slt.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:1e:61:68:74:4e:e1:70:81:76:7e:00:74:80:e3:05:ab was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=slt.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:1e:61:68:74:4e:e1:70:81:76:7e:00:74:80:e3:05:ab
Serial Number (int): 433560118068529905808603411325667835577771
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:64:82:6c:bd:c3:c6:36:71:aa:a0:28:8a:cc:b2:35:31:c4:05:7c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:89:5e:6f:e9:19:4a:eb:34:e1:b1:0a:bc:30:d3:1b:7f:68:7d:45
Fingerprint (sha256): 4a:b9:fd:4e:32:3c:58:bc:c9:26:f5:73:0f:8c:bf:2e:19:7f:dc:03:7d:03:ec:f2:d1:82:af:cc:16:de:b0:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate slt.co.za

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for slt.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

araujostudios.com
basedcomputer.com
beliefsjournal.org
breakingnewscomments.net
chubhan.com
dallaschristianschools.com
draggala.com
edgeworth.com
exportarbitrage.com
graduatedcare.com
healthyhomeaudit.us
krimpers.com
lambcounty.com
legaldesks.com
mikebowdenphotography.com
obtaindomain.com
panamacitybeachhome.com
rampartecc.com
remotejobdao.com
revx2.llc
slt.co.za
softential.com
sunglassesunlimited.com
umiworkshops.com
www.nonwires.com

Other certificates including the domain name slt.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for slt.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ8aqDeI3hJPaZPS4loF
SBYomZ37bAjt6jSdS34INv/sbkySu5NViE4Ae/at29t6c0H2AU4PivdNZzxrauQy
sGrE+9lg7db2f4A8i2NtJej8tT4wlDNCl/jQR4e2fT+YEFFc9CAbthwfr24O4kbi
Y7X5X9ZXseDHqWPKjPurbU42M4PtvuYtruxreWREdX4zWdrE/9BjLI0oWkMEaLTd
G9teaXGkO8YaEvA0NvFILXqHJ7JK2Fn2xXRfbLPDyOzhhsJY5RkLMWxnlfH4mfGV
mHC0FZilbhAuy/yBpFM9K2irKqFrgdi0mj7C0AMiQ5Fad4gQHXc0dVfiSsZ9fKFO
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433560118068529905808603411325667835577771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 03:45:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 03:45:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'slt.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21846674882874779567567944932764025179087475144643553458413876531452115293513561815245627122913077718926764641203531590591083370853808569311030362842791514202097414135963942236666303817683244089723849037293918930073717305126710070806330712973870149181874104665309347549387067900030255980640214083153979533647245831226522554097965604610420531408344472498159504889100354916410570539598759142511617091349231936182670780979063050074372527899417192954676895742119682086630932548021230189988503683359147243212343941199858140283927349376128236976170896001572608080313832418425235864171113133338583418933997635705662131490497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d64826cbdc3c63671aaa0288accb23531c4057c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (468 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'araujostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basedcomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beliefsjournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakingnewscomments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallaschristianschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draggala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgeworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exportarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduatedcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeaudit.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krimpers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaldesks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikebowdenphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obtaindomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamacitybeachhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rampartecc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotejobdao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revx2.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slt.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunglassesunlimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonwires.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d441690a80000040300473045022065a9a5df82549700ca74ae39e74706d34d4cd326f7ea1ecc64ad1d527a432a68022100a463f84bcbfe740d55f5471d8e2f9060a90d6cb976a6bb38879d6201715d03d00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4416909f0000040300483046022100aeb3a62b0d8803a88d50d967d3695c0831a498509ed2a049c439235b49e74575022100d6667a5c0ff2fb7a2b00838e596c9ec1592e72549cc4ff5278de65014a5c57b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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