*.resbank.co.za

- South African Reserve Bank -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:21:1a:01 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

South African Reserve Bank

Organization: South African Reserve Bank
State / Province: Gauteng
Locality: Pretoria
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:21:1a:01
Serial Number (int): 1277237761
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 64:c8:61:87:13:3f:2a:a8:09:9b:2b:d0:f1:33:62:c3:cc:07:9d:82
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 55:03:3d:5c:48:ab:aa:15:e0:d9:e3:4d:a4:02:9a:f5:47:7d:dc:d4
Fingerprint (sha256): 12:89:c0:41:bc:75:71:d6:40:8a:6f:02:7d:e0:ba:cf:70:50:a6:cb:1c:ab:34:54:55:ba:56:5e:70:7b:08:8e

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate *.resbank.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.resbank.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.resbank.co.za
resbank.co.za

Other certificates including the domain name resbank.co.za

(limited to 100 certificates)
eipuat3.resbank.co.za
P170518.resbank.co.za
eipuat6.resbank.co.za
ise-ho.resbank.co.za
uat01754.resbank.co.za
c3otdsqua.resbank.co.za
c3brv.resbank.co.za
sarbdexqp.resbank.co.za
webmail.resbank.co.za
*.resbank.co.za
sdr14152.resbank.co.za
uimcabi.resbank.co.za
srv02105.resbank.co.za
eipdev1-mc.resbank.co.za
vpn1.resbank.co.za
uim.resbank.co.za
vpn1.resbank.co.za
webmail.resbank.co.za
c3otdsuat.resbank.co.za
srv09240.resbank.co.za
vpn1.resbank.co.za
SABNAIRDIS.resbank.co.za
SRV13508.resbank.co.za
uploadbox.resbank.co.za
dev50230.resbank.co.za
C3otds.resbank.co.za
mailkey.resbank.co.za
SSQ6.resbank.co.za
QUA01754.resbank.co.za
srv14152.resbank.co.za
srv02105.resbank.co.za
srv09961.resbank.co.za
mailkey.resbank.co.za
webmail.resbank.co.za
eipqua2.resbank.co.za
SDR04581.resbank.co.za
uploadbox.resbank.co.za
CSQ6.resbank.co.za
sarbvdi.resbank.co.za
SABNAIRDIS.resbank.co.za
*.resbank.co.za
c3otdsdev.resbank.co.za
eip-preprod.resbank.co.za
www.resbank.co.za
webgate.resbank.co.za
uim.resbank.co.za
sabnswmc01.resbank.co.za
srv50233.resbank.co.za
uimcabi.resbank.co.za
sarbdexqp.resbank.co.za
resbank.co.za
sarbdexprd.resbank.co.za
eipqua5.resbank.co.za
srv02104.resbank.co.za
P128953.resbank.co.za
dev50232.resbank.co.za
srv50231.resbank.co.za
Dev01754.resbank.co.za
mailkey.resbank.co.za
*.resbank.co.za
eipuatp1.resbank.co.za
BSD.resbank.co.za
sarbdexprd.resbank.co.za
SABNAIRDIS.resbank.co.za
qua.eip.enc.citibank.resbank.co.za
vpn2.resbank.co.za
data.resbank.co.za
uat.eip.enc.citibank.resbank.co.za
srv09956.resbank.co.za
psh.resbank.co.za
sarbdexqa.resbank.co.za
webmail.resbank.co.za
srv02103.resbank.co.za
sarbdexqp.resbank.co.za
c3dev.resbank.co.za
SRV04581.resbank.co.za
Operations.resbank.co.za
srv02104.resbank.co.za
bp.resbank.co.za
sarbvdi.resbank.co.za
srv02104.resbank.co.za
dev09901.resbank.co.za
webapps.resbank.co.za
www.resbank.co.za
uimcabi.resbank.co.za
uimdev.resbank.co.za
UAT01755.resbank.co.za
maildelta.resbank.co.za
eipdevp1.resbank.co.za
c3intuat.resbank.co.za
qua50232.resbank.co.za
srv09961.resbank.co.za
webapps.resbank.co.za
qua50232.resbank.co.za
prd7pp.resbank.co.za
stsdev.resbank.co.za
QUA01755.resbank.co.za
eip.enc.citibank.resbank.co.za
sarbwebex.resbank.co.za
sarbdexqp.resbank.co.za

Certificate

The complete raw certificate details for *.resbank.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTivK/dLrohSeXsdnLqe
ts2cfJLwJvhePmwHy8NWXAncSzK+ObRSuHh4JpdXkOu3juqSIqfsOZHPQdM7CMTb
HN+bc5X9crk3QzRDYg9Dv0GF//QQNyha9xceETnBV/MA50FV86BKpAMcZbZagh4s
oQY7RJTK8aPpdOwoaWx53WCal5tOOPjdciTapwdH2YnM36EAXJVGYr4fVgQtO2FY
UadPNh9cMjQx0gKP6iakjVSzkakaiW4JYM1bH6Jc5wD4JgVpRpcppTRZJlPnq6tg
xHSv1bm9inv+kdQTf3RGMvCJ/jRYdz5Hl71PN6YROE7mT9Rs0HFpeVK0CTC/JDg7
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277237761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-22 12:55:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-23 15:15:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South African Reserve Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.resbank.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21362225591934262522090240366778659550745742453515351481103112096534301944141066504819357054760173931752241461993842162387220561402720550880323962758554417867527085141487990846414302375645052090875605648071861177221420580486266689286219837250550377702946057485054163919104780853099121623383338820901912398089674198981770724645285511647013445883082853076027213391581403375215168941133758925895764951914536703019697790785886110688493630131230383707136263472883991794713138960917565597825282608113663009665489509638219017521960214066384079447290517063438462493876441763748959479533706387471958277457989781775521653734201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resbank.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resbank.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64c86187133f2aa8099b2bd0f13362c3cc079d82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a8fdcee2d01e7abd61e26e809e6c93151451b7f67913fb04d5c178f56b69de9c375a9333f75ec96b01ad1162739f7248150b73e3385056c11b5c694a47ea603a5d530531cbd7841d6053d30b8e667c7b57268fbb43cfaa73c7f92e9c15725c3d2faac210646e6849e99019704351d017f60b5b417bb7dda32e8530a33d6d8f5327dcb8270c842fb670efc21877bc3faa6b850be1bdff9a5f8903a61847c79a58f3e69f8c132f22cbeae058cd045ca2dc8a41af3ce032fde62d013d2b3d905bf0bb0ee371f0293c3fd99604a25ef20ed2fe0d80b6cfcf59014171c346be6984388fb85839343f98008dc4ecc21b97e7bd9c9bcacf972f82642999baad3165738