*.theafricareport.com

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 9b:84:99:71:7d:2a:f6:60:06:49:5f:30:14:65:27:ac was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.theafricareport.com

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 9b:84:99:71:7d:2a:f6:60:06:49:5f:30:14:65:27:ac
Serial Number (int): 206718834732177844950088294781231114156
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 44:d6:06:58:69:17:70:88:17:b4:cb:7d:c6:d0:34:57:2e:bc:66:94
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): d6:89:c8:69:90:23:3e:4f:f2:c7:54:c1:6c:98:61:5b:01:9d:78:5f
Fingerprint (sha256): 2b:06:af:53:77:c0:e3:e0:ce:63:56:9d:d9:45:0c:ae:93:b4:80:6d:f2:0f:a3:68:cc:90:37:1c:3c:71:ac:e3

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate *.theafricareport.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.theafricareport.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.theafricareport.com
theafricareport.com

Other certificates including the domain name theafricareport.com

(limited to 100 certificates)
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl279267.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl2922.cloudflare.com
ssl371508.cloudflaressl.com
ssl2922.cloudflare.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl2922.cloudflare.com
ssl371510.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl2922.cloudflare.com
ssl371509.cloudflaressl.com
sni.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl371508.cloudflaressl.com
vocab.hwilson.dev
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl2922.cloudflare.com
ssl371509.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl279268.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl2922.cloudflare.com
ssl371510.cloudflaressl.com
ssl279267.cloudflaressl.com
sni.cloudflaressl.com
ssl371509.cloudflaressl.com
theafricareport.com
ssl371508.cloudflaressl.com
ssl2922.cloudflare.com
*.theafricareport.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl279267.cloudflaressl.com
ssl371510.cloudflaressl.com
theafricareport.com
ssl279269.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl2922.cloudflare.com
ssl279267.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl2922.cloudflare.com
theafricareport.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl2922.cloudflare.com
ssl279267.cloudflaressl.com
www.malouskusina.com
ssl279269.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl279269.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl2922.cloudflare.com
ssl371510.cloudflaressl.com
ssl2922.cloudflare.com
ssl371510.cloudflaressl.com
theafricareport.com
*.theafricareport.com
ssl371508.cloudflaressl.com
ssl371509.cloudflaressl.com
ssl371510.cloudflaressl.com
ssl371508.cloudflaressl.com
ssl371510.cloudflaressl.com
*.theafricareport.com

Certificate

The complete raw certificate details for *.theafricareport.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2riDQqZUCuzgJQevIsXa
Z6mWEBiIrK8SAtpOiTPHWmsKhTcBLzBFcLMseHMHSDolcqOwdvTU9Mqz+rIIaOd0
i8fc1veQwAsRGxmYbeXdkN4lpCVIvYLxjb/F3z5Hhyn3WeKpAXnmzuBsjOVGEkid
XaZTaCwoZWg1nrNymghc9153hQM060OkoQ0LgrcQZDEKFFmcAwM/6yMfNUrHyGeL
8E7DFw5p3FbWXd6mUwd+WPkcSwTfM8cNQRQEv9CcHocg9McD5bHSQ17U8AAUpwEi
l7sD0mwgArDbZRZRIZIH6/RM2WczJmYiWgvYJjVUW3/sW2E97L08gH5cVNL0OydK
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 206718834732177844950088294781231114156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.theafricareport.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27610937103713963197026265136953923170513209983174574530173695472378745117160304621482908636803892717043008844402119984720666924270689623961053378694948840631635798157837271454538963878525551496607845802672691925692099045408228095811122920178679820730504558372627540988295122494401741903110698190082941225768127844404040886536103042660542824808434986979137187393714057712423719627033511798294517005497159874312911231422598596563318612886387593859655470196653395224116922890597019472022453831762967578370580479959559960133930616000256108110192833773120580561169132475905561896359824267439551513319074176191295383882269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44d606586917708817b4cb7dc6d034572ebc6694
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theafricareport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theafricareport.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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