plasmatv.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:b6:ed:73:c8:e9:a4:44:e6:c1:6d:df:cc:72:6e:98:71:37 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=plasmatv.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b6:ed:73:c8:e9:a4:44:e6:c1:6d:df:cc:72:6e:98:71:37Serial Number (int): 410696162730784464938321799615583643791671
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ee:30:40:6e:1e:18:96:24:d1:38:e3:c9:d8:60:0c:57:b2:cd:0c:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 41:b6:bb:1a:e4:fe:7a:fd:98:1e:f8:95:49:35:e6:24:ac:b5:01:96
Fingerprint (sha256): 27:f5:44:48:35:d7:77:bc:e4:3a:46:18:b5:49:09:ab:48:67:d4:72:9c:83:05:7f:3a:ec:46:99:2e:a3:e5:55
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate plasmatv.co.za
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for plasmatv.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
annemarie145.com
arbitrageadvisers.com
bhctexas.com
dragtonight.com
gunbytes.com
insuranceplan.in
investorkids.com.polyfamous.com
legalisehomeschooling.com
mineralindependence.co
mygfa.org.nz.africacoin.org
myjewellery.in.solarhainescity.com
newhomessouthtexas.com
plasmatv.co.za
sea-law.com
sequatchiecounty.com
statisticarbitrage.com
wvseo.com
arbitrageadvisers.com
bhctexas.com
dragtonight.com
gunbytes.com
insuranceplan.in
investorkids.com.polyfamous.com
legalisehomeschooling.com
mineralindependence.co
mygfa.org.nz.africacoin.org
myjewellery.in.solarhainescity.com
newhomessouthtexas.com
plasmatv.co.za
sea-law.com
sequatchiecounty.com
statisticarbitrage.com
wvseo.com
Other certificates including the domain name plasmatv.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for plasmatv.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISBLbtc8jppETmwW3fzHJumHE3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDUwNDMzMTNaFw0yNDA0MDQwNDMzMTJaMBkxFzAVBgNVBAMT DnBsYXNtYXR2LmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA yZ06+DTFKdpPmS39vmxWVhMnlAMQ+FqMzGWJ/zi6hUfQ4aY2d2HOv/YqymK+wAFM TKobT93ZWmeNIfOh7cep+x/ZCBfiZ+dIU44c86RECDIaOQrN3LbB1j5VSK0gxX/I ajD/aU97MG7h8J+GBClwkas2F6zHjV8e/qtIzao0JrmgUjufc9bcV82yWHGnvzwF AakdLfULPy5lHdy4Wi+DuZBOQg8z/UrdMA92ZEOaFE8NN+eIs2a6i02ZNBEDC+O8 +NTWikkqwisAPhC4xraPisLdA64niQHSajUyKVtEn3Q0heN2w0Jy3u2uLo+BQ3Rf 0iqsrZUocikb7joH/v+8jwIDAQABo4IDcTCCA20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTuMEBuHhiWJNE448nYYAxXss0MEzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAXgGA1UdEQSCAW8wggFrghBhbm5lbWFyaWUxNDUuY29tghVhcmJpdHJhZ2Vh ZHZpc2Vycy5jb22CDGJoY3RleGFzLmNvbYIPZHJhZ3RvbmlnaHQuY29tggxndW5i eXRlcy5jb22CEGluc3VyYW5jZXBsYW4uaW6CH2ludmVzdG9ya2lkcy5jb20ucG9s eWZhbW91cy5jb22CGWxlZ2FsaXNlaG9tZXNjaG9vbGluZy5jb22CFm1pbmVyYWxp bmRlcGVuZGVuY2UuY2+CG215Z2ZhLm9yZy5uei5hZnJpY2Fjb2luLm9yZ4IibXlq ZXdlbGxlcnkuaW4uc29sYXJoYWluZXNjaXR5LmNvbYIWbmV3aG9tZXNzb3V0aHRl eGFzLmNvbYIOcGxhc21hdHYuY28uemGCC3NlYS1sYXcuY29tghRzZXF1YXRjaGll Y291bnR5LmNvbYIWc3RhdGlzdGljYXJiaXRyYWdlLmNvbYIJd3ZzZW8uY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAO1N3 dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGM2Bx4uAAABAMARzBFAiEA 9V5CgUxRymeCsw4FglkZHa7MBZ5TzI/ei3Zxw/Zg+W0CIH7AasZFknJqwUWsxDhh +O1+4iqMNdPgQbJY2xtcJdKHAHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4 mm31F9gAAAGM2Bx4swAABAMARzBFAiEAlEQlRm4xo254wTu2tuN1Yro7fMJCr96g U4dzeT4rXW4CIExBuj6tevNSD1Y//gbPIbezU6F4VBMhPPhSdiKcQ2H9MA0GCSqG SIb3DQEBCwUAA4IBAQB0oGf/zTcihZ+yFAU1o19CJD2imzQsAfBsrY7+nEOyd5tX /2fY+nHCmP0aHBH/hskDmNCAUrSz9Z4p6wXASGhfrg4mIQkZdhg2J6e8yqc3UHXP ymf3j2P4lzas6wD6O3wlw+hV7pqUjThoVXBlfRJCK4nbJBCEnQDvgKIoiNW3fue5 OKRuotFEj6f2T/sr2YPjK3vka1j8swtJKvEqxPa5byziv7Ym8W98gHZ3wYcOjMvv EOv0Zm3prCEuYcn9EC8pviupDkIdqKBwofju8yochq8wtXIiG53K1zC9nFWCyrkO hyM42B0eDVG5fc8CGO/PJH5Ho0TRFyj08DAsy0W2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ06+DTFKdpPmS39vmxW VhMnlAMQ+FqMzGWJ/zi6hUfQ4aY2d2HOv/YqymK+wAFMTKobT93ZWmeNIfOh7cep +x/ZCBfiZ+dIU44c86RECDIaOQrN3LbB1j5VSK0gxX/IajD/aU97MG7h8J+GBClw kas2F6zHjV8e/qtIzao0JrmgUjufc9bcV82yWHGnvzwFAakdLfULPy5lHdy4Wi+D uZBOQg8z/UrdMA92ZEOaFE8NN+eIs2a6i02ZNBEDC+O8+NTWikkqwisAPhC4xraP isLdA64niQHSajUyKVtEn3Q0heN2w0Jy3u2uLo+BQ3Rf0iqsrZUocikb7joH/v+8 jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 410696162730784464938321799615583643791671 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 04:33:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 04:33:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plasmatv.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25451432473377520639182158199682537532465194933607187552591081834619655954422623680898471038998533510535261887886620837550036428569771209993547895937622634681649178058743117930894604268140040542093020117955862189534432297809186901076889001248741827292792690918557908893546589413591616782578125096920117859245904019043275760676261785748193236215799168923570811857417496944103219001780398372662023451582878232029190003020860129705047281071500785371441750231334331416541436481739600740687789649986795150132527621626516784979577721895580217103700539345714785750547067987982637840361089676604325833820973570359241339813007 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee30406e1e189624d138e3c9d8600c57b2cd0c13 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annemarie145.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageadvisers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhctexas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragtonight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunbytes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceplan.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorkids.com.polyfamous.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalisehomeschooling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralindependence.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygfa.org.nz.africacoin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjewellery.in.solarhainescity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomessouthtexas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasmatv.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea-law.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequatchiecounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statisticarbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvseo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd81c78b80000040300473045022100f55e42814c51ca6782b30e058259191daecc059e53cc8fde8b7671c3f660f96d02207ec06ac64592726ac145acc43861f8ed7ee22a8c35d3e041b258db1b5c25d287007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cd81c78b30000040300473045022100944425466e31a36e78c13bb6b6e37562ba3b7cc242afdea0538773793e2b5d6e02204c41ba3ead7af3520f563ffe06cf21b7b353a1785413213cf85276229c4361fd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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