clickup.up.ac.za

- University of Pretoria -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:86:05:06:35:7f:2d:c0:42:b4:23:05:63:5d:1c:0a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Pretoria

Organization: University of Pretoria
Organization unit: ITS
Locality: Pretoria
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:86:05:06:35:7f:2d:c0:42:b4:23:05:63:5d:1c:0a
Serial Number (int): 3354325674586947144664288968425937930
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 63:b5:76:03:ca:4e:1a:6b:f5:ab:86:2e:94:68:d6:d8:40:25:e4:ef
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 5d:a5:3b:94:7e:e9:85:f8:56:2b:7f:9c:be:33:50:11:40:98:8a:7b
Fingerprint (sha256): 13:8d:f6:ab:f1:8f:b1:08:71:e1:07:09:7c:2e:5d:1d:a3:ab:b1:c7:57:f4:fd:c4:ce:84:dc:f9:0b:94:03:c3

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate clickup.up.ac.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clickup.up.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clickup.up.ac.za

Other certificates including the domain name up.ac.za

(limited to 100 certificates)
match-the-element.rccsonline.com
givingday.up.ac.za
cs.up.ac.za
yuiki.jp
heartothere.org
prod.28.slot.cdn.salesforce-communities.com
ssc.up.ac.za
api.iingxoxo.com
eduvation.up.ac.za
javascripttraining.ie
cirg.cs.up.ac.za
cirg.cs.up.ac.za
eu-central-1-san1.blackboard.com
prosb.up.ac.za
eu-central-1-san1.blackboard.com
prod.28.slot.cdn.salesforce-communities.com
auth.nework.app
up.ac.za
doortrends.com
prhimpas01.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
cs.up.ac.za
redcap.bi.up.ac.za
eu-central-1-san1.blackboard.com
sns3.freede.net
eduvation.up.ac.za
gwise.up.ac.za
ssl446912.cloudflaressl.com
prod.28.slot.cdn.salesforce-communities.com
prod.28.slot.cdn.salesforce-communities.com
digifors.cs.up.ac.za
www1.up.ac.za
mecheng.up.ac.za
crm.iingxoxo.com
ie-repo.up.ac.za
eu-central-1-san1.blackboard.com
upprodservices.up.ac.za
www.slimeasy.org
ssl446914.cloudflaressl.com
donate.up.ac.za
digifors.cs.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
up.ac.za
clickup.up.ac.za
gobrats.com
www.ahrlj.up.ac.za
www.up.ac.za
eps.ee.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
wwwqa.up.ac.za
crm.iingxoxo.com
eu-central-1-san1.blackboard.com
mecheng.up.ac.za
cigsor.app
wwwqa.up.ac.za
www1.up.ac.za
eu-central-1-san1.blackboard.com
cs.up.ac.za
ie-repo.up.ac.za
wheatley.cs.up.ac.za
repo.ee.up.ac.za
visitor-test.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
cs.up.ac.za
enterprises.up.ac.za
www.certivox.com
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
CLICKUP.UP.AC.ZA
www.pickadoc.de
ssl446914.cloudflaressl.com
researchmatters.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
prod.28.slot.cdn.salesforce-communities.com
modeloguess.cl
www.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
mecheng.up.ac.za
www.renzgranados.com
library.up.ac.za
www.barataimoveis.com.br
rims.up.ac.za
visitor-test.up.ac.za
www.up.ac.za
prawsldp01.up.ac.za
www-new.up.ac.za
exfreight.loadsure.net
upnet.up.ac.za
wwwpr1.up.ac.za
ie-repo.up.ac.za
crm.iingxoxo.com
www.chr.up.ac.za
eu-central-1-san1.blackboard.com
cs.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
repository.up.ac.za
wwwpr1.up.ac.za
innopac.up.ac.za

Certificate

The complete raw certificate details for clickup.up.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdUcvVFdcEb8e2+eS/NU
vOeHwXbRXS+UWUZsRa/Tl4JZr1CgsGaAAHOIFYgawKEk+B5x5qftNkT0k4AI0A1I
ORmtsopCdcLD52eMms8ohrZGdkdKD3nB5aFUySoQPa0YStNR2cg5a0Om3Ueg+gHz
WygqFzJ0EkWfTAcW0clFf09bBzUDmD1LocjbycpTV6CpVs0G9yp2pgWtuRBFgKVq
NfNJ2fo2CkgHMe+nkLJEmruldSXxIw+r6UmEG0F60A2jSHYhNVb3kQth3W13Topq
WAcvj6EBYX2MqSFSEOXa20QnYmPwGQ0+gnpm2kQ+s3wDkehG/s0QL9nHv+qKNgP+
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3354325674586947144664288968425937930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clickup.up.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24974035652316092039804289126474632988541738678677505592138516598597803608228371899325860457249482548600804703919696379207825700667351232990203175067981442805669875785155630416403629639611733825322090185640646679418655878977207318646400046877459404222957730119161788704075387819066310038113496020147364762915754799372864630436694979817174483959805045639268291299453430467965137313546091922836627412903247743211858360439213588878580048819257449333141380342258780213665754762984524210592549448944485080839195282765927389847194237819963503530586653340078349908551861561444962405578406591912467498655047716892513969372687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63b57603ca4e1a6bf5ab862e9468d6d84025e4ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickup.up.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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