pms.shipmed.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:56:9f:61:e9:a3:68:75:54:1a:08:06:1e:7e:73:f3:cb:0b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=pms.shipmed.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:56:9f:61:e9:a3:68:75:54:1a:08:06:1e:7e:73:f3:cb:0bSerial Number (int): 377925282925114730369583075726306525301515
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 82:b3:73:81:5c:8a:e9:7b:cc:7a:68:10:f8:9e:a9:58:e8:43:5a:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ac:d0:6e:47:b5:1e:58:0a:f1:99:43:e4:7a:cf:15:d3:b8:25:8d:57
Fingerprint (sha256): 2e:39:92:2b:5f:86:d8:11:24:46:b5:07:5f:17:03:85:14:b5:74:3e:ab:43:5b:a5:ef:ee:e1:22:e6:6a:5f:b1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate pms.shipmed.co.za
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pms.shipmed.co.za
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pms.shipmed.co.za
Other certificates including the domain name shipmed.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for pms.shipmed.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgISBFafYemjaHVUGggGHn5z88sLMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDMwNzE4MDJaFw0yNDAzMDIwNzE4MDFaMBwxGjAYBgNVBAMT EXBtcy5zaGlwbWVkLmNvLnphMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC AYEArRII7apbWbjxANS3nJrOByuUOjTxRgLhCgQ6n6EeQj1kc1OqHT6/cH2faIDF UlD4RK/C6VT/c9MnzDY6sVDlEGK5HHgATkhYC9yJCQZj9c7wMEvzqPsnplA3xUDK poAnOVaeYd7mFgns4W5ZAoqmxKLya2T7etQwpd28PgXgAJcpCODcrGSxnAnO4Qfa ya17ktR1HVwnv1QyMnSTLWmAil6+VoX2MwuHwLP8XBXOzOpagckBVoSYbCpbFPtK NgCV/jiQBcf+W0UDCvagKXemcGADJ92pllLLoJ2lVIZ8N7qU+gAYGeEKeh/GZzcB 658CMfZUWdzVg69B3PqYgnqwz5aArqdLgYq/8ZuEEpr+jcpEoVTig7qz1ICDxklW 22QfMeIsHrwtjJwGVre5lsJdgEr7mdXp7kYRT/2coIb36ETWuyx82jEQJ3/v0Wmn eYYuc7aSkrkgNdBGCpkpJ4ygCAWUgyc42+r/1hr9TkMrmI53m/hzAMTLV1NmUows 9B07AgMBAAGjggEgMIIBHDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIKzc4Fciul7 zHpoEPieqVjoQ1ryMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUG CCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3Jn MCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBwGA1UdEQQVMBOC EXBtcy5zaGlwbWVkLmNvLnphMBMGA1UdIAQMMAowCAYGZ4EMAQIBMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCotKlvOc/k3/HfWaTfo+Yk VyOVDfQgaXeHa6jT6KnrkAZBT5z53KBRTbCqk9djmlkOmOl+QtT4UoEg6kDVV4IB PDg9EPVZmEzlRwGO/v9LnT0NBqjXQPWBuJKKd+Dmj/4he6OV9uyI1BPZ3jQDmH0+ gs+4r36Gqqcd6DRF9ut2s3i7c4iDEo2aIVzR/KXgEOUs13NMte1kmrgAxVzZNm7Z qg0ehoIfoHIorr0rJZO3KFzY2HLTwigxTjdjrFaDApORWMkurWCP/HEgh8bFKPjT azD7ZBF1c5/f2fGeHxmIZd+4vWBcjG+g+XtNscFw3z+FZnITQp6WGMeUbPWDbo5g -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEArRII7apbWbjxANS3nJrO ByuUOjTxRgLhCgQ6n6EeQj1kc1OqHT6/cH2faIDFUlD4RK/C6VT/c9MnzDY6sVDl EGK5HHgATkhYC9yJCQZj9c7wMEvzqPsnplA3xUDKpoAnOVaeYd7mFgns4W5ZAoqm xKLya2T7etQwpd28PgXgAJcpCODcrGSxnAnO4Qfaya17ktR1HVwnv1QyMnSTLWmA il6+VoX2MwuHwLP8XBXOzOpagckBVoSYbCpbFPtKNgCV/jiQBcf+W0UDCvagKXem cGADJ92pllLLoJ2lVIZ8N7qU+gAYGeEKeh/GZzcB658CMfZUWdzVg69B3PqYgnqw z5aArqdLgYq/8ZuEEpr+jcpEoVTig7qz1ICDxklW22QfMeIsHrwtjJwGVre5lsJd gEr7mdXp7kYRT/2coIb36ETWuyx82jEQJ3/v0WmneYYuc7aSkrkgNdBGCpkpJ4yg CAWUgyc42+r/1hr9TkMrmI53m/hzAMTLV1NmUows9B07AgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 377925282925114730369583075726306525301515 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 07:18:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 07:18:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pms.shipmed.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3927621549217372460664887902539300303162008416147540569365650959585433785373552068328596168077357223211075602155860346597884170854517266674536958410598372821746457596473829946386426239015303512224250638122062571629105565436909808579193395121815184113590703670382739349601716411783882892239790956478759736651450374088447526076600204317413569221492624704998610417219667149032812849442285140295219447449057458893615730327060634112249720000432792904479513793339629661582382762169299552908340873347897697511690960207018821246942239371515723759595037015868835816091874726929491727415504019441433306653157529142124322898687290002764420513062188150602544173774051709850073101705218105013324762529385585843598765347728516159852154697729656549187718101803187004187175389186382785604762816884247759928662107684906325173418940053359624025790568278442904465550026935010881759276959958664167428669316009928193935878846898296643398984277307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 82b373815c8ae97bcc7a6810f89ea958e8435af2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.shipmed.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a8b4a96f39cfe4dff1df59a4dfa3e6245723950df4206977876ba8d3e8a9eb9006414f9cf9dca0514db0aa93d7639a590e98e97e42d4f8528120ea40d55782013c383d10f559984ce547018efeff4b9d3d0d06a8d740f581b8928a77e0e68ffe217ba395f6ec88d413d9de3403987d3e82cfb8af7e86aaa71de83445f6eb76b378bb738883128d9a215cd1fca5e010e52cd7734cb5ed649ab800c55cd9366ed9aa0d1e86821fa07228aebd2b2593b7285cd8d872d3c228314e3763ac568302939158c92ead608ffc712087c6c528f8d36b30fb641175739fdfd9f19e1f198865dfb8bd605c8c6fa0f97b4db1c170df3f85667213429e9618c7946cf5836e8e60