short.dev.absa.africa

- Absa Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:55:02:7e:b9:09:ff:d1:f5:c5:34:34:9c:46:b4:07 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:55:02:7e:b9:09:ff:d1:f5:c5:34:34:9c:46:b4:07
Serial Number (int): 15062903791444034276871985583859610631
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:07:bd:48:de:a5:32:e9:c4:23:40:0d:a9:92:16:6b:79:1b:d0:b9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d1:fa:31:14:82:43:c2:6e:0c:61:62:29:c9:10:37:44:09:6e:79:d8
Fingerprint (sha256): 13:bb:5d:99:33:20:e5:75:8d:ba:0f:f0:9d:be:00:6b:93:aa:29:4a:e6:66:cb:09:a5:4d:c3:ee:2a:be:c4:20

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate short.dev.absa.africa

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for short.dev.absa.africa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

short.dev.absa.africa

Other certificates including the domain name absa.africa

(limited to 100 certificates)
click.cibmc.absa.africa
sso.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
sdr-estatement.absa.africa
sso-test.absa.africa
netbanking.ke.absa.africa
marketplace.absa.africa
exuhomeloans.absa.africa
webchat.absabank.co.ke
gena.absa.africa
Mail.Absa.co.za
demo.prod.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
ssohub-test.absa.africa
pocketflow.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
absa-rbbshortterm-test.absa.africa
ib-secure.mz.absa.africa
shugo-internal-nonprod.absa.africa
cloud.absarbb.absa.africa
readytowork.absa.africa
latelier.absa.africa
eventsdesk.absa.africa
mail.absa.co.za
cibclientaccount.absa.africa
supportandservicemanagement.absa.africa
akamai-san130.exacttarget.com
iboc-test.absa.africa
image.email.sweet.tv
chatbot-ug.absa.africa
short.dev.absa.africa
ea.uat.absa.africa
webchat.absa.co.mu
akamai-san130.exacttarget.com
mra-e-cluster-1.absa.co.za
api.absa.africa
www.absafinancialservices.co.za
iboc.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
habari.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
image.email.sweet.tv
webchat.absa.co.bw
shugo-bc-uat.absa.africa
shugo-b.absa.africa
digitaldistribution.absa.africa
ibocnbc-test.absa.africa
ea.prod.absa.africa
trk-estatement.absa.africa
webhook.absa.africa
notify.prod.absa.africa
image.email.sweet.tv
iboc-dev.absa.africa
webchat.absa.co.tz
homeloans.absa.africa
ea.uat.absa.africa
mftmobile-uat.absa.africa
demo1.dev.absa.africa
events.absa.africa
shugo-a.absa.africa
jhbpsr000001200-cluster1.absa.co.za
image.email.sweet.tv
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
netbanking.ug.absa.africa
MailInbound.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
Readytowork.absa.africa
ea.dev.absa.africa
kyc.uat.absa.africa
shugo-internal-prod.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
latelier.absa.africa
sso-test.absa.africa
onboarding.absa.africa
latelier.absa.africa
onboarding.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
api.absa.africa
kyc.dev.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aroweb.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
ea.prod.absa.africa
webchat.absabank.co.ke
shugo-b.absa.africa
webhook.absa.africa
tails.prod.absa.africa
webhook-staging.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
tails.dev.absa.africa
notify.prod.absa.africa
MailInbound.absa.africa
cibclientaccount.absa.africa
digitaldistribution.absa.africa

Certificate

The complete raw certificate details for short.dev.absa.africa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEa90paoqoish4O0nGm1
36gQsfrI7S0PKTcMxd1kM3U/nJk970I79hnW4KyTXho1lIo8Q10UlXdH9TNemAi9
DBjVCIZYEP0ebhAu7TIaZNynEoqhEC1izHrPsN2CNWZSLc8Mmy7tZXOtrq8S7NFQ
UXppgpszhiKGvWu4oa3geQHqc7PUuJGQYxJRtFsrQNnzA6bOQuddx0i4vDxtWKh2
xbONVrZOWu/CQ4+SENxFsThs1VgOOo0zS+JughoZMiT100f3zdaS57tk5hMyvKm8
OOBquF7IuQw4Q1YsO0XQmtLEn9hbVy1a23lfnuYxKpgiB72AlKUfUpC6ncy8sJFy
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15062903791444034276871985583859610631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'short.dev.absa.africa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19223106285958091338684079975801597049912648097156463028868692210138370483950004675652126805463018466904937220362716420149543073288887998322625071102745239544855089339882440630542321867753897362989303350150843631143283130061687762229050022624976876587208537824516674469735836479430532989256951746971832456966208838288550625287539264044386705836294403809022684731194424526055177343974443833844911682183302682525037323890797596143568021084618362687817139154223765483755260272341307959861791841688700393558847413990012584801833953692474035379983410020233864981313657174964365372328615775450640931057245088718287193338499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9007bd48dea532e9c423400da992166b791bd0b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'short.dev.absa.africa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d76b6b6f4acee12a223bb53507d9d80781bb5152f1612a73658148800b3f7f4a27a14018323649cb20475411cbdb0cfde10e833463cc4400b7485f969c545b3d167ac523791d66aa60fed8cae524c91e284262455d7f4d27850d5c0ddb42031e164065ffc4c88dafd883ae448362cffaf78f2521b57adc0f70365e60d0af59e629595863217cf177f4f9ede1559a88c0e50b4e3f4567c87580f5c5a3a5f3ac79c661438c6e2c257c1402334b48deb73a8b8176c7efc7270c3beb1ae206b1843b8f6c80f3ed0b3a800128ac8154ed0018aa9c9e27f79183f9663a7ceb6b545c7ef1da1893cd646723640d773f067b3cdb0280200d636bfd8b5d784c581993dbfe