xmi.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:44:1b:1e:04:e6:dc:4a:ce:ca:83:04:32:19:f6:9d:59:1f was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xmi.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:1b:1e:04:e6:dc:4a:ce:ca:83:04:32:19:f6:9d:59:1f
Serial Number (int): 371624389701877043807504335260833038555423
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:02:dc:45:0a:67:a8:2a:07:9b:5b:83:ef:ca:4d:dd:96:86:e6:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:b1:d5:3c:e1:59:c9:2e:79:2d:28:6b:21:50:8d:77:bc:1b:8f:98
Fingerprint (sha256): 18:a4:b9:3e:c9:b4:90:c6:cc:15:70:9a:9b:fc:71:2d:47:75:d4:c7:17:70:98:ac:54:ae:91:e7:9a:df:af:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xmi.co.za

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xmi.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1000unique.com
1kcredit.com
andorsun.com
arbitrageinvestor.org
audreyjhector.com
australianslots.com
bitcoininvestingseminar.com
bizgrant.com
cameronparish.com
cannabisstoner.com
casamilagros.com
chinabynight.com
citizensforwestlakeland.com
cityofthousandoaks.com
clubcabrio.com
cryptosarbitrage.com
designtorecycle.com
districtofcolumbiarealestate.com
domainrehabbing.com
donationdirect.com
dwyj.com
equalizerfis.com
gourmetforvip.com
holidaycoffee.com
howtoer.com
lazertagfitness.com
lgbtqsecrets.com
louisianaconservatives.com
mar.vc
mrs.vc
mtjulietnaz.church
novarh.com
otherswanttoknow.com
ottawaathome.com
peptideactivatedfoods.com
re.vg
reickertsplumbing.com
richmondchillers.com
rxsugara1ccontrol.com
rxsugarlife.com
sanibelislandfl.com
sporty-life.com
theclaimcoach.com
tradeprovideotutorials.com
walkingemoji.com
willtat4btc.com
xmi.co.za
xn--mbelmontering-imb.com

Other certificates including the domain name xmi.co.za

(limited to 100 certificates)
xmi.co.za
xmi.co.za
xmi.co.za
xmi.co.za
xmi.co.za
jjdirectory.ca.xmi.co.za
xmi.co.za
xmi.co.za
xmi.co.za
xmi.co.za
xmi.co.za
xmi.co.za

Certificate

The complete raw certificate details for xmi.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zcyob/MLQ73HFOJ1z0/
ZuZq3Yo2mLeM0xoMss0Jz189NSyPB9izd+F/Og7qW5Z71O21/FMXt2Uo0rdouGCS
c8HKlDoCJiU1G2toFEvXpU9B1mYYiiHdbr9nGi8mpmcwA7O0CDQ57RJEi39+kzvx
xG5sVVXF6Y2slpd+iKSb6XVw3cjcoPNjZyEvkdmZ/3NkhsD/9vU4F3BXpQEqqB1W
N8EpQwsknXr50j1aJN8EQshZca0eR67nMbHYjavK4+RdScO0ODbDVv4y2gmgBFtC
734vlj3rcEPy3Gv/v+3QUtA5ZCDRXdbMNeNMcuiVLHmxGORqDgiJDSmJTkCrv/db
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371624389701877043807504335260833038555423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 22:59:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 22:59:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xmi.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27673407827646767340093697010149580146414391206748981703014584931085069130183082544878901921647965626717483586590076192521786026093982890490304683395196595714646650808812915519079208858344309160833850879153811281024134770227081669400344044320001516274072044661145809098926806974425415032137815282239185962994637086291116189614920455857411937651024358256743530054941149061662376892294778310668608410085494348640062904218018599594133159020978051433360480293255529336424121966217791925775117976582966991080149578752350535012636305756764502761625657209058290251984830239865140228740743079069355185364368261528986515364851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6502dc450a67a82a079b5b83efca4ddd9686e64e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1000unique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1kcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andorsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageinvestor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audreyjhector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoininvestingseminar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizgrant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisstoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casamilagros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinabynight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensforwestlakeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofthousandoaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubcabrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptosarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designtorecycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'districtofcolumbiarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainrehabbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donationdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwyj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalizerfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gourmetforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaycoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazertagfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqsecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianaconservatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mar.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtjulietnaz.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novarh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otherswanttoknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawaathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peptideactivatedfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 're.vg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reickertsplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondchillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugara1ccontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanibelislandfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclaimcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeprovideotutorials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkingemoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willtat4btc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmi.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mbelmontering-imb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d43104392000004030047304502200f84525d683bda7074823a88474d078291af41f50e43b4ee1670f701f7ca4ba2022100ced999a81e0760cefa46c9015c61a27bd3ec881c2d99786c7cdaa6fcf9843dfd007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d4310439a000004030046304402203e758b00c6b8794d939a66c4bb24189776dbc1a15a8eda9fb4b7c21e22e65a830220037803d80bd25468104e688a1a3f603072dcadd314ef7d5a06556b669b33fb94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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