sanb.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:32:a1:3d:f7:53:b0:cf:98:e1:b8:d4:9d:5c:08:17:e6:9a was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanb.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:a1:3d:f7:53:b0:cf:98:e1:b8:d4:9d:5c:08:17:e6:9a
Serial Number (int): 365677589526903481761670474630057579505306
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:bf:4c:b1:91:cd:5f:c4:ea:cf:50:a4:86:32:7c:27:a8:88:3e:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:82:8b:a3:e8:8d:4c:0f:a3:af:de:a2:5d:3e:cd:0a:9f:86:7c:cb
Fingerprint (sha256): 57:5a:b1:e0:6f:31:e7:c2:c2:88:13:30:86:60:75:e1:17:fd:d2:a2:6d:24:df:50:a5:13:e8:a7:4c:6f:df:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sanb.co.za

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanb.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1010lotto.com
bigislandproperties.com
cutewho.com
dyvergacademy.info
efiling.org
etise.net
flanaganleague.org
friarspoint.com
gayexpats.com
geo-science.com
greenwichhotelnyc.com
howtocheckforbreastcancer.com
ladyboyindia.com
lawphd.com
left.com
monstrantviam.info
peaceweaver.us
petparade.net
portofhelsinki.com
sanantoniohomejournal.com
sanb.co.za
sanibelestateplan.com
therecyclingplace.com
trueamericanmediallc.com
wpblogwala.com
wwwwww.geothermalpowerplant.com.enhancedgeothermalsystem.com
xbone.co.za
zinnia.investments

Other certificates including the domain name sanb.co.za

(limited to 100 certificates)
sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
modalatmaintowns.ca
freedecisionpackage.com.sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
nadinewestgate.ca
sanb.co.za
revivedpro.ca

Certificate

The complete raw certificate details for sanb.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48p+biZ8jqb2XwQWu2Qx
tk2OyHMlvrwMKpIym0eTli5Ch2oHd4SuUvnKb9CtHFhRPwVyGdFMlvMnweGNfnw/
5sczsAbObeYA/e3MYo8TN5K2V45sTGwz+OUsImM2ssbMKHmtfRr+RXCplzWGQpr2
LkUwT+3X3ggqR2YSvPhNiQIek47CG09+hqdlzcGXcPgF7fwohR+9AAIhT/cDScpl
ZdRp+8RwLSHHbZvenC08mVU/nbfqraOAzI8mnKWPa0Y4fcVIPgMRdcGkeRbU3GWw
9af9vN2UngfX7r3hV09bNrdlXz9QuLdDLn7n5DRmCCK7bqkV/xEsEoouF610F90J
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365677589526903481761670474630057579505306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 23:03:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 23:03:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanb.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755948675323668589832081323706948681910596432007800274313116633337180936293835367715193676138694417197443303279228243768497106726589569356538521543695358864409845542358810600335350695345500934349635930814700268952687043067529045309130688630856123844475037089604529437026657532308732635848522090303837403455402433615605880792718142881074657244779762024642535025153423232729709857008375584648894960230880125032888897903086455402724307436754725127784480265453160072413729378716306770005249485053900245019443523310348528760787445760404085385220407288946106002122912429598730986458518528899848481392277259462995827558831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4abf4cb191cd5fc4eacf50a486327c27a8883e51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (557 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1010lotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigislandproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutewho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyvergacademy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efiling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flanaganleague.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friarspoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayexpats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo-science.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwichhotelnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtocheckforbreastcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyboyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawphd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'left.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monstrantviam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceweaver.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petparade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portofhelsinki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanibelestateplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therecyclingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueamericanmediallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpblogwala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwww.geothermalpowerplant.com.enhancedgeothermalsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbone.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.investments'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e72eb022e0000040300473045022100ad6a2a9551461e8ed404fac0b1ba7cf1f59a96b5f41eda55a4f43d45a92fcb040220468b9a78d84d1e37b231a327c9aa11319126a227d9ef5caf7761b6cdb95c1d9a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e72eb02400000040300473045022100ddbb60122135e5c6bd79b9bc023380294cdb5df4fb824916e1a41c8622aefed6022008b1facfca77a23d68509bd37ac7e163b052a5c6a9cf17e3e1a1a39864c9c37e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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