shugo-a.absa.africa

- Absa Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:c8:d9:5d:97:c1:85:b7:0d:b6:73:25:d9:1f:d3:9b was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:c8:d9:5d:97:c1:85:b7:0d:b6:73:25:d9:1f:d3:9b
Serial Number (int): 2372096065561178255368518813710537627
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 22:23:00:5d:78:bc:fd:38:f8:15:7a:e7:b9:af:b6:b5:6e:de:e2:a7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 85:a9:e9:43:6d:32:59:ef:13:91:e6:ad:71:c5:10:bf:f6:da:43:79
Fingerprint (sha256): 25:32:c7:48:c3:23:cc:d6:e1:22:11:59:d5:7e:5e:41:d5:55:30:9c:c5:4d:e5:2f:a3:5f:21:4a:aa:00:b2:fa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate shugo-a.absa.africa

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shugo-a.absa.africa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shugo-a.absa.africa

Other certificates including the domain name absa.africa

(limited to 100 certificates)
click.cibmc.absa.africa
sso.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
sdr-estatement.absa.africa
sso-test.absa.africa
netbanking.ke.absa.africa
marketplace.absa.africa
exuhomeloans.absa.africa
webchat.absabank.co.ke
gena.absa.africa
Mail.Absa.co.za
demo.prod.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
ssohub-test.absa.africa
pocketflow.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
absa-rbbshortterm-test.absa.africa
ib-secure.mz.absa.africa
shugo-internal-nonprod.absa.africa
cloud.absarbb.absa.africa
readytowork.absa.africa
latelier.absa.africa
eventsdesk.absa.africa
mail.absa.co.za
cibclientaccount.absa.africa
supportandservicemanagement.absa.africa
akamai-san130.exacttarget.com
iboc-test.absa.africa
image.email.sweet.tv
chatbot-ug.absa.africa
short.dev.absa.africa
ea.uat.absa.africa
webchat.absa.co.mu
akamai-san130.exacttarget.com
mra-e-cluster-1.absa.co.za
api.absa.africa
www.absafinancialservices.co.za
iboc.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
habari.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
image.email.sweet.tv
webchat.absa.co.bw
shugo-bc-uat.absa.africa
shugo-b.absa.africa
digitaldistribution.absa.africa
ibocnbc-test.absa.africa
ea.prod.absa.africa
trk-estatement.absa.africa
webhook.absa.africa
notify.prod.absa.africa
image.email.sweet.tv
iboc-dev.absa.africa
webchat.absa.co.tz
homeloans.absa.africa
ea.uat.absa.africa
mftmobile-uat.absa.africa
demo1.dev.absa.africa
events.absa.africa
shugo-a.absa.africa
jhbpsr000001200-cluster1.absa.co.za
image.email.sweet.tv
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
netbanking.ug.absa.africa
MailInbound.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
Readytowork.absa.africa
ea.dev.absa.africa
kyc.uat.absa.africa
shugo-internal-prod.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
latelier.absa.africa
sso-test.absa.africa
onboarding.absa.africa
latelier.absa.africa
onboarding.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
api.absa.africa
kyc.dev.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aroweb.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
ea.prod.absa.africa
webchat.absabank.co.ke
shugo-b.absa.africa
webhook.absa.africa
tails.prod.absa.africa
webhook-staging.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
tails.dev.absa.africa
notify.prod.absa.africa
MailInbound.absa.africa
cibclientaccount.absa.africa
digitaldistribution.absa.africa

Certificate

The complete raw certificate details for shugo-a.absa.africa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KOVFguTKtdby9TpL44J
zDKd9cO0X6Oujk6dQ1FtDWf1AlCA5C19Or1eviawgZl2H0pI4sJG3WSmIWHe+NBY
FsVy9exdm5ohqFTfsfTHpFAO3RsVZhNHfZz5v5+ytdqtnTmgnsKmEJyJ9Pzmzc33
aPjjZD93ge+l476guZqRb6gbW/OFUEZ/fHKNXd81t1qpitY+w1auG453i8qNGeUI
W+aRkZFdMNaQ2CEncthE+OR+FGSkgDkaNzhZETLTVUaoYGjDhgiIAwhag6QtG+Vo
iMZa8DxuXSpntH/LkvTd1EEvZlkEd/Ej0kZhGGMTsmZACycJcj0P+TUhBX+XiLlX
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2372096065561178255368518813710537627
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shugo-a.absa.africa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28862999004184644605076081697402210775729864361269968512496894507084162038156867247113734120933738430860940303734884678857047123832929098911774668617814872344371272876332661112061707005805528184505643528922269776252569904046148125140923902345589394110916102930407390837429964111679890312281085017168464820942773237594290333969776259678884419207643850517941774163354516489150205822933043014061106589512129540740794678818483664837794393120539826881875993279639788285068177276537711998395895304587720063747597017734475275770808022386934000549251313247707270821407654957922379213678429119819783288244613708453068999841541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2223005d78bcfd38f8157ae7b9afb6b56edee2a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shugo-a.absa.africa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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