saaj.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:f7:85:ad:76:03:93:c0:77:79:f6:9e:15:78:51:8f:e4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saaj.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:f7:85:ad:76:03:93:c0:77:79:f6:9e:15:78:51:8f:e4
Serial Number (int): 269492365643110275636656587584318429302756
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:a7:4f:3d:bd:b6:03:e2:e9:02:4d:7d:c1:a9:78:40:53:8f:b8:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:f5:b8:1f:3a:10:bc:0e:af:f8:aa:17:55:ad:a7:c7:2d:08:b1:08
Fingerprint (sha256): 3d:19:7e:36:31:a1:04:55:24:ee:3d:17:1a:53:26:4c:c3:6a:78:9b:6c:f6:b0:cc:f2:b0:87:f5:23:cc:96:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate saaj.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saaj.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saaj.co.za

Other certificates including the domain name saaj.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for saaj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269492365643110275636656587584318429302756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 22:14:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 22:14:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saaj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757424150018386894567918409228934830694122980280031713678506172100086021936512481549022458568004370044950955444483913352878241225546533942762916970436544539813749039528820888291174352617215160706529785256407455261085156926810257855534643851754556540767080227331960190507489905720401219311562043655048116603793733369230022095199309058313834959349370867669569618263119681360888687528686992526839091717767918892367597072576612530203785931836740682793446696063878627218164901514901578069262690512705102966617081392977324904411701919563786108952529974778730557433971557566655388751509177292859011261573241702250318846824944201488580376068716646941521775242250554652779779213212940911604492645715147673169912392462154545044365333995333019712460127484496891124306039352712910854509470922450305009395573278696497681701675335550023542225214085703863557125630030616022378517974356362331805101264806420239953217143643025883330315616092520237094483499728928752724127094897823290063885292350327830919920188552605007090918935226853103524838572368295808934619630762502505763158580034611457590403804712908870148360135439597145102359873750402683399761111755738398758213743972967637923753714479322619903978960779519467817269397196856959597149392840639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85a74f3dbdb603e2e9024d7dc1a97840538fb880
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saaj.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705a949c380000040300473045022100d9a379dc39626585d582e2697e46a1ddb04cec457ec2322a819e5df3fc18596502205741433ec6186841c4714ac9cf56cd3f2c245aad506a0d424ab16494d8f9a37600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705a949c7b0000040300473045022100b454724221059735b5e3dc52582c94ed183bb036d9e4d415cf608cd796d3deee0220370150a95d673a6803f34a10043f903c8de1bbf348feee86bd850d8945d825b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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