lendme.co.ke

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:54:f8:dc:00:ba:1a:de:84:9f:7b:76:ba:87:b4:e3:75 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lendme.co.ke

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:54:f8:dc:00:ba:1a:de:84:9f:7b:76:ba:87:b4:e3:75
Serial Number (int): 315554701439164514699201451201147539088245
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:53:7b:80:d0:0e:d9:8f:14:2f:83:2f:25:19:24:2a:c2:ec:63:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:43:dc:a7:87:71:c1:6d:4c:7f:60:70:2b:76:6b:e9:0a:60:e9:89
Fingerprint (sha256): 1b:a3:87:3b:d9:8f:24:a7:68:af:03:e7:93:55:60:15:73:86:41:7f:0e:24:0d:e1:88:70:ed:87:cb:01:59:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lendme.co.ke

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lendme.co.ke

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lendme.co.ke
metacash.co.ke
metapro.co.ke
metaviz.co.ke
sharpfx.co.ke
www.lendme.co.ke
www.metacash.co.ke
www.metapro.co.ke
www.metaviz.co.ke
www.sharpfx.co.ke

Other certificates including the domain name lendme.co.ke

(limited to 100 certificates)
lendme.co.ke
lendme.co.ke
lendme.co.ke
lendme.co.ke
lendme.co.ke
lendme.co.ke
lendme.co.ke
forms.inter-col.com
corporateapplication.lendme.co.ke
lendme.co.ke
lendme.co.ke
lendme.co.ke
webdisk.lendme.co.ke
salesagents.lendme.co.ke
salesagents.lendme.co.ke
lendme.co.ke
lendme.co.ke

Certificate

The complete raw certificate details for lendme.co.ke in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgISA59U+NwAuhrehJ97drqHtON1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MzAxODE5NDVaFw0x
OTA5MjgxODE5NDVaMBcxFTATBgNVBAMTDGxlbmRtZS5jby5rZTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMd8cUfMF3GufH7/ka2HtAlfhjdLTwoD+JRc
8QHxJorntgbqilsOHKYuAZnMAFCzSxvq4fkP9MZ1G+tDZ/ei77N7QkbprXmlVzkP
DL4BgVkgSLW3xaADSskvZrmcz/n794J2tCogsO4mVDV5ILNkknBHCQFq15k7eCB5
UtAmP3QEsO0BfYoFUNnO5rEppaRPl6+9MnE7EqCllTHZB8AzjjJnr1S3LQ3/qhPW
ahe1zQixv0oW+fcp4cCnxl9SJGXtlCFhT3mV61/jj7jKdo+wjsx9ncusbyTD+AAt
pLM9iYLEBb3EEzJMi3yRJvJuOdn3vaF/yrOlwGiu7gO1T2hJSWcCAwEAAaOCAv4w
ggL6MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUnFN7gNAO2Y8UL4MvJRkkKsLsY04w
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCBtQYDVR0RBIGtMIGqggxsZW5kbWUuY28ua2WCDm1ldGFjYXNoLmNvLmtlgg1t
ZXRhcHJvLmNvLmtlgg1tZXRhdml6LmNvLmtlgg1zaGFycGZ4LmNvLmtlghB3d3cu
bGVuZG1lLmNvLmtlghJ3d3cubWV0YWNhc2guY28ua2WCEXd3dy5tZXRhcHJvLmNv
LmtlghF3d3cubWV0YXZpei5jby5rZYIRd3d3LnNoYXJwZnguY28ua2UwTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4A
dgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWup1DYwAAAEAwBH
MEUCIG65xTOgFfa62FZqRAQXAETtFceu6SRAMnkexmxgQUlgAiEA76ISIPOF8qtg
pUrpA33z3Qw+a2vWyWHQlu3mtq+NNuQAdAB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIg
CMY3NXnmEHvMVgAAAWup1DgrAAAEAwBFMEMCHzEBA8eGqW1BUIsc5pYIzCtQpDKN
GUn2zjDtYrk6bxcCIGUREI3g+FKuz7PONXZyX+MxqNjpQkigL6ywwxyZU6esMA0G
CSqGSIb3DQEBCwUAA4IBAQBWXBNLUO5zr2RKkxbaqWAP4Yuyct1tbjm4xx0aBEiK
pzj9QEAe5Tu+Pcx7GMudebdsiZvTadR8TkwQfABTuDcyCKC3JA6yJ1JzXfASQnEv
xeLMMoGxdt2QLDw3s/39TMbnLsLKKkHenbFJzXekz9SlcRzoC0dh/l56akjCp0ts
8NIm5zHUU/qzldD5t2hfZ1qZizu6W+NuGosibQ1VRz18bd4aDDv5eYOrNOD5RfKI
/UwaabBaCudzzAlDN1JVpdJEyCledYJX6poKE0z5y9BcnOsDT/34ewRGZD4khLmp
z9xcWyxtK/d53xMwE2axFwdlyCkG7kFY27AgKL2K0AnY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3xxR8wXca58fv+RrYe0
CV+GN0tPCgP4lFzxAfEmiue2BuqKWw4cpi4BmcwAULNLG+rh+Q/0xnUb60Nn96Lv
s3tCRumteaVXOQ8MvgGBWSBItbfFoANKyS9muZzP+fv3gna0KiCw7iZUNXkgs2SS
cEcJAWrXmTt4IHlS0CY/dASw7QF9igVQ2c7msSmlpE+Xr70ycTsSoKWVMdkHwDOO
MmevVLctDf+qE9ZqF7XNCLG/Shb59ynhwKfGX1IkZe2UIWFPeZXrX+OPuMp2j7CO
zH2dy6xvJMP4AC2ksz2JgsQFvcQTMkyLfJEm8m452fe9oX/Ks6XAaK7uA7VPaElJ
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315554701439164514699201451201147539088245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 18:19:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 18:19:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lendme.co.ke'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25182787572978312511795948070159650987180230042118062988547695232855117921573007240924058601381872395489495437233606150696039734146977301470692341822765302434039977256186081175517577384016022606969424779523968337647507889111441968327938200542804762829258450703920818473356918207525789370869916447764582185427262742953621123311315130805831476723819697283050851148958809720389844484710957105508471421352965760984002903863566928083142494200406686651439057633081306116565271651144202475167421232389213905116544580938169585685568268193637023492742695326284882404545344790606981705916577124263410954870741160920347235141991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c537b80d00ed98f142f832f2519242ac2ec634e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendme.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metacash.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapro.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaviz.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharpfx.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lendme.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metacash.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metapro.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaviz.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharpfx.co.ke'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ba9d43630000004030047304502206eb9c533a015f6bad8566a4404170044ed15c7aee9244032791ec66c60414960022100efa21220f385f2ab60a54ae9037df3dd0c3e6b6bd6c961d096ede6b6af8d36e4007400747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ba9d4382b0000040300453043021f310103c786a96d41508b1ce69608cc2b50a4328d1949f6ce30ed62b93a6f1702206511108de0f852aecfb3ce3576725fe331a8d8e94248a02facb0c31c9953a7ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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