gsb.mancosa.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:03:fb:26:91:2e:4b:96:76:3f:4f:ad:d7:ae:ea:de:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gsb.mancosa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:03:fb:26:91:2e:4b:96:76:3f:4f:ad:d7:ae:ea:de:8e
Serial Number (int): 340287658653671286646484388326170474241678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:1a:10:2a:9f:af:30:98:f3:95:e6:c3:f4:c4:c7:04:23:95:8b:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:b7:d6:1e:7b:a5:66:1c:1b:d7:88:15:42:05:30:af:82:ae:06:9a
Fingerprint (sha256): 61:4d:2b:60:b9:26:83:35:7f:b9:9d:57:60:f9:f9:1d:ce:b7:2e:8e:cc:5b:8f:a1:65:d6:26:ac:3f:35:54:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gsb.mancosa.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gsb.mancosa.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gsb.mancosa.co.za

Other certificates including the domain name mancosa.co.za

(limited to 100 certificates)
campionalumni.org
campionalumni.org
ssl276000.cloudflaressl.com
ssl276000.cloudflaressl.com
community.mancosa.co.za
campionalumni.org
mancosa.co.za
ssl83894.cloudflare.com
mancosa.co.za
skillme.mancosa.co.za
www.mancosa.co.za
campionalumni.org
enrol.mancosa.co.za
enrol.mancosa.co.za
community.mancosa.co.za
ssl83894.cloudflare.com
gsb.mancosa.co.za
campionalumni.org
ssl83894.cloudflare.com
ssl83894.cloudflare.com
admin.babydox.co.za
gsb.mancosa.co.za
*.mancosa.co.za
community.mancosa.co.za
www.mancosa.co.za
ssl276000.cloudflaressl.com
campionalumni.org
campionalumni.org
sni145963.cloudflaressl.com
mancosa.co.za
sni.cloudflaressl.com
www.mancosa.co.za
*.mancosa.co.za
campusnetzwerk.ac.at
campionalumni.org
campionalumni.org
mancosa.co.za
campusnetzwerk.ac.at
www.mancosa.co.za
ssl276000.cloudflaressl.com
mancosa.co.za
www.mancosa.co.za
campusnetzwerk.ac.at
sni145963.cloudflaressl.com
www.mancosa.co.za
campusnetzwerk.ac.at
campusnetzwerk.ac.at
campionalumni.org
campusnetzwerk.ac.at
www.mancosa.co.za
mancosa.co.za
gsb.mancosa.co.za
ssl83894.cloudflare.com
campionalumni.org
campusnetzwerk.ac.at
campionalumni.org
*.mancosa.co.za
ssl83894.cloudflare.com
enrol.mancosa.co.za
mancosa.co.za
ssl276000.cloudflaressl.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
enrol.mancosa.co.za
gsb.mancosa.co.za
campionalumni.org
campionalumni.org
gsb.mancosa.co.za
enrol.mancosa.co.za
mancosa.co.za
mancosa.co.za
enrol.mancosa.co.za
gsb.mancosa.co.za
mancosa.co.za
mancosa.co.za
campionalumni.org
www.mancosa.co.za
community.mancosa.co.za
campionalumni.org
campionalumni.org
ssl276000.cloudflaressl.com
campusnetzwerk.ac.at
ssl83894.cloudflare.com
gsb.mancosa.co.za
campionalumni.org
campusnetzwerk.ac.at
campusnetzwerk.ac.at
ssl276000.cloudflaressl.com
campionalumni.org
mancosa.co.za
ssl83894.cloudflare.com
gsb.mancosa.co.za
mancosa.co.za
campusnetzwerk.ac.at
www.mancosa.co.za
ssl276000.cloudflaressl.com
mancosa.co.za
campionalumni.org
enrol.mancosa.co.za

Certificate

The complete raw certificate details for gsb.mancosa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxMHwuFyhxxavwLzqJN26
244ijX0QUlgYyAYmNifqg5+NCpT/K9yBKamnuNlb3EQZ2+18nbE+7gkzO10B0Dw0
CGflO9/FaNQlsh9tBZmbYb+xUXUnzJj/avUqnUXRmv5002EK+aNkrIMnKRjelR52
ujtXXqvEe8MyRHHUVt3zDLhjNpGD5/yeOrGGqZDSlUDuAt9OkLFN24dWRfy8K6ZF
95fbenEj/C1GuIb/AorSssi0+qkeJM1s6MpgzIAFeroHwTjY8szFkldgyW+2J1op
iYs+gSpJ1rGkUmFXyI1Sbp0W4jt3YMKMrq2yB5f/r3A+lw0+YUXb+n3ks9iZmkpe
hp8J6ebnE98y4+3YSGcbt30sdDFF6DpjOIWuxoD0TKfUiOYXJEumMuuyn8vIrpce
VqpijkYffP4R5xeUA9YduWGdqNb6zUfYK1X1u0YlyQIyS0v7qd3aorHeKhq+McJU
EZvKtcu4TLml6aSllefXma4C0pqJ8mtKchbsgHqlJqygDW/95a4VunMTSlkz1oq1
hYPaCdkao+Jp/I30q3UHaOTGh9cwj8fNnL1oH8plfow4iinlMKJmRM3Grh72XpwN
8lNOXOP5j6k7quCXvxQqCMr+eF8zPLI46pk8waGkRSKtaBumVy7E9ZllSV5tinpr
2eCwmD+cM0TdDdzUjZ48+LMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340287658653671286646484388326170474241678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 23:02:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 23:02:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gsb.mancosa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802700891425872124062807821101972189168912025470349054787699807679282198521591244872414484065867163809686494214894907749963853294488476087921974390523257319082392525592743878721194320560272340386939406876268796313897777058965687798039566349127507267269893738284513712533238458765568745531351992002009957832086243031596996772162059279827015721538743142497747782832063799593568277299197133602813391203970256154064968503223446509864972456145891422500421987616827910577303507950604299717677734520092236725258357378378641152862996640625527291714429141225940680488817286923915968818616182714594329574088657834239080882462506161292710176629309327099207449678476834842188088081538564971393881422553863846222499135415891373960320139891045978190288830583181165467829989059671133639122954125441674672423561159160326665771051007569995689469406227219078842877137985095870091727867904990001438403969438966152822307419619998627113766068351815705434508358407870571996292172057275048099259415099295392084975350441967699792035538512624394830081552574259273772931526008644135105792793418013394828109176620931343885304323010008792445839228004827130658509110347584189595174903292404156345477418088581913217818243642401797907877533585115515258799568779443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a1a102a9faf3098f395e6c3f4c4c70423958be9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsb.mancosa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016da8ac81990000040300473045022100fd55746b95268a0b8f00087e2bbb389f8b406e05009d150e40f402cb68048d4302204953c867eeab9daa4eb25808071cf781f4911a032ee01f2a04e03429c6747fdc007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016da8ac83ae0000040300483046022100ecf82cb0e53e88daa0cdce3c0c8cd574b87b7e6959fe71e771710d43d1340a0e022100fd97ebfda2a6166a888b509eda61f4aff8e9ba826695917a791c8565710a25b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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