African Reserve Bank
State / Province: Gauteng
Locality: Pretoria
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:83:5f:71:87:de:aa:a5:00:00:00:00:50:e7:2b:a8
Serial Number (int): 101703454391866043484438146617522465704
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 79:40:75:9e:5d:a8:96:aa:9d:5a:f0:74:a2:d5:0f:25:b5:58:33:d3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 40:fb:65:a0:2b:5c:ae:16:4f:a2:86:9d:dc:d3:3f:52:9d:6b:14:b5
Fingerprint (sha256): 11:33:df:22:8b:8b:61:ab:d5:38:04:75:e1:d8:09:88:e1:83:f2:ea:c3:e9:8b:0c:9b:2f:35:86:d1:de:45:8b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate CSQ6.resbank.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CSQ6.resbank.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CSQ6.resbank.co.za

Other certificates including the domain name resbank.co.za

(limited to 100 certificates)
eipuat3.resbank.co.za
P170518.resbank.co.za
eipuat6.resbank.co.za
ise-ho.resbank.co.za
uat01754.resbank.co.za
c3otdsqua.resbank.co.za
c3brv.resbank.co.za
sarbdexqp.resbank.co.za
webmail.resbank.co.za
*.resbank.co.za
sdr14152.resbank.co.za
uimcabi.resbank.co.za
srv02105.resbank.co.za
eipdev1-mc.resbank.co.za
vpn1.resbank.co.za
uim.resbank.co.za
vpn1.resbank.co.za
webmail.resbank.co.za
c3otdsuat.resbank.co.za
srv09240.resbank.co.za
vpn1.resbank.co.za
SABNAIRDIS.resbank.co.za
SRV13508.resbank.co.za
uploadbox.resbank.co.za
dev50230.resbank.co.za
C3otds.resbank.co.za
mailkey.resbank.co.za
SSQ6.resbank.co.za
QUA01754.resbank.co.za
srv14152.resbank.co.za
srv02105.resbank.co.za
srv09961.resbank.co.za
mailkey.resbank.co.za
webmail.resbank.co.za
eipqua2.resbank.co.za
SDR04581.resbank.co.za
uploadbox.resbank.co.za
CSQ6.resbank.co.za
sarbvdi.resbank.co.za
SABNAIRDIS.resbank.co.za
*.resbank.co.za
c3otdsdev.resbank.co.za
eip-preprod.resbank.co.za
www.resbank.co.za
webgate.resbank.co.za
uim.resbank.co.za
sabnswmc01.resbank.co.za
srv50233.resbank.co.za
uimcabi.resbank.co.za
sarbdexqp.resbank.co.za
resbank.co.za
sarbdexprd.resbank.co.za
eipqua5.resbank.co.za
srv02104.resbank.co.za
P128953.resbank.co.za
dev50232.resbank.co.za
srv50231.resbank.co.za
Dev01754.resbank.co.za
mailkey.resbank.co.za
*.resbank.co.za
eipuatp1.resbank.co.za
BSD.resbank.co.za
sarbdexprd.resbank.co.za
SABNAIRDIS.resbank.co.za
qua.eip.enc.citibank.resbank.co.za
vpn2.resbank.co.za
data.resbank.co.za
uat.eip.enc.citibank.resbank.co.za
srv09956.resbank.co.za
psh.resbank.co.za
sarbdexqa.resbank.co.za
webmail.resbank.co.za
srv02103.resbank.co.za
sarbdexqp.resbank.co.za
c3dev.resbank.co.za
SRV04581.resbank.co.za
Operations.resbank.co.za
srv02104.resbank.co.za
bp.resbank.co.za
sarbvdi.resbank.co.za
srv02104.resbank.co.za
dev09901.resbank.co.za
webapps.resbank.co.za
www.resbank.co.za
uimcabi.resbank.co.za
uimdev.resbank.co.za
UAT01755.resbank.co.za
maildelta.resbank.co.za
eipdevp1.resbank.co.za
c3intuat.resbank.co.za
qua50232.resbank.co.za
srv09961.resbank.co.za
webapps.resbank.co.za
qua50232.resbank.co.za
prd7pp.resbank.co.za
stsdev.resbank.co.za
QUA01755.resbank.co.za
eip.enc.citibank.resbank.co.za
sarbwebex.resbank.co.za
sarbdexqp.resbank.co.za

Certificate

The complete raw certificate details for CSQ6.resbank.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101703454391866043484438146617522465704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 09:16:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-06 09:46:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South African Reserve Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CSQ6.resbank.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873407548879436988783298250540002422060540365612249190588422026893550703114019979581385132737952827340632215487674492053668246730592799637606530287278599961204052491409988259638629627194280557582360783870157152698444030519297085568689581280128332948112143708388643041537540146915075442073864774192703908845921698686353340000877398222572962009148022863415549680898482612598407986720562611251409799731843577016015646793713168829346605226949370076669666298490014411685362110067955912766222777014906123503290159101940137015922376263227495248595531488678106737945234216736761498925993724492530831149827792406166217049233544063440205550790773798149442812611737510589538459152407864839232362166117082767347744771054582749615750180820703021612394511705341313989974139686567490680882942591629052427829821187419444922335320231463637361042500006695668006235661178787997071964717313727341866256127522971708605152503303011726703978574821741379982217606765070606991682613991376982769231203093216026669153523376300177613886064948540569554850295125645331039351583850817488266844126517384946969014590475386564405738271372020139123956259094344718724464439023625833687985482357711517252891498793396705831508721860370421125894722776212194891026776856431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CSQ6.resbank.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7940759e5da896aa9d5af074a2d50f25b55833d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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