cloudcity.co.za
Issued by R3
About this certificate
This digital certificate with serial number 03:40:14:07:12:91:93:26:02:56:6b:aa:f5:30:06:4a:6b:b8 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cloudcity.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:40:14:07:12:91:93:26:02:56:6b:aa:f5:30:06:4a:6b:b8Serial Number (int): 283141550560831506339741340140009664703416
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 71:1b:a0:e9:03:18:26:f5:5e:21:02:c1:26:e8:25:ab:43:5e:c1:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b1:92:96:41:40:f3:67:35:fa:13:c3:89:15:70:c6:f0:a1:27:07:6e
Fingerprint (sha256): 47:e8:ae:12:60:d8:3d:44:8c:6f:11:07:7e:c4:e1:7b:35:e7:13:e1:da:75:fa:a8:d2:59:ff:f7:8e:2f:8b:90
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cloudcity.co.za
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cloudcity.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
Other certificates including the domain name cloudcity.co.za
(limited to 100 certificates)
digital.cloudcity.co.za
*.cloudcity.co.za
reports.cloudcity.co.za
reports.cloudcity.co.za
digital.cloudcity.co.za
people.leisure.qa
team.easternsling.com
reports.cloudcity.co.za
people.skygatesolar.com
reports.cloudcity.co.za
training.cloudcity.co.za
digital.cloudcity.co.za
digital.cloudcity.co.za
reports.cloudcity.co.za
reports.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
team.easternsling.com
events.pathwaystrat.com
cloudcity.co.za
cloudcity.co.za
team.easternsling.com
www.cloudcity.co.za
digital.cloudcity.co.za
training.cloudcity.co.za
reports.cloudcity.co.za
cloudcity.co.za
reports.cloudcity.co.za
cloudcity.co.za
digital.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
digital.cloudcity.co.za
reports.cloudcity.co.za
people.webelievethat.com
events.ventureconceptgroup.com
reports.cloudcity.co.za
cloudcity.co.za
www.cloudcity.co.za
people.destifind.sa
www.eventzteamcollective.com
team.easternsling.com
events.pathwaystrat.com
digital.cloudcity.co.za
people.triwaytechnologies.com
cpanel.cloudcity.co.za
reports.cloudcity.co.za
*.cloudcity.co.za
digital.cloudcity.co.za
team.easternsling.com
employeeportal.fitzsmith.com
team.easternsling.com
digital.cloudcity.co.za
digital.cloudcity.co.za
hr.teamparkes.com
reports.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
team.easternsling.com
digital.cloudcity.co.za
*.cloudcity.co.za
cloudcity.co.za
reports.cloudcity.co.za
team.easternsling.com
reports.cloudcity.co.za
digital.cloudcity.co.za
digital.cloudcity.co.za
reports.cloudcity.co.za
*.cloudcity.co.za
reports.cloudcity.co.za
reports.cloudcity.co.za
digital.cloudcity.co.za
people.leisure.qa
team.easternsling.com
reports.cloudcity.co.za
people.skygatesolar.com
reports.cloudcity.co.za
training.cloudcity.co.za
digital.cloudcity.co.za
digital.cloudcity.co.za
reports.cloudcity.co.za
reports.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
team.easternsling.com
events.pathwaystrat.com
cloudcity.co.za
cloudcity.co.za
team.easternsling.com
www.cloudcity.co.za
digital.cloudcity.co.za
training.cloudcity.co.za
reports.cloudcity.co.za
cloudcity.co.za
reports.cloudcity.co.za
cloudcity.co.za
digital.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
digital.cloudcity.co.za
reports.cloudcity.co.za
people.webelievethat.com
events.ventureconceptgroup.com
reports.cloudcity.co.za
cloudcity.co.za
www.cloudcity.co.za
people.destifind.sa
www.eventzteamcollective.com
team.easternsling.com
events.pathwaystrat.com
digital.cloudcity.co.za
people.triwaytechnologies.com
cpanel.cloudcity.co.za
reports.cloudcity.co.za
*.cloudcity.co.za
digital.cloudcity.co.za
team.easternsling.com
employeeportal.fitzsmith.com
team.easternsling.com
digital.cloudcity.co.za
digital.cloudcity.co.za
hr.teamparkes.com
reports.cloudcity.co.za
cloudcity.co.za
cloudcity.co.za
team.easternsling.com
digital.cloudcity.co.za
*.cloudcity.co.za
cloudcity.co.za
