wwwqa.up.ac.za

- University of Pretoria -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 57:af:82:e7:de:61:f5:58:8e:e8:cc:64:0b:f8:d2:1c was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

University of Pretoria

Organization: University of Pretoria
Organization unit: Information Technology Services
State / Province: Gauteng
Locality: Pretoria
Country: ZA

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:af:82:e7:de:61:f5:58:8e:e8:cc:64:0b:f8:d2:1c
Serial Number (int): 116554142667309387888081859467741286940
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 5a:6d:2d:90:40:b6:a1:03:ce:55:8b:d3:7e:40:29:df:85:c6:67:f6
Fingerprint (sha256): 17:ba:f1:5a:78:8e:20:09:f7:69:39:12:01:81:1b:94:94:51:cd:ca:b6:f6:93:10:24:31:92:ba:99:e3:6c:2d

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate wwwqa.up.ac.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwqa.up.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwqa.up.ac.za

Other certificates including the domain name up.ac.za

(limited to 100 certificates)
match-the-element.rccsonline.com
givingday.up.ac.za
cs.up.ac.za
yuiki.jp
heartothere.org
prod.28.slot.cdn.salesforce-communities.com
ssc.up.ac.za
api.iingxoxo.com
eduvation.up.ac.za
javascripttraining.ie
cirg.cs.up.ac.za
cirg.cs.up.ac.za
eu-central-1-san1.blackboard.com
prosb.up.ac.za
eu-central-1-san1.blackboard.com
prod.28.slot.cdn.salesforce-communities.com
auth.nework.app
up.ac.za
doortrends.com
prhimpas01.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
cs.up.ac.za
redcap.bi.up.ac.za
eu-central-1-san1.blackboard.com
sns3.freede.net
eduvation.up.ac.za
gwise.up.ac.za
ssl446912.cloudflaressl.com
prod.28.slot.cdn.salesforce-communities.com
prod.28.slot.cdn.salesforce-communities.com
digifors.cs.up.ac.za
www1.up.ac.za
mecheng.up.ac.za
crm.iingxoxo.com
ie-repo.up.ac.za
eu-central-1-san1.blackboard.com
upprodservices.up.ac.za
www.slimeasy.org
ssl446914.cloudflaressl.com
donate.up.ac.za
digifors.cs.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
up.ac.za
clickup.up.ac.za
gobrats.com
www.ahrlj.up.ac.za
www.up.ac.za
eps.ee.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
wwwqa.up.ac.za
crm.iingxoxo.com
eu-central-1-san1.blackboard.com
mecheng.up.ac.za
cigsor.app
wwwqa.up.ac.za
www1.up.ac.za
eu-central-1-san1.blackboard.com
cs.up.ac.za
ie-repo.up.ac.za
wheatley.cs.up.ac.za
repo.ee.up.ac.za
visitor-test.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
cs.up.ac.za
enterprises.up.ac.za
www.certivox.com
prod.28.slot.cdn.salesforce-communities.com
eu-central-1-san1.blackboard.com
CLICKUP.UP.AC.ZA
www.pickadoc.de
ssl446914.cloudflaressl.com
researchmatters.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
prod.28.slot.cdn.salesforce-communities.com
modeloguess.cl
www.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
mecheng.up.ac.za
www.renzgranados.com
library.up.ac.za
www.barataimoveis.com.br
rims.up.ac.za
visitor-test.up.ac.za
www.up.ac.za
prawsldp01.up.ac.za
www-new.up.ac.za
exfreight.loadsure.net
upnet.up.ac.za
wwwpr1.up.ac.za
ie-repo.up.ac.za
crm.iingxoxo.com
www.chr.up.ac.za
eu-central-1-san1.blackboard.com
cs.up.ac.za
prod.28.slot.cdn.salesforce-communities.com
repository.up.ac.za
wwwpr1.up.ac.za
innopac.up.ac.za

Certificate

The complete raw certificate details for wwwqa.up.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GVNOumeHsnJ4EEE387T
peBgt+pDeBjxuUsC6+PZbUjvb+TIXr4u9RnjWLtNAc8heQVHVl+Wrn5iNwzeMI9l
2HfU7H9rrZmvfU9RY9pIsGzVgtHltUKIralK/oX0i0m63jaaagti2lbv3N5yohrw
976epJ/VpXDQ9H3c6+aOpcU9TeHdiEUSvJfQuKGdr4eGt5ZALWx0SI+PI7cAcgwZ
oyG1IoC76FFpjXYOCclfkx0Lt/1Pqeky7fxqlV+pe4MIkjsBVhyq3lPwzaLsbxlb
l1WFcYVtu6/Z+/EmGvV/pUhV8P6ENzeDgKHZQz8C5V6FhPXBg2mTsqC9PYHt1YVM
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116554142667309387888081859467741286940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wwwqa.up.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26307521153239804332714049403866456762699366657176168535600460082876725098479025312924762772403335997663527090364383831692675189128009085152236980241571939146157366440272415143057094983658800950519335428259209221272245537857128924546070424920593092129044931364282173274426905653265373308440584792986944218006906645889137754874876913537103486021758160718335564753677771474060621394350954554612196939615744822376637322070538059671005945424467884805235028702417370793031764254114804186030854009442522566588491558921554592545348772474921988926068853761475258334043573086592128860860809614238240823008163137075005272443931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwqa.up.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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