resma.co.ke

Issued by R3

About this certificate

This digital certificate with serial number 03:19:29:9c:ab:bc:c6:cf:f2:1a:3c:a8:8e:a6:5e:15:6c:d4 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=resma.co.ke

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:29:9c:ab:bc:c6:cf:f2:1a:3c:a8:8e:a6:5e:15:6c:d4
Serial Number (int): 269899228797689780710358470155358094847188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:2b:2e:4a:3f:18:8b:81:85:78:e6:17:14:20:32:a6:c3:92:23:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:04:1f:f9:b1:93:ab:fe:39:8b:52:7c:b7:5b:1d:7f:99:4d:ff:4b
Fingerprint (sha256): 3d:16:e6:c2:8c:c4:c2:20:8b:5e:08:a8:40:98:b8:6a:21:10:3d:c7:1b:06:93:22:4c:43:84:f2:ed:ba:31:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate resma.co.ke

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resma.co.ke

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.resma.co.ke
api.resma.co.ke
api.staging.resma.co.ke
portal.resma.co.ke
resma.co.ke
staging.resma.co.ke
www.resma.co.ke

Other certificates including the domain name resma.co.ke

(limited to 100 certificates)
dcp.radar.co.mz
resma.co.ke
resma.co.ke
www.loginn.co.in
www.fitnesslionss.com
resma.co.ke
resma.co.ke
resma.co.ke
tenant.resma.co.ke
imme.b.rip.wtf
resma.co.ke
resma.co.ke
stage-admin.alfred.is
goldenhillpainting.com
imme.b.rip.wtf
admin.resma.co.ke
resma.co.ke
shanicoaching.com
resma.co.ke
www.elfs.dev
www.sermetkose.com
resma.co.ke
resma.co.ke
resma.co.ke
admin.resma.co.ke
admin.resma.co.ke
eland.dev
resma.co.ke
eland.dev
resma.co.ke
vivosoft.app
resma.co.ke
resma.co.ke
ciscomobily-accounts.complyment.com
resma.co.ke
resma.co.ke
www.qipo.com.br
resma.co.ke
www.sermetkose.com
inventory.morninglavendercafe.com
www.fitnesslionss.com
resma.co.ke
shanicoaching.com
admin.resma.co.ke
ciscomobily-accounts.complyment.com
www.mokolada.pl
admin.resma.co.ke
resma.co.ke
resma.co.ke
dcp.radar.co.mz
app.mlxlabs.io

Certificate

The complete raw certificate details for resma.co.ke in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NVDyijCi81thoVzPiR2
hYm+lnICo1QW1avB6uHMD78UCwTqkakXqc54k6yW3vOdTq5I3Rupcz10kgVWSJqi
lGT92y/+5mi39Cf1DXzx8/8bNGP122jIw/vG6GMVDKCh5tEhnzipxxlFelWyKQN7
+QI4zCCJk83ivFsCjF9WlX3znYRdX5pfY19YaUrlzCUnrBp00GvNaDQJDRLf9ihL
FVYy8zwyJ9w4h4NoM1RMFsXoUypNOtD1iuxWL55/kzE/ixkSfPnBNhk6YQpXR0C4
sgobwnyDy1QSE+FrlPtC00RjbOpGDrjkn0Bc+qB6yuTmVNstzBHUg4A5IWM/SbXr
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269899228797689780710358470155358094847188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 08:07:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 08:07:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resma.co.ke'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28382545106526282847930663723967977325471652476812119994067169622700433428195519451764974908118087155068955987799157568558860395988380016437843470386166258627615412708131277401537982899530383754372524925725785962311800867918660641439767810116807372604804850923048744472068104278620870223697745711276379266165802113903827337202489259568976816714656233780511880125068185955073368885515920766123655449976111850722013717543491901383018264182236501122326556282873938904560777616357843788485109838294849914067945844556570305622594093085847312979212525791730739983295712937720721131374579451409513691827709412637873920142283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af2b2e4a3f188b818578e617142032a6c39223bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.resma.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.resma.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.resma.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.resma.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resma.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.resma.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resma.co.ke'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001857c0934e20000040300473045022100ec225560cb1aef6a19bc5587d18a13d50b771f2b258ae6bd79a682fcfc0be1a902201861680447f1df5e017676a19bd3a23cc47cf3a486f7a8285d147686fb7da75c007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001857c0936d2000004030047304502201a10d19e07aa57bfe384691244a9cac88bbfdf64e84f4f3405abbbbd0fd7cbe5022100a2b287e53f58f40720d2455b75be2aeee089bef3b3f293a8e73840c3bb1e8500
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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