mediacent.africa
Issued by R3
About this certificate
This digital certificate with serial number 03:a1:05:47:63:5f:02:4d:d9:c0:01:c9:18:d0:5a:92:05:e4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mediacent.africa
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:a1:05:47:63:5f:02:4d:d9:c0:01:c9:18:d0:5a:92:05:e4Serial Number (int): 316129335678093652395574822369614653162980
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f5:a9:fc:e2:a7:10:5b:44:5a:0d:7d:43:c6:54:55:88:5c:f9:8b:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 57:3d:e6:1f:c9:b0:26:f5:91:f5:80:94:7f:92:a4:b9:2f:c7:d0:d4
Fingerprint (sha256): 19:cd:d4:e3:26:24:cd:a9:d0:db:04:85:4b:27:b5:07:9f:0b:6a:f1:4a:cd:8f:63:f9:64:a0:d1:a0:78:77:4f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mediacent.africa
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mediacent.africa
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mediacent.africa
www.mediacent.africa
www.mediacent.africa
Other certificates including the domain name mediacent.africa
(limited to 100 certificates)
Certificate
The complete raw certificate details for mediacent.africa in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISA6EFR2NfAk3ZwAHJGNBakgXkMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTYxOTM3MzRaFw0yNDA4MTQxOTM3MzNaMBsxGTAXBgNVBAMT EG1lZGlhY2VudC5hZnJpY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCQnmScqynF37PE95ygSLSCMiCLaG+XE10iUup/BJdfvHTbqsrWwAK/DQJxlFj NHnPaU4IkNbGBwCOUMaDAsUQupKGfepmg2ykT+aq7asWRIfqYzKimPfFwTbjOizn B4oUJ4PYBxCNAYjajLOYlnBGDUN/i4/xHPc6lhJ/P7k8YmvNuAWhzQS2zsQ4mnT0 sOmQIn9vprkRzLhzd6+/RBHHJDF2/5R4XF/n/dw9sYOewdAfaV4WfhJNUgffz3M+ r+Lx564Sa8MBe82ArHjupONX2utiOWVDxkWX/gsxnEB8NYPvLCA6UsO53Bep1cHC ihE/i1QCoYFw2hVQhg7lr7mRAgMBAAGjggIoMIICJDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFPWp/OKnEFtEWg19Q8ZUVYhc+YsfMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMDEGA1UdEQQqMCiCEG1lZGlhY2VudC5hZnJpY2GCFHd3dy5tZWRpYWNlbnQu YWZyaWNhMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPgx/cZwAA BAMASDBGAiEA8nMgdPGhihhDjwyiO887LVQCx8zpHEq8FCLGR1e3NGQCIQCjPCWp nt7a0F8Y5C3o3uUR9ISlq6QaZi11mQMVgw76uQB1AN/hVuuqBa+1nA+GcY2owDJO rlbZbqf1pWoB0cE7vlJcAAABj4Mf3SQAAAQDAEYwRAIgD21cxSzWqaYeIpQO8Erf jjMNssW4Dfcxa443SNhnA6QCIG286I1paCY1e+x3eFiOwGuqGXUjrf89rQQ9qyPB pNkyMA0GCSqGSIb3DQEBCwUAA4IBAQCdw15tZstEuE2/dKY+dd4kzKl6Y0Ou6K87 fMprTUP6GkjvlEsH3Mp43TWX1Wy/iuQfPEhMZ0fO6N/IrAZyzKtGNF49ecUYOm/Q 6kcjNwQUvbuzl5XzFeZzvaVL2A9nDuZnzhsJb15K5SvTTCEqNFGC8/c7UFQ2WVOB YYhWW1PKPs0wea1A4RIJ6RP8eHqZXMWlHnge4cJiVn3l4LrIzFA9zL65h8/mi4la a4bDxDIRaA/NP2+yEuOzKTQIee+aaf5CKxrQVr2/3hqAuYTdOUDwMR2ecHxpbAZE 2WUpM6le1ae/gFnatHwPmVTdLB1XeEesKxV1dvZ32aOMj41hKcne -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkJ5knKspxd+zxPecoEi 0gjIgi2hvlxNdIlLqfwSXX7x026rK1sACvw0CcZRYzR5z2lOCJDWxgcAjlDGgwLF ELqShn3qZoNspE/mqu2rFkSH6mMyopj3xcE24zos5weKFCeD2AcQjQGI2oyzmJZw Rg1Df4uP8Rz3OpYSfz+5PGJrzbgFoc0Ets7EOJp09LDpkCJ/b6a5Ecy4c3evv0QR xyQxdv+UeFxf5/3cPbGDnsHQH2leFn4STVIH389zPq/i8eeuEmvDAXvNgKx47qTj V9rrYjllQ8ZFl/4LMZxAfDWD7ywgOlLDudwXqdXBwooRP4tUAqGBcNoVUIYO5a+5 kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316129335678093652395574822369614653162980 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 19:37:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 19:37:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediacent.africa' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24523011153829520741432884708074114598330751986798722062154136406417706673309457207069977906325324223207146498722974546512951242160969383566778894179118104886787704542704144825701478082294762400576197719188775304941843064261615536110816517369074707587951593962001966574966379428500621999094150380974609204598306766883020495573891500940652188723892578047403820723835710771368250357837664838554098139091567813806484200676768599644568307242035166851866500166795655246255307483549107361058020075934557536423474779647697804538123780718666792438390190161356658465305115908176128409452710158836894588469909448568444644473233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f5a9fce2a7105b445a0d7d43c65455885cf98b1f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacent.africa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediacent.africa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f831fdc670000040300483046022100f2732074f1a18a18438f0ca23bcf3b2d5402c7cce91c4abc1422c64757b73464022100a33c25a99ededad05f18e42de8dee511f484a5aba41a662d75990315830efab9007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f831fdd24000004030046304402200f6d5cc52cd6a9a61e22940ef04adf8e330db2c5b80df7316b8e3748d86703a402206dbce88d696826357bec7778588ec06baa197523adff3dad043dab23c1a4d932 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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