qdd.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:0d:6f:5b:93:09:5d:50:1e:80:ab:8c:57:69:98:e7:ca:29 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=qdd.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0d:6f:5b:93:09:5d:50:1e:80:ab:8c:57:69:98:e7:ca:29Serial Number (int): 353020834285815583106173411464626380982825
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 62:a3:bc:68:ff:d0:a2:c2:54:5c:5d:49:1d:7f:c3:96:ad:73:4e:c1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 13:aa:4c:bb:e2:82:ad:37:c5:01:40:34:98:5c:3d:e8:ae:88:8f:9a
Fingerprint (sha256): 3e:aa:8d:22:1a:b5:36:84:9e:e7:9c:e2:1a:df:cd:cb:84:d3:2e:60:b1:ad:64:01:ba:6d:c1:fc:dc:cf:ac:e9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate qdd.co.za
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qdd.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
advancestaffing.net.potatovalve.com
congacoin.com
industyle.com
qdd.co.za
shortstories.cc
techilead.com
congacoin.com
industyle.com
qdd.co.za
shortstories.cc
techilead.com
Other certificates including the domain name qdd.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for qdd.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISBA1vW5MJXVAegKuMV2mY58opMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDIxMTAxNDVaFw0yNDA0MDExMTAxNDRaMBQxEjAQBgNVBAMT CXFkZC5jby56YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOGqBo3p QGHXzk3qGPq5MfAu4UT7QNR020WNkzwu+WT4ENojJRaC9N3jknyz6NipQ5S52Y4G gG7Z4vdYuVK2HWY/Bsrrwd6nR5XxLBzwvpdx5nbG1fFuz4uxJnurL4F08zmnHQkO PGHIDP8i5fsHK93OoKBNxhHlnnK1TOyqrSoxqUN/j+FjuRdcGiDqH2PiFNGxMZJy E2qCLSvUAgH42FOBNWg1KsYHNbt8OE+v6Q5clvazBaTh8F73fmWxpFqiHvBIUkkw RL6n5jKIU2YavtHuPTid21V0sMEUZ++/rR5hVSTaCzvzxhaxVofAuYvE0Th6KKhi kFRZDlr5FJaB0jMCAwEAAaOCAm4wggJqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU YqO8aP/QosJUXF1JHX/Dlq1zTsEwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wdwYD VR0RBHAwboIjYWR2YW5jZXN0YWZmaW5nLm5ldC5wb3RhdG92YWx2ZS5jb22CDWNv bmdhY29pbi5jb22CDWluZHVzdHlsZS5jb22CCXFkZC5jby56YYIPc2hvcnRzdG9y aWVzLmNjgg10ZWNoaWxlYWQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y b+H61BcAAAGMyg0b5wAABAMASDBGAiEAgfDLgpCmbpkyuwk9TEP9nbsPx+wwo7m/ h8iSu5XnxKICIQCMaQInMxLJyp+G0hvtkQ3Cquffz9vBQpw+DRByDKS+1AB1AHb/ iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjMoNHGQAAAQDAEYwRAIg NTdnBtPPyUvUnObOY7YoqFzgQt98WpWTLlWpPF/DRFACIHYbyEdb9EBpAYe9K9Za oqK/eC7GpfpHhSznxiRkEZeWMA0GCSqGSIb3DQEBCwUAA4IBAQABWoxXeLwKU6N4 ljAa7lAk/YgwjvvwL+CxWHKHlF6KY/Tba7CLf/SHTI9zAm+n0tQoxLKDd/dRbueK +Re//EImj12fCYeoQNvRuNta1iiI7ZoOlmyv7mpgnnoSHWiFDIiauP3r9qPM0Rkt jMcZC+aYq7FXgmq1SXDNw+x4BrWgW43PnfcgK70LnaGDGCHP3NfuIPtKm7awUQYp 7DfdqCVYXRB5M6hL1+HhUWggsFgNwGQsxZQ2+WnEilNgTA8pRC8qbGJ6zSuiRV9W /fvrFGwOW4iNBNRxKwFf9TLBOAsQyR2lVjHhUSBO17c9pQ/vGX3TS/R9n89RSY6u JfM+/keU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aoGjelAYdfOTeoY+rkx 8C7hRPtA1HTbRY2TPC75ZPgQ2iMlFoL03eOSfLPo2KlDlLnZjgaAbtni91i5UrYd Zj8GyuvB3qdHlfEsHPC+l3HmdsbV8W7Pi7Eme6svgXTzOacdCQ48YcgM/yLl+wcr 3c6goE3GEeWecrVM7KqtKjGpQ3+P4WO5F1waIOofY+IU0bExknITaoItK9QCAfjY U4E1aDUqxgc1u3w4T6/pDlyW9rMFpOHwXvd+ZbGkWqIe8EhSSTBEvqfmMohTZhq+ 0e49OJ3bVXSwwRRn77+tHmFVJNoLO/PGFrFWh8C5i8TROHooqGKQVFkOWvkUloHS MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 353020834285815583106173411464626380982825 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 11:01:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 11:01:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qdd.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28487461367011372472594852146683651118165507376031254759318074607692967779164994355809650532643562493089554957928592692898139652440108026087200026105383485882406769075099708544513689053475818125674323276213288715012774383406040403022678625644990410361737031979844035732871549623203728300897395103739457612530894183621653544188483960482357326555957606215182606541550946597027092210283704160654949982498937412474741866196574450730568056369071313201918105063072378039321464410649017304263335652482016291373339540859616065984572315658890043243597366799054841919628981345051559526773099199457127815924997362023949758747187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62a3bc68ffd0a2c2545c5d491d7fc396ad734ec1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancestaffing.net.potatovalve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congacoin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industyle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdd.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortstories.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techilead.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cca0d1be7000004030048304602210081f0cb8290a66e9932bb093d4c43fd9dbb0fc7ec30a3b9bf87c892bb95e7c4a20221008c6902273312c9ca9f86d21bed910dc2aae7dfcfdbc1429c3e0d10720ca4bed400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cca0d1c640000040300463044022035376706d3cfc94bd49ce6ce63b628a85ce042df7c5a95932e55a93c5fc344500220761bc8475bf440690187bd2bd65aa2a2bf782ec6a5fa47852ce7c62464119796 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00015a8c5778bc0a53a37896301aee5024fd88308efbf02fe0b1587287945e8a63f4db6bb08b7ff4874c8f73026fa7d2d428c4b28377f7516ee78af917bffc42268f5d9f0987a840dbd1b8db5ad62888ed9a0e966cafee6a609e7a121d68850c889ab8fdebf6a3ccd1192d8cc7190be698abb157826ab54970cdc3ec7806b5a05b8dcf9df7202bbd0b9da1831821cfdcd7ee20fb4a9bb6b0510629ec37dda825585d107933a84bd7e1e1516820b0580dc0642cc59436f969c48a53604c0f29442f2a6c627acd2ba2455f56fdfbeb146c0e5b888d04d4712b015ff532c1380b10c91da55631e151204ed7b73da50fef197dd34bf47d9fcf51498eae25f33efe4794