gsb.mancosa.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:d4:eb:2a:fb:7b:9d:b3:2c:79:99:5d:4e:d8:6c:66:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gsb.mancosa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:d4:eb:2a:fb:7b:9d:b3:2c:79:99:5d:4e:d8:6c:66:2c
Serial Number (int): 331377760410727012247548035586577891354156
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:1a:10:2a:9f:af:30:98:f3:95:e6:c3:f4:c4:c7:04:23:95:8b:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:be:0c:c2:e7:e3:d7:64:9d:0f:2c:87:e3:cb:2b:01:14:57:05:46
Fingerprint (sha256): 46:0a:a7:d7:60:e9:d1:86:5b:bd:88:33:8b:aa:b8:c0:55:70:e9:df:c1:94:ef:f7:67:65:cd:5d:32:f3:b6:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gsb.mancosa.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gsb.mancosa.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gsb.mancosa.co.za

Other certificates including the domain name mancosa.co.za

(limited to 100 certificates)
campionalumni.org
campionalumni.org
ssl276000.cloudflaressl.com
ssl276000.cloudflaressl.com
community.mancosa.co.za
campionalumni.org
mancosa.co.za
ssl83894.cloudflare.com
mancosa.co.za
skillme.mancosa.co.za
www.mancosa.co.za
campionalumni.org
enrol.mancosa.co.za
enrol.mancosa.co.za
community.mancosa.co.za
ssl83894.cloudflare.com
gsb.mancosa.co.za
campionalumni.org
ssl83894.cloudflare.com
ssl83894.cloudflare.com
admin.babydox.co.za
gsb.mancosa.co.za
*.mancosa.co.za
community.mancosa.co.za
www.mancosa.co.za
ssl276000.cloudflaressl.com
campionalumni.org
campionalumni.org
sni145963.cloudflaressl.com
mancosa.co.za
sni.cloudflaressl.com
www.mancosa.co.za
*.mancosa.co.za
campusnetzwerk.ac.at
campionalumni.org
campionalumni.org
mancosa.co.za
campusnetzwerk.ac.at
www.mancosa.co.za
ssl276000.cloudflaressl.com
mancosa.co.za
www.mancosa.co.za
campusnetzwerk.ac.at
sni145963.cloudflaressl.com
www.mancosa.co.za
campusnetzwerk.ac.at
campusnetzwerk.ac.at
campionalumni.org
campusnetzwerk.ac.at
www.mancosa.co.za
mancosa.co.za
gsb.mancosa.co.za
ssl83894.cloudflare.com
campionalumni.org
campusnetzwerk.ac.at
campionalumni.org
*.mancosa.co.za
ssl83894.cloudflare.com
enrol.mancosa.co.za
mancosa.co.za
ssl276000.cloudflaressl.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
enrol.mancosa.co.za
gsb.mancosa.co.za
campionalumni.org
campionalumni.org
gsb.mancosa.co.za
enrol.mancosa.co.za
mancosa.co.za
mancosa.co.za
enrol.mancosa.co.za
gsb.mancosa.co.za
mancosa.co.za
mancosa.co.za
campionalumni.org
www.mancosa.co.za
community.mancosa.co.za
campionalumni.org
campionalumni.org
ssl276000.cloudflaressl.com
campusnetzwerk.ac.at
ssl83894.cloudflare.com
gsb.mancosa.co.za
campionalumni.org
campusnetzwerk.ac.at
campusnetzwerk.ac.at
ssl276000.cloudflaressl.com
campionalumni.org
mancosa.co.za
ssl83894.cloudflare.com
gsb.mancosa.co.za
mancosa.co.za
campusnetzwerk.ac.at
www.mancosa.co.za
ssl276000.cloudflaressl.com
mancosa.co.za
campionalumni.org
enrol.mancosa.co.za

Certificate

The complete raw certificate details for gsb.mancosa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331377760410727012247548035586577891354156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 23:03:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 23:03:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gsb.mancosa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802700891425872124062807821101972189168912025470349054787699807679282198521591244872414484065867163809686494214894907749963853294488476087921974390523257319082392525592743878721194320560272340386939406876268796313897777058965687798039566349127507267269893738284513712533238458765568745531351992002009957832086243031596996772162059279827015721538743142497747782832063799593568277299197133602813391203970256154064968503223446509864972456145891422500421987616827910577303507950604299717677734520092236725258357378378641152862996640625527291714429141225940680488817286923915968818616182714594329574088657834239080882462506161292710176629309327099207449678476834842188088081538564971393881422553863846222499135415891373960320139891045978190288830583181165467829989059671133639122954125441674672423561159160326665771051007569995689469406227219078842877137985095870091727867904990001438403969438966152822307419619998627113766068351815705434508358407870571996292172057275048099259415099295392084975350441967699792035538512624394830081552574259273772931526008644135105792793418013394828109176620931343885304323010008792445839228004827130658509110347584189595174903292404156345477418088581913217818243642401797907877533585115515258799568779443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a1a102a9faf3098f395e6c3f4c4c70423958be9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsb.mancosa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f44aa4eab000004030046304402202c9bbc68b6766bc8452fc4bf5e25a414ce72e5feedcdb2b73246497a2a506c5502204a2c85dba79578f047cc7ae518367ca615541fae8b119e1dc3966459b0e7d7530075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f44aa4e8c00000403004630440220527976352e82a0960111ff2719fbb9d3fc3cd602aabfb2ee747a8354dde978f302206427b656b0b211fe9fe71523cfb82d694c25b4828546ccb3e97b61bf87089ac8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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