igroup.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:3e:40:97:aa:de:d9:5d:e1:c0:f8:1f:66:c9:c5:fb:fc:e5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=igroup.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:40:97:aa:de:d9:5d:e1:c0:f8:1f:66:c9:c5:fb:fc:e5
Serial Number (int): 282520222638600354491713899612282157792485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:ff:4f:77:c4:db:17:21:da:1c:f5:54:91:9d:96:b4:0f:ee:8f:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:2b:09:51:d3:ab:eb:4a:80:bb:30:6e:4c:9f:3d:01:a5:6d:ec:7e
Fingerprint (sha256): 4c:6b:66:6a:bc:f0:02:ca:ff:f2:7c:44:da:b9:cf:80:20:15:bc:60:3d:e7:1c:e2:b6:1f:f9:cb:f3:79:5d:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate igroup.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for igroup.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

igroup.co.za

Other certificates including the domain name igroup.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for igroup.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282520222638600354491713899612282157792485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 01:32:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 01:32:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'igroup.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704783389545789388531808000414458322439617351285472273848257189668258700778033970148416265247475073493779995211977654350403111284650035124165650886159008985032948675524534428778108546973172589327049177993597186442737324339736917677791231720498902105274467352152147811450955387427496188438297661653416387406206831483494268654145151100587642943508649785545868662860786939106557887696410001869704090696813552926985534103819765069942371551029186826880958679769127010431605610264780590613944780253725696579608257375470737116511513282101607084442098120296362824361705461000417128326429940018729369603541173791101495019973025842404055074082237413971252893906124574527780948136935414603305113018863308086600649544410827578315359529393444427353257628736828241522736762007259175642028981399921132346588555999754775573118742703864332471905500496078654139912317047178505510253342838509211335145449219617986902889229618135590144634864803839223721485764023127013690482328203628333467257211039704412945623191515074738742250153283286031463086493767223284423349217016261537672734136862755342671992786813890165346888238175365589699869742852203872935095970702926931622682433425793219957451854834028652110873232797272228006096527911607205344070171782351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71ff4f77c4db1721da1cf554919d96b40fee8fb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igroup.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a53bbf70d000004030047304502204921b467fd28c09303db035933edea3b41c1ae5954e31b6dfa817db9b66a2ae60221009b6a536e392a9223d58e700c0f7482a8e7d67690e14a6b2c0d51aef702006ba9007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a53bbf71e0000040300473045022100a2b7f30a344ca48aba7fd3a036428343202c98f81c4de7e4acd322d49fcbe96402205f5567efd7c7c8a9d8caa91492ba5dbd512cc24f2d5be53c44ea125294b2a5c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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