afos.gov.rw

Issued by RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0c:68:50:9b:38:1f:95:1c:68:7c:78:0e:9f:e0:89:f6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afos.gov.rw

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:68:50:9b:38:1f:95:1c:68:7c:78:0e:9f:e0:89:f6
Serial Number (int): 16492369713209435799866282796289919478
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1f:02:5b:d3:6f:e4:c9:f8:6f:66:a8:f5:74:35:b0:56:ab:5f:87:4c
AuthorityKeyId: a4:8d:e5:be:7c:79:e4:70:23:6d:2e:29:34:ad:23:58:dc:f5:31:7f

Fingerprint (sha1): bf:ba:7c:34:9b:38:bc:e8:91:89:ce:a3:39:21:40:00:5d:e3:6e:b6
Fingerprint (sha256): 26:6f:7b:66:cc:49:b1:93:9c:9d:6a:57:9c:0e:6c:81:aa:2d:a5:47:25:4c:79:7a:3b:66:86:53:5c:c3:44:a1

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl

Check the revocation status for certificate afos.gov.rw

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afos.gov.rw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afos.gov.rw
www.afos.gov.rw

Other certificates including the domain name afos.gov.rw

(limited to 100 certificates)
cpanel.afos.gov.rw
cpanel.afos.gov.rw
cpanel.afos.gov.rw
afos.gov.rw
cpanel.afos.gov.rw
afos.gov.rw
cpanel.afos.gov.rw
afos.gov.rw
mail.afos.gov.rw
cpanel.afos.gov.rw
cpanel.afos.gov.rw
cpanel.afos.gov.rw
afos.gov.rw

Certificate

The complete raw certificate details for afos.gov.rw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JzKOyPJY8ajMYS/mN3p
94/uNkFLIKfvCUqGwzqiSACIrxANBVzAstPMTeGjXf3ahvSOeyY/zlGFlNPje1fq
FQB151U0TcjSHGYYTG4eVa6YEDj5BK8G/jZG0wE139aXs8vcXdG16dOb3HTkQ0Sd
tJm680N3AAZRgVdSJA1rgCcq3ykz6BL7f9BtIDYXj1Z0oNIG4XxD22q+ujfisW/B
zWhc/bBZuiTCenJH2B0zp0DXVN72/Bt0+gKDN84wKFep1YfdnKXDJrwdbqH+paD0
1nkFHTpqdV9MjPmajdstxVzJYSROk40T3Wcq1Gkfl91Bzp2AnBhkq5/YlBFpEdL2
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16492369713209435799866282796289919478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afos.gov.rw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27344789885968922905854363328386012438321543771900112175783832172547558160527266726957262128178294620692220647727155236700543451096453010408036815699296041954560200607123496270058533256111927085467922951117645396041454109858965940439812236840103677802591922693145247563758377044080994087238342443611795219975088253965947613592460297494819897317239279429476255896732898388334021490432061034167135874945899846215040346366435467488867391028669993264648227821876875487712562979204673783379419891948727346664667668776818715120382959861479588309849800354840064885366023917415958740667440808534571358351878457508551896266267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a48de5be7c79e470236d2e2934ad2358dcf5317f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f025bd36fe4c9f86f66a8f57435b056ab5f874c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afos.gov.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afos.gov.rw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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