xb1.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:76:e5:c5:31:d9:02:a2:9e:8a:ad:ed:cd:4a:94:42:55:09 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xb1.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:e5:c5:31:d9:02:a2:9e:8a:ad:ed:cd:4a:94:42:55:09
Serial Number (int): 388907880128258999780333314177572557444361
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:23:ab:c3:c6:f1:a2:d8:28:99:27:14:76:f5:8a:ab:70:80:6b:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:54:a7:94:a4:93:39:ba:eb:c2:9c:51:3b:dd:04:e1:9b:e9:c3:cd
Fingerprint (sha256): 43:b6:9c:bf:49:c7:93:06:d5:45:ce:26:c1:12:57:d6:fb:9d:19:4a:3e:6f:55:84:5b:ba:95:18:79:22:8c:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xb1.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xb1.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

card4vip.com
horse-community.org.theconcise.bible
intelliquill.com.echolscounty.com
pressurewashpensacola.com
rxdogtreatz.com
wellnessblogs.com
workfromcayman.com
xb1.co.za

Other certificates including the domain name xb1.co.za

(limited to 100 certificates)
www.xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
judeconsulting.com.xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
arbitrageur.co.nz.xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za
xb1.co.za

Certificate

The complete raw certificate details for xb1.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8KlbYjTSoB53emNQ9p5
WKhE3nza0VwmDY8sVqKzyXKncbr4rxWGh5jngpkf9q5+ZPk8zNXxvcY9n11bShpG
8Q8QnULoLL+wdlyQK6aFDYLniQtaEMLoZG99UvXidYq7yGupxvoLtwA3AlSZ4WWg
10IjvT2otS8iesSQXQct7nnpIm6My/4/di5tHPfMUGmXCy87bOvegLrSmoNWPTeh
Ce2PjDtRQ5WdTPxVdaKrI2pLPwvyMT9qhWvv3tQuXn3gySXE5I0bNdcHGhELBjEX
jCJXAq6pFpIledyQiX6Kl2PKd8DKMF5tWtgTOk6FkVOvBF1/VVGS4XHYKReERrRI
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388907880128258999780333314177572557444361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 21:40:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 21:40:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xb1.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19662920889606273891472399826230615776228570052187872739130600046397848375588053559936645005636789719141093696518960377682408206287966419802691227140027249085609035124486834139276024012333839554595932316411469919863954070844584475193044168604187356372949698405075552126318329769250756621387642408167821860410677446109862654007203349442696217657659132546979111982907165052092445900581049246808764817891364671948959965123159597859114314045882783480201159762440292528400954539285637352982590716519660236829301338718709537111554243762804488610306734224946720764422528536822939061818372507514672687155759701971218535303219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9923abc3c6f1a2d82899271476f58aab70806b8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (184 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horse-community.org.theconcise.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelliquill.com.echolscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewashpensacola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxdogtreatz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnessblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfromcayman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xb1.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c6a7d6da30000040300473045022022947ff0307032a24fe27f91e5290b4a7ac97b33d85e21b472e542eb24d02384022100fa9944a8ca8ab447cb98283a82550f3ca267d321398eea8f3a764665d7f60088007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c6a7d6da40000040300473045022100bfc05eeb543337bc99ff04191270eb9a926ad608864b0805701511e182e8635d02206123329750339a168c1a717536a1a9eabef5ae63e5b95f864a446c8c0ce6f54d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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