citiwood.co.za
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9c:a0:a3:23:3a:52:59:97:a7:10:f5:0f:1b:21:f8:e3:9a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=citiwood.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9c:a0:a3:23:3a:52:59:97:a7:10:f5:0f:1b:21:f8:e3:9aSerial Number (int): 314634430573165723591724456356820702258074
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7b:cf:be:90:ec:69:8d:3a:da:f1:6f:2d:31:58:05:29:e6:68:d3:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1b:94:ae:96:5c:b5:6e:8e:35:ba:5c:cf:47:3e:91:02:92:cf:02:15
Fingerprint (sha256): 4b:fc:0f:7a:88:8d:97:d2:0a:f3:9c:a9:2d:8e:91:69:2b:b0:92:28:ec:b0:6a:56:38:e7:78:0b:f8:74:e0:bc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate citiwood.co.za
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for citiwood.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
citiwood.co.za
Other certificates including the domain name citiwood.co.za
(limited to 100 certificates)
citiwood.co.za
citiwood.co.za
sni.cloudflaressl.com
citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
track.rathin.com
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
sni.cloudflaressl.com
zmtrack.web.citiwood.co.za
www.citiwood.co.za
sni.cloudflaressl.com
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
zmtrack.web.citiwood.co.za
citiwood.co.za
citiwood.co.za
sni.cloudflaressl.com
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
sni.cloudflaressl.com
citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
track.rathin.com
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
sni.cloudflaressl.com
zmtrack.web.citiwood.co.za
www.citiwood.co.za
sni.cloudflaressl.com
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
zmtrack.web.citiwood.co.za
citiwood.co.za
citiwood.co.za
sni.cloudflaressl.com
www.citiwood.co.za
www.citiwood.co.za
citiwood.co.za
citiwood.co.za
citiwood.co.za
Certificate
The complete raw certificate details for citiwood.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISA5ygoyM6UlmXpxD1Dxsh+OOaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjEwODQ4MDJaFw0x OTA3MjAwODQ4MDJaMBkxFzAVBgNVBAMTDmNpdGl3b29kLmNvLnphMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43mokItvD3vJnIaEMVBeif6mC2Qtqcch 6mntPotwV8CvtwoDk4zNSIMcO6jvhPXNFofOxg/g/2yGW1zJUhC9NZ7Ee6MzQduA T/Pogtt/iTY1HVfi9q12icImHsPyQGAt/LsZdHfp8EIkVD6hntxtRPCB2ln8nsVP 0lo6KND5L67pwajYimz6Vi4BdIPn45CZvfS/t4ehZ/P/aNdV/jhKEJMtYBeMa76e t5u4JByIz3yTs4IRxhkfhO7oVu7meqfP9/jCeNt6erTEkjPverlo/lpXpK76h0Hj EU/LWqdXchsxwqJJKgdkqdhZw5ybNgE+60HU5CIucUZyOH3/TVk3MwIDAQABo4IC ZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR7z76Q7GmNOtrxby0xWAUp5mjT nDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMBkGA1UdEQQSMBCCDmNpdGl3b29kLmNvLnphMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFqP0ui2QAABAMARzBFAiEAy3QODt1X yTmm0sNB1xl6ZAjKPld9m5UJrqJyd96mbEsCIAy0VsHaYKNejOh/Ahjpc2LkEsGO sfTm8gX6WfAVguxyAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0A AAFqP0ukzQAABAMASDBGAiEA4cbfugz8hPua9CCUZ/KqSdlYw5sZAsyBVVwK0DCg BwACIQC/ZhTbzuzgkrKDWH2Whr+pgPbQSDwfbi/Dlag14IGvCzANBgkqhkiG9w0B AQsFAAOCAQEATrmEfEhyFrcruCxnADd1cmaGZC7rJxOzKylG+DZ+XYIcQo5EM9CY TlkUx17kjgl6AhkL4hzdMfLA7Udr9EM2V91t8GViFCuJOd3BUsmSypa3xEqGVJJX qOJIPFgoYl5Jf9FoUSPkWgsI8MB4Wu164ATzeLNDfBwHzqpnmMl4ShS6wZqIEEaj 0tXrX6/FdM836RthduguCJcN+I5oFl3oLJiTdW8uiALxQdJI0O3bd82hkJp35dxZ 2u0PJJ1Rkrx5py6OHweNx9TezujuyfGEPGDjJSH9Gth7zrBV1voS8w4glPgLIzeD Yn8ALzyBfoH48SOSuI66IXRVuijHpZ4gfw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43mokItvD3vJnIaEMVBe if6mC2Qtqcch6mntPotwV8CvtwoDk4zNSIMcO6jvhPXNFofOxg/g/2yGW1zJUhC9 NZ7Ee6MzQduAT/Pogtt/iTY1HVfi9q12icImHsPyQGAt/LsZdHfp8EIkVD6hntxt RPCB2ln8nsVP0lo6KND5L67pwajYimz6Vi4BdIPn45CZvfS/t4ehZ/P/aNdV/jhK EJMtYBeMa76et5u4JByIz3yTs4IRxhkfhO7oVu7meqfP9/jCeNt6erTEkjPverlo /lpXpK76h0HjEU/LWqdXchsxwqJJKgdkqdhZw5ybNgE+60HU5CIucUZyOH3/TVk3 MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314634430573165723591724456356820702258074 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 08:48:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 08:48:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citiwood.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28716087247673313315329737792901606659011379784342081661174366932044577532927269473560605217847916168328938220017993503350941055493295871954321896557948289420439064868432918940617310751028326691398943525040365899667060618159252307913270635238337233898117917667099834655947061516516824246426046303022539584564492682591923703679741199935136219431047906704012940183268405355176630825083558015962127331960896075821367457776933753764218470213209481780706819432665950791160504180550372375953535320607417942405499121918880713820727275095719456446095622011850620571862464991645388909958713021424820561872067288965722807023411 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7bcfbe90ec698d3adaf16f2d31580529e668d39c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citiwood.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a3f4ba2d90000040300473045022100cb740e0edd57c939a6d2c341d7197a6408ca3e577d9b9509aea27277dea66c4b02200cb456c1da60a35e8ce87f0218e97362e412c18eb1f4e6f205fa59f01582ec7200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a3f4ba4cd0000040300483046022100e1c6dfba0cfc84fb9af4209467f2aa49d958c39b1902cc81555c0ad030a00700022100bf6614dbceece092b283587d9686bfa980f6d0483c1f6e2fc395a835e081af0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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