saxa.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:b9:39:e3:52:6e:44:f7:80:1c:27:c2:4d:8e:6e:4c:ae:f5 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saxa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:39:e3:52:6e:44:f7:80:1c:27:c2:4d:8e:6e:4c:ae:f5
Serial Number (int): 324366041994695012857556826063587242716917
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:61:0e:32:50:99:f2:7b:81:3a:9e:cb:a6:5a:8f:3c:64:a1:62:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:ad:4e:b0:4b:b5:62:fa:a8:27:0d:8f:4c:a3:4b:76:9c:23:a0:da
Fingerprint (sha256): 27:b3:c9:d0:a8:8f:14:8b:62:5b:eb:47:0a:d6:52:ac:2f:de:f2:83:13:df:db:1b:d0:90:f0:a4:09:c6:de:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saxa.co.za

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saxa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashtonclark.com
astracarta.net
atasteofmexico2022.com
atlantaranchcondos.com
beatchroniclyme.com
bit-co.in
bobhines.com
caringchurchnetwork.net
charlottehomedesign.com
gostorylabs.com
greatroofinginsanantonio.com
internationalcalls.galandnsoil.us
joint-integrity.co.uk
kaarigari.co.in
madewithcertifiedallulose.com
mvallee.com
nowontv.com
officialhealthyhome.com
pontonlaw.com
rottenservices.com
saxa.co.za
shop.thrive.fi
sjwcult.info
solarportstlucie.com
theappetiteextinguisher.com

Other certificates including the domain name saxa.co.za

(limited to 100 certificates)
saxa.co.za
femininewarrior.com.saxa.co.za
highcaliber.media
seaweedfair.com.saxa.co.za
saxa.co.za
costcounts.com.saxa.co.za
saxa.co.za
georgiadawgnation.com.saxa.co.za
saxa.co.za
saxa.co.za
saxa.co.za
saxa.co.za
saxa.co.za
saxa.co.za
hb.ninja
seaweedfair.com.saxa.co.za

Certificate

The complete raw certificate details for saxa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2jHMY76gdU0IGadu8mi
OL8Vzrx2bAiEvooyp7f6bl3Ic1AIuNyCXFYOJLz/KVtJG84XKX1XyuDAM2rMWcYI
Vhi3FvarfHkoZpSlvyZ2+7EVgCPjeq7gYOVcbH7/AIn+XBcqVbiucHUBp+v9xksb
686lLEwstcTJ1gRE56eYqOg45ER7LGZ16XtyDcjYQe87IvQv84yPYRJ7FsrW86tl
ceqvoUvIztrSR4c0AJwinCdjeLw+fRWbPtjwDt3dDcKOzH0lvR6ds0j2HAiqco8z
bGQmmXbCAyNQguTkSD939DUD+2N8HTy7BHJRP+fZzPuX4cPKCDBKXsFHg5+EEbRK
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324366041994695012857556826063587242716917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 10:48:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 10:48:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saxa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23658231035432696624101440892614076675855296794015155033151686986171574304933353372328329039759745448192380404538514586481430986556911920840016931552166614455581461869025229333857914682869907800901298998013551040600303406350119306981574125015036037171327573458046722990103450978550587720561150914884881492173193093438779675416021692101156870513351687596554515890474117524381246454449582830799630014159790444650438649992003514428937489601971904850612409374828189836801588083310948524763584226481933762972151914145391155715354997748679453610218484656157312732638156471469720124144003383342751019514778030981872545450713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f610e325099f27b813a9ecba65a8f3c64a16239
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (513 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashtonclark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astracarta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atasteofmexico2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantaranchcondos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatchroniclyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bit-co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobhines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caringchurchnetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottehomedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gostorylabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatroofinginsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalcalls.galandnsoil.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joint-integrity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaarigari.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithcertifiedallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvallee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officialhealthyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontonlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rottenservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saxa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjwcult.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarportstlucie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theappetiteextinguisher.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4599ff830000040300473045022100f184c8e25c6f2cb907867d7e08e79f86bde88fde1ca92750f6c668404316f72e0220276105fa3fc2443b0ade7ed281575b4fb5cf580082e67bff64fc412473a000d80077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4599ff8a0000040300483046022100f4e74f9ff486b9cd5e1915bac9685d677832ba883321c45612bbf60c2919aedb022100cc5fedb0ff4bb4b0d16be78af8014c0cca2c0b060f6fbdcb1638e94b37a6a345
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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