mediacent.africa
Issued by R3
About this certificate
This digital certificate with serial number 03:0c:b8:0c:bb:13:16:7f:ed:28:92:c3:f5:7f:71:05:4d:1f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mediacent.africa
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0c:b8:0c:bb:13:16:7f:ed:28:92:c3:f5:7f:71:05:4d:1fSerial Number (int): 265664890251441622734355890772989196979487
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:e6:e8:0d:2c:e0:74:e9:59:8e:d8:46:66:ab:bf:cd:8d:19:71:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ca:4e:96:d3:4f:cd:79:61:cf:2b:74:64:12:bf:79:47:a3:82:1c:6a
Fingerprint (sha256): 4f:73:59:00:81:c2:d2:39:12:ea:1e:00:d5:66:65:4b:4e:c1:85:4a:de:df:0c:56:6b:8e:12:b6:9e:43:5f:5c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mediacent.africa
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mediacent.africa
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mediacent.africa
www.mediacent.africa
www.mediacent.africa
Other certificates including the domain name mediacent.africa
(limited to 100 certificates)
Certificate
The complete raw certificate details for mediacent.africa in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAwy4DLsTFn/tKJLD9X9xBU0fMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTkyMzI2MDRaFw0yNDAyMTcyMzI2MDNaMBsxGTAXBgNVBAMT EG1lZGlhY2VudC5hZnJpY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPWkDyBeY/Wc0j5eHfjHMHp5mrAItyAh71D1KfcRNp7xiCfDqApHn0ovmWPptg C3aPPlsyhDb6M3WuosjMKwxL7WoPO2lHpcyU0vhHciW+4QvAT+eSlnewm2cNsvrA ZFAmgK4iPSsjDMVYE+wD4aN2ghmhO682uJieOecfFgphiAjXcKuWRdF+FIUNLuc2 bVjRow/Qu87ThlcTsVN4mjrpsbuarvA4E2JXhrSCmxzskCVYTM2YfgefVsu7PWrh jXOm46b7IpeYlQmpxwCQQcFCOINm7VCacQ3wEd6B/tFCagNy8h6i35SgoWBFIZZs +csNx1ibtQ77B/bnMV+77JjtAgMBAAGjggIoMIICJDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFNjm6A0s4HTpWY7YRmarv82NGXGzMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMDEGA1UdEQQqMCiCEG1lZGlhY2VudC5hZnJpY2GCFHd3dy5tZWRpYWNlbnQu YWZyaWNhMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGL6h67jAAA BAMASDBGAiEAlmYogc8DBm03OCj8KZC3aeLgB4l7c/4jIpFS24M9FwwCIQDq4OzJ 4QItNtwICuTwa7IpWHAefrzZFDceMt5H4z6kDAB1ADtTd3U+LbmAToswWwb+QDtn 2E/D9Me9AA0tcm/h+tQXAAABi+oeu5QAAAQDAEYwRAIgXKOgnPorcTyIEz7zXCUT whdLVULsynGalrVz7bNFiNACIGH0j2XsSjziPc3v4JoOT7m1TdqiuZf6+tw1wvHX ccwrMA0GCSqGSIb3DQEBCwUAA4IBAQCsKv5zKVFUlkKtxR4AtuEqRFRb5PnP9pLz rcyD9Ku+hI8yO8zKM3tIi0lX6lW1B1H0uw95jyz9cRAnY7HWHwiP7RwTdJOkBIsE JTi0XXAbYKGgQYfSI4yxNyOdAnPzml1MVka+RJLmb8zEIy1UVbtSSvwUHzxcLJdt 2m0FI4ap3uImSnPoCUFjQ9+Y9LxmN3EhJvUd/WW3XeEKkYwnLBAIpGACBXsU7tfV Tymx7ZAtTc3zQFQjzHUrlgHbfCXvpB5FwDB0LTB6Nu/ZBWHtOnIR1o+pQbAaQ6kh 76egNF1koCPFiOgISgOmh1MvtOOidM3yFbUhhb3VscPEPnnWKdAe -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1pA8gXmP1nNI+Xh34xz B6eZqwCLcgIe9Q9Sn3ETae8Ygnw6gKR59KL5lj6bYAt2jz5bMoQ2+jN1rqLIzCsM S+1qDztpR6XMlNL4R3IlvuELwE/nkpZ3sJtnDbL6wGRQJoCuIj0rIwzFWBPsA+Gj doIZoTuvNriYnjnnHxYKYYgI13CrlkXRfhSFDS7nNm1Y0aMP0LvO04ZXE7FTeJo6 6bG7mq7wOBNiV4a0gpsc7JAlWEzNmH4Hn1bLuz1q4Y1zpuOm+yKXmJUJqccAkEHB QjiDZu1QmnEN8BHegf7RQmoDcvIeot+UoKFgRSGWbPnLDcdYm7UO+wf25zFfu+yY 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265664890251441622734355890772989196979487 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 23:26:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:26:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediacent.africa' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26175834882734070898609691177373387304745800842646182026113503082887670877754534241975285056076402624620949561125501010189631888286330884772577207101376981497088763004565622094028057196331295052783083763248240537910369425731952249858919444567771597269204008205797124265890569506807059711582332343283140594368953620486866842360242509196084704907251567438846652198371632794070632689921131606973496463531429551981289588803731472337422612620882649742702896699214353855355689332198841631877479453904034986951523184476667498539620727276936103554947500279687394757821088977794427125402555118033117736137399682056708913141997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8e6e80d2ce074e9598ed84666abbfcd8d1971b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediacent.africa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediacent.africa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bea1ebb8c000004030048304602210096662881cf03066d373828fc2990b769e2e007897b73fe23229152db833d170c022100eae0ecc9e1022d36dc080ae4f06bb22958701e7ebcd914371e32de47e33ea40c0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bea1ebb94000004030046304402205ca3a09cfa2b713c88133ef35c2513c2174b5542ecca719a96b573edb34588d0022061f48f65ec4a3ce23dcdefe09a0e4fb9b54ddaa2b997fafadc35c2f1d771cc2b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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