sattv.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:b6:b3:a6:f0:fa:e9:da:ce:a8:42:8f:29:68:e2:4d:16:9a was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sattv.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b6:b3:a6:f0:fa:e9:da:ce:a8:42:8f:29:68:e2:4d:16:9a
Serial Number (int): 410619333126833523693461274197981292992154
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:fd:aa:04:f9:6a:d5:31:d1:f1:6f:ae:0d:bf:52:02:13:b7:3d:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:65:04:42:a9:51:8a:fd:49:12:fe:7b:e0:d3:55:53:97:ee:c6:f9
Fingerprint (sha256): 5b:f6:51:df:a0:41:14:5d:6f:9b:f1:5d:c6:e2:5b:34:af:6b:11:5e:5e:e0:ba:02:fd:05:78:3b:cf:0d:45:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sattv.co.za

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sattv.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annuitylumpsumpayment.com
bcnnonline.net
bleachfr.com
brandonlawless.com
countryblessings.com
fizzletreats.com
foshancity.com
gear.hacker.rehab
higganum.com
isabellasuplicy.com
ldk.co.in
milliondollarphiladelphia.com
mrharris.buzzank.com
mvm.co.in
puppybasics.net
republicanphoto.co
rowdychristianmedia.com
sanantoniohomelinks.com
sattv.co.za
spacecraftomnibus.com
texaswomendirectory.com
www.goafricafestival.com

Other certificates including the domain name sattv.co.za

(limited to 100 certificates)
sattv.co.za
adjl.bodi-mul.us
ladyboys.ca
sattv.co.za
adjl.bodi-mul.us
sattv.co.za
sattv.co.za
showadvertisers.com.sattv.co.za
sattv.co.za
explorerlabible.ca
adjl.bodi-mul.us
rollupyoursleeves.ca
aklc.sgmworld.us
adjl.bodi-mul.us
sattv.co.za
adjl.bodi-mul.us
sattv.co.za
sattv.co.za

Certificate

The complete raw certificate details for sattv.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzue2JFA/1ISxPddlXUrn
6oWHuYzJE/jCAuQn0tFihaT7mSMH6ApRfXSgZ8HPWmFVRBlKgmpZttgYp6YWbqF/
VW0BlO5aHUWLxAAAAE5iPsd+0RB7EbR9ie2efnunS2lzvv3T4b0/sYouIcbEbq5M
LuLP479iAKm6LX32S7HeY2oRUKQAOvrwrlTiTTaL3CAIj0d0wiA7ccDZe+ZhRVyD
4lnVCC0m5wDhh9aJQ7JbpBzVR6T5ErH7f1970JJbKuEfZgu0O6ZLOYNC5ueyjAIB
8NEfu3BJwv7C1OdbUe4xyRtdoMVt6COw5U+kShJihOrVrjc3chc09AFumvh2eSmv
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410619333126833523693461274197981292992154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 12:17:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 12:17:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sattv.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26119352018088918433870761945701339878707831263891366752260920575031574046320248245982449035522204852589165001578380254494718195871468078512357317951421753541946307828540645241533564422180048626941720267052347658477118498999747177516498366379969232589659098614370538431180792980278405536403082010402263439439239102238838509125163131687513848245831448754401969333823918676347490394099602754731198738345862843830580627063824290495622816155818425763266259750964727556121791561656572631925757419918020363296329475010755563659273404266406898127900155993042073903189190052028250658016400603826935860607039585466647625445219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28fdaa04f96ad531d1f16fae0dbf520213b73d79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuitylumpsumpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcnnonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleachfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandonlawless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryblessings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizzletreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foshancity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gear.hacker.rehab'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'higganum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isabellasuplicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milliondollarphiladelphia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrharris.buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puppybasics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanphoto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowdychristianmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomelinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacecraftomnibus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaswomendirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goafricafestival.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f9b4cd1ee00000403004730450221009cf4a70812a9fbb231090518094d888da99bcae65d4c47fbf69d67f50e7eb65d02202ffde7ca0bc2d045d301598dbed6ecac78c0af6de64c5396986b7954ff6f3af1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f9b4cd91f000004030047304502202e3e80b396743926b2ae89565ede5273080340d88b869fa94d1e7fcecd7175f9022100c47a8733450262192c8c2cad003e5bc0b11a047842d5e9487e4810a1f37713d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f5965e338c51adc9f6f8015dc8c1253588c7192e11abfb4ff018d4c8a2ab262182e966ce959981ba1b1d787b5303d482c0eaefb3f7b39ce4583d417ef9e3734ee7078d1a1f3baf06fe3ef2778c15d98d020860d1f69bbab7378bd4201eb2509a657efd296a4e8d09ea9fb116cf5fc6c9a744ebdbcd3556049975cbe0c40e7f5708b860896485f5d1721122fd4109c29348aa92f2c523426db883922a423ad10d18a06ef5b12058e089cbcecae402fcc0b1dd01dbf31c6560df70a1077440cbb7beab4e5b679a4ec344b6e9f957a49ef4a14ed86d7e2e95cca8924dda55e242a5b5ab54cc22a3d8e72f25f12a3d680d83a419ce63145f5d585e69f198073a7e8