reports.cloudcity.co.za
team.easternsling.com
reports.cloudcity.co.za
digital.cloudcity.co.za
digital.cloudcity.co.za
reports.cloudcity.co.za
Certificate
The complete raw certificate details for cloudcity.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISA0AUBxKRkyYCVmuq9TAGSmu4MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTIwMDE3MzhaFw0yNDA0MTEwMDE3MzdaMBoxGDAWBgNVBAMT D2Nsb3VkY2l0eS5jby56YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKtxBKrWUfrz5JToXSNk75B38FWkefkXv6MrThtHmgbP9ssE/WgFsIHAPDx3IK5W OMrznNsat7t/Af/FtBxW+NX4KnCekIpjlQnuVZ/v7v/fi1n8mafmDxwMmI0VrrrX wfggN8MfzhWmmM8idWPdiGgdGYuVcL+VGz3eeu8sVALKqfux/+532tq+O/Y/drzd sQMzGUAvdOU7HZqyro19RqjApQ9fObkkT/nWoI4DR7rBvJD9p5s6ObaMrWcfxOPM zCYEXt2VsK4ShuIWkOx+Z5I8rlvgiCUB9eoMIzpoQkM/HH//mNGcsZytOKuboAvn neY4o6mh8QP50sRCtOzteZMCAwEAAaOCAiUwggIhMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUcRug6QMYJvVeIQLBJuglq0NewQ4wHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wLQYDVR0RBCYwJIIRKi5jbG91ZGNpdHkuY28uemGCD2Nsb3VkY2l0eS5jby56 YTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3 ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjPs+/HUAAAQDAEgw RgIhAP7lNRx2Qh5CNShzGGSXdDKg5G7zBf4Em6jsPSpfWGoIAiEAp0v0C3UcYFD4 edo/hn5bCkS3U/JlnDtxcaqCjbYeZ1kAdgDuzdBk1dsazsVct520zROiModGfLzs 3sNRSFlGcR+1mwAAAYz7PvxvAAAEAwBHMEUCIQDtfVZBY0mjDvzGw7gkOfkCNTNr jqUTGRLPjaLVTh6ivQIgeYQ5GDXxCLmtKXGZzHptPZDKAC2vob3Pwbi1IKqKtvow DQYJKoZIhvcNAQELBQADggEBAB/lB10QNlDahz3jDfRlLcaCxM1NMSLh75zwK/9f Nauvu6h5d5sqSage5Y1N7zqtK//muFaT01iRr3VTUaMRDG2DdZJihgqQkP1usz20 T+MEVlpEr71s0/NBw0njFiKgohk2V1ad3/ePnsxeize76o9xtMCbK17Q1Ru2V3bR Omx2dANAf7OBOnuFqkQpIRehXu2vdWO+4fD8FWd3kCXpVlMdi+Zl1pwCPUfK/Z6h fA4x5im4YMW54k17nYp0pZSKwcs2813v70fc6EVDk5CpWUmQhXqWB5YMqWvGcGb9 8Dv/WTUk8SNpgbOZ35QKPlnwUzCPKhSpl+TtkGyVxKuNHdM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3EEqtZR+vPklOhdI2Tv kHfwVaR5+Re/oytOG0eaBs/2ywT9aAWwgcA8PHcgrlY4yvOc2xq3u38B/8W0HFb4 1fgqcJ6QimOVCe5Vn+/u/9+LWfyZp+YPHAyYjRWuutfB+CA3wx/OFaaYzyJ1Y92I aB0Zi5Vwv5UbPd567yxUAsqp+7H/7nfa2r479j92vN2xAzMZQC905TsdmrKujX1G qMClD185uSRP+dagjgNHusG8kP2nmzo5toytZx/E48zMJgRe3ZWwrhKG4haQ7H5n kjyuW+CIJQH16gwjOmhCQz8cf/+Y0ZyxnK04q5ugC+ed5jijqaHxA/nSxEK07O15 kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283141550560831506339741340140009664703416 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 00:17:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 00:17:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloudcity.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21642481516417633842602697627601301085975865020148774129069749224675438503028180035673032297970440066466949711834959845850828066855024779341920120404847397482147318752763320265317112357883229107906205702585408928343778754787809183313997390811429302988527321311679990891498829887407228406587518007811571526616328217538427248862664569983910333702044052349604288932161874043856864649078651722686021825149313341617553397173556598748773225638335354848449301813675733259335111830680389970818055437817365509814434175230884809494896168890811531376978253678178362240199313325793532327894013409083811977616764585483183735011731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 711ba0e9031826f55e2102c126e825ab435ec10e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudcity.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudcity.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfb3efc750000040300483046022100fee5351c76421e423528731864977432a0e46ef305fe049ba8ec3d2a5f586a08022100a74bf40b751c6050f879da3f867e5b0a44b753f2659c3b7171aa828db61e6759007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cfb3efc6f0000040300473045022100ed7d56416349a30efcc6c3b82439f90235336b8ea5131912cf8da2d54e1ea2bd02207984391835f108b9ad297199cc7a6d3d90ca002dafa1bdcfc1b8b520aa8ab6fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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