webchat.absabank.co.ke

- Absa Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:eb:c1:b6:c8:6b:02:52:90:4e:76:9a:68:d2:ce:b8 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:eb:c1:b6:c8:6b:02:52:90:4e:76:9a:68:d2:ce:b8
Serial Number (int): 19833310689349957076591367171112881848
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:e1:0e:cb:e3:69:cd:ea:f1:12:ca:e6:2a:21:47:23:de:84:bb:c0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 5d:b7:28:0d:15:39:05:b5:55:a7:2b:93:04:9f:7f:25:fa:f3:c3:83
Fingerprint (sha256): 3b:f7:c6:e2:ce:73:7e:32:1f:8f:83:1d:e1:05:72:7e:d4:55:f3:d1:14:ec:6a:d7:fb:74:09:d1:93:19:a1:b7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate webchat.absabank.co.ke

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webchat.absabank.co.ke

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webchat.absabank.co.ke
chatbot-ppd-ke.absa.africa
chatbot-ke.absa.africa
webhook-staging.absabank.co.ke
webhook.absabank.co.ke

Other certificates including the domain name absabank.co.ke

(limited to 100 certificates)
api.digitalwallet.absabank.mu
absaauth-pprd.absa.com.gh
webchat.absabank.co.ke
www.leadmgt.absabank.co.ke
www.leadmgt.absabank.co.ke
netbanking.absabank.co.ke
ubhm-pprd.absabank.co.ke
www.leadmgt.absabank.co.ke
ubhm.absa.co.tz
onboarding.absabank.co.ke
online-uat.absa.co.tz
online-uat.absa.co.zm
www.leadmgttest.absabank.co.ke
api.onboarding-pp.absa.co.za
netbanking.absabank.co.ke
api.onboarding.absa.co.za
bima.absabank.co.ke
absaauth.absabank.co.ke
apiuat.digitalwallet.absabank.co.ke
ubhm.absabank.co.ke
aroweb.absa.africa
rcc.absabank.co.ke
onlineUAT.absa.com.gh
api.onboarding-pp.absa.co.za
webchat.absabank.co.ke
onboarding.absabank.co.ke
netbanking.absabank.co.ke
online.absabank.co.ke
ubhm.absa.co.tz
absaauth-pprd.absa.com.gh
online-pprd.absabank.co.ke
online.absabank.co.ke
www.prepaid.absabank.co.ke
onboarding.absabank.co.ke
aroweb.absa.africa
webchat-staging.absa.africa
online.absabank.co.ke
*.absabank.co.ke
aroweb.absa.africa
onlineamg.absa.co.tz
absaauth-uat.absa.com.gh
aroweb.absa.africa
onboarding.absabank.co.ke
webchat.absabank.co.ke
api.digitalwallet.absabank.mu
www.adminportal.absadirect.absabank.co.ke
*.absabank.co.ke
www.prepaid.absabank.co.ke
onboarding.absabank.co.ke
www.prepaid.absabank.co.ke
online-uat.absa.co.tz
webchat-staging.absa.africa
online-pprd.absabank.co.ke
absaauth-uat.absa.com.gh
onboarding-pp.absabank.co.ke
netbanking.absabank.co.ke
www.leadmgttest.absabank.co.ke
api.onboarding-pp.absa.co.za
webchat.absabank.co.ke
api.onboarding-pp.absa.co.za
ubhm-pprd.absa.co.zm
ubhm-uat.absabank.co.ke
absaauth.absabank.co.ke
aroweb.absa.africa
onboarding.absabank.co.ke
online.absabank.co.ke
onlineamg-pprd.absa.co.tz
onlineamg-uat.absa.co.tz
ubhmUAT.absa.co.tz
onlineamg-uat.absa.co.tz
www.leadmgttest.absabank.co.ke
api.digitalwallet.absabank.mu
apiuat.digitalwallet.absabank.co.ke
www.leadmgt.absabank.co.ke
aroweb.absa.africa
www.absadirect.absabank.co.ke
absaauth.absabank.co.ke
www.prepaid.absabank.co.ke
ubhm.absa.co.tz
qms.absabank.co.ke
aroweb.absa.africa
ubhm.absa.co.tz
webchat.absabank.co.ke
www.absadirect.absabank.co.ke
webchat.absabank.co.ke
*.absabank.co.ke

Certificate

The complete raw certificate details for webchat.absabank.co.ke in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPf9IXGc8OEvUh6ROhVN
+dcK9MjUi5kHBPkAsm1wTpFs8c/uChbF+ahwP1JiqKJAlCy7i12TMzlwB7OWO14E
U9hY6bkqqRiLEliCYsNh7GWez2oZO9mIjwf49pzpkPCwsCT8D0d3whbqVqkAiakm
dg01C6fphn409ChzomKfkjR/NCeFJLHrSMEeAWr69ekKm4erZ+IgrOP7Rm2p1L7z
PiQg7+awCra7Y8QeDqPWUW0H1hLEWt2e9sPW6O6DjguPFSg4LZjwn7YPFL9lYcGB
ATUqEbzCHS888/JcJQswvJEkqM5xVlx25Cc2QGgnz7caDVZh6TwI1NiveZ1QRzuL
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19833310689349957076591367171112881848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webchat.absabank.co.ke'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25874902043925006035195726658865453266647998105711457159538405978682525850533921241026628856112129541274926491023777182704543610742262540470894051442090574721908430527037868452238574599070615396037040817540510422774839448259023864226599640555763156618772361893715466044664517138542181923396771872561906101349957567824768394202795994221605873420744771902695136470391414387496352511044019227437180504221254637819232719127977280686010567252787540894930951275515275973854744219234529148762555160080895377806996724169097710789976237896865065211412396737912641119141035458032082649917323255828129656525968401287982725434337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8e10ecbe369cdeaf112cae62a214723de84bbc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat.absabank.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot-ppd-ke.absa.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot-ke.absa.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook-staging.absabank.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook.absabank.co.ke'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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