www.up.ac.za

- University of Pretoria -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:c8:45:dc:2a:98:4c:78:da:7b:fa:d0:b0:b7:fe:56 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Pretoria

Organization: University of Pretoria
Organization unit: ITS
State / Province: Gauteng
Locality: Pretoria
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c8:45:dc:2a:98:4c:78:da:7b:fa:d0:b0:b7:fe:56
Serial Number (int): 15661384254981933497344856024742886998
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:a3:b5:6d:ff:6c:4b:f3:8a:f6:d7:d6:b6:71:6f:a6:31:28:d3:37
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 0d:59:ca:83:f5:4b:0e:4e:fd:a2:ff:85:fc:11:22:cf:f1:36:7b:f4
Fingerprint (sha256): 14:44:33:65:5b:3f:85:4f:2d:06:c8:3b:fd:c9:87:ef:a4:e1:87:c9:0b:c4:ba:27:92:9b:72:49:2c:f4:d4:2b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.up.ac.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.up.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.up.ac.za
up.ac.za

Other certificates including the domain name up.ac.za

(limited to 100 certificates)
match-the-element.rccsonline.com
givingday.up.ac.za
cs.up.ac.za
yuiki.jp
heartothere.org
prod.28.slot.cdn.salesforce-communities.com
ssc.up.ac.za
api.iingxoxo.com
eduvation.up.ac.za
javascripttraining.ie
cirg.cs.up.ac.za
cirg.cs.up.ac.za
eu-central-1-san1.blackboard.com
prosb.up.ac.za
eu-central-1-san1.blackboard.com
prod.28.slot.cdn.salesforce-communities.com
auth.nework.app
up.ac.za
doortrends.com
prhimpas01.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
cs.up.ac.za
redcap.bi.up.ac.za
eu-central-1-san1.blackboard.com
sns3.freede.net
eduvation.up.ac.za
gwise.up.ac.za
ssl446912.cloudflaressl.com
prod.28.slot.cdn.salesforce-communities.com
prod.28.slot.cdn.salesforce-communities.com
digifors.cs.up.ac.za
www1.up.ac.za
mecheng.up.ac.za
crm.iingxoxo.com
ie-repo.up.ac.za
eu-central-1-san1.blackboard.com
upprodservices.up.ac.za
www.slimeasy.org
ssl446914.cloudflaressl.com
donate.up.ac.za
digifors.cs.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
up.ac.za
clickup.up.ac.za
gobrats.com
www.ahrlj.up.ac.za
www.up.ac.za
eps.ee.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
wwwqa.up.ac.za
crm.iingxoxo.com
eu-central-1-san1.blackboard.com
mecheng.up.ac.za
cigsor.app
wwwqa.up.ac.za
www1.up.ac.za
eu-central-1-san1.blackboard.com
cs.up.ac.za
ie-repo.up.ac.za
wheatley.cs.up.ac.za
repo.ee.up.ac.za
visitor-test.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
cs.up.ac.za
enterprises.up.ac.za
www.certivox.com
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
CLICKUP.UP.AC.ZA
www.pickadoc.de
ssl446914.cloudflaressl.com
researchmatters.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
prod.28.slot.cdn.salesforce-communities.com
modeloguess.cl
www.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
mecheng.up.ac.za
www.renzgranados.com
library.up.ac.za
www.barataimoveis.com.br
rims.up.ac.za
visitor-test.up.ac.za
www.up.ac.za
prawsldp01.up.ac.za
www-new.up.ac.za
exfreight.loadsure.net
upnet.up.ac.za
wwwpr1.up.ac.za
ie-repo.up.ac.za
crm.iingxoxo.com
www.chr.up.ac.za
eu-central-1-san1.blackboard.com
cs.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
repository.up.ac.za
wwwpr1.up.ac.za
innopac.up.ac.za

Certificate

The complete raw certificate details for www.up.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlec5S9qFMcoFfynLFpay
jOJkrmpkEZeBxNflbevyf/9th21e7j/COUA0HerNRpAqn96q4yDULWaqhyzv0nH8
PWpptX+OZ6yr1OzhPuc8OfeP9XGIqWA+pQ3NpKCmvmixjhLzclYKysv3wm0JzlkF
DFr9te+J0e86Fbe5zxEdN8/RLPu4fyUurYkstZF64GYZCZlf15wY2qZ0VE5lOCSf
7R4/c1DmA96MPV8J9GbI7NJbyP5ViEurPuKazR7mSG2IWzkyMBonSkb/Xnn0E5ov
HIABnFJLSCvi/giMuQXML4cwRog2KFs17os1RS12ezxRV/We9OS/W7BFtGQHOKC3
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15661384254981933497344856024742886998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.up.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18923528152080455095609352728547929208225659500436631731607851803208042299049633424120609549177817391495474970474817282845448068511443062639365352520245531901844349253334487954186832551231585913879771430699339231287650155974459009472457308835675902327713222661520912252248674183234726241151490552095657220973999798421487275930929695664590438583104571616391772551908984201800080680905777478809243790544999014068830608912464076886706210400095511204908156816329250240581203392193755167556085636758370578386464188030090195278867100797421084712932631582636572116129180838995364160832405963309507996359590253316128007829313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77a3b56dff6c4bf38af6d7d6b6716fa63128d337
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.up.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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