truehorizon.co.za
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number a0:fe:a9:5a:b2:67:01:b9:b4:af:96:8b:0c:c6:29:14 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=truehorizon.co.za
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): a0:fe:a9:5a:b2:67:01:b9:b4:af:96:8b:0c:c6:29:14Serial Number (int): 213998757640624888554001562332528257300
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: c8:f4:cd:f9:83:f2:d3:66:86:d6:91:3e:ca:d1:e4:9f:17:d4:e4:3c
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): c8:9f:e2:7d:3a:dc:ce:14:bc:1a:ee:bd:c0:bc:7b:fe:5d:af:04:6f
Fingerprint (sha256): 62:04:77:e9:4e:eb:95:27:91:ca:0d:05:ab:50:10:fd:f2:4c:4e:a7:60:78:d3:89:01:19:a5:49:43:5c:2e:86
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate truehorizon.co.za
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for truehorizon.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
Other certificates including the domain name truehorizon.co.za
(limited to 100 certificates)
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
truehorizon.co.za
www.truehorizon.co.za
www.truehorizon.co.za
Certificate
The complete raw certificate details for truehorizon.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIRAKD+qVqyZwG5tK+WiwzGKRQwDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0xOTAzMDQwMDAwMDBaFw0xOTA2MDIyMzU5NTlaMBwxGjAYBgNVBAMTEXRy dWVob3Jpem9uLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA t69RcDAMDydprEbYXqEclvLy3r+FP/fuRW7+c2VXR+0VAswR/g+wowOV88otxA9B WPSJDQkwwoTnv/mpxsE0BBQ2JDFVydTY96QQG1ymJVllYdNanepkbul0EHQxA3QG 6CEvrlHIxc4DtRAXdJgZCK3UIjlLcEWnLFsmqhy336belY4Viq1l2mTw6F3myycT Df8V8l0od1I4hPV2pTr2Ovgjt4pYUGY2s3zCIU2A4YwhmiWct/rhyOS/dI7LLiyg RtoeqY9ymtJfLtpdE3kLNPDmXI65YS/iAWAvgW9kXvF6WJ+bRNLUuygTKivE1ZwH nGWN7hi45I2B1Pmclo2KEQIDAQABo4ICjjCCAoowHwYDVR0jBBgwFoAUjYxexFSt iuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFMj0zfmD8tNmhtaRPsrR5J8X1OQ8MA4G A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUH AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUH AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp Z29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUF BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAzBgNVHREELDAqghF0cnVlaG9y aXpvbi5jby56YYIVd3d3LnRydWVob3Jpem9uLmNvLnphMIIBAgYKKwYBBAHWeQIE AgSB8wSB8ADuAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFp Ss0/UwAABAMARjBEAiBa6imI2I7qzupnQwQpmNuH0E2p9P8QzZsIK3XVqVx6WAIg NcySticfkeqaBBp7vsG36auw3e1O/o2T/VTrPDYDX6EAdQB0ftqDMa0zEJEhnM4l T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWlKzT+hAAAEAwBGMEQCIDXFYSjjFSOA9+mn O+YTGfuucSWrHvsDcD7SXfz5AvAOAiBXZOiK+Hlcl+/z4dNYJb/AfXQxfDXR+p6/ GiJw2NHRgTANBgkqhkiG9w0BAQsFAAOCAQEAFka1oPVjQdQBeRC17vcoamah6/bO +1SO0FdqSIgtAHBaHAq1go1jS159DsjRBghZweG6YgFcePYgHfHYjVM21eRG/rjF 8ve1VDbEqQ/gJQF6nmSPs3hVpWBaHRle2eveuQ5bJKq0//Ce0Tbsw3W8INCXTYQs oT9x7KTP8QksSLnNaIFMSBGnyNG1F7BvkZ7ujrzfWPFeYv6gzBaLT9QEuvXpZl1n YHULJAqS/jN89tTg8JRQDdLcDJK/Gsv1ardTXuGVeyeeVPtdBtr61XO0L1EdBMfv oniWouLG5D1SLcHqle5And0i99lSTmLQaUTkLQRLoXcuAzj7sQ2z+/GwHA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt69RcDAMDydprEbYXqEc lvLy3r+FP/fuRW7+c2VXR+0VAswR/g+wowOV88otxA9BWPSJDQkwwoTnv/mpxsE0 BBQ2JDFVydTY96QQG1ymJVllYdNanepkbul0EHQxA3QG6CEvrlHIxc4DtRAXdJgZ CK3UIjlLcEWnLFsmqhy336belY4Viq1l2mTw6F3myycTDf8V8l0od1I4hPV2pTr2 Ovgjt4pYUGY2s3zCIU2A4YwhmiWct/rhyOS/dI7LLiygRtoeqY9ymtJfLtpdE3kL NPDmXI65YS/iAWAvgW9kXvF6WJ+bRNLUuygTKivE1ZwHnGWN7hi45I2B1Pmclo2K EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 213998757640624888554001562332528257300 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'truehorizon.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23188062394954965267941490150682967859088189231642526518900487384378459311842063765957885242364199762629519268501432581254856063760788649934696295257967033131201678632695839413233371867096423505368788433438002820541037422081278402261321374356905481823289104490453564349058022560587791167752284235949733548363973173185984789474215258117107705745046286173721209160346986478365185319107392640918366257136681081000420495706065316521332294678520529748313705614790203808821910325558587203475796349826688150135556505346825928065145702537656197116710209693185179006906079708709484673151059453582604473472479190552454246533649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8f4cdf983f2d36686d6913ecad1e49f17d4e43c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truehorizon.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truehorizon.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001694acd3f53000004030046304402205aea2988d88eeaceea6743042998db87d04da9f4ff10cd9b082b75d5a95c7a58022035cc92b6271f91ea9a041a7bbec1b7e9abb0dded4efe8d93fd54eb3c36035fa1007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001694acd3fa10000040300463044022035c56128e3152380f7e9a73be61319fbae7125ab1efb03703ed25dfcf902f00e02205764e88af8795c97eff3e1d35825bfc07d74317c35d1fa9ebf1a2270d8d1d181 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001646b5a0f56341d4017910b5eef7286a66a1ebf6cefb548ed0576a48882d00705a1c0ab5828d634b5e7d0ec8d1060859c1e1ba62015c78f6201df1d88d5336d5e446feb8c5f2f7b55436c4a90fe025017a9e648fb37855a5605a1d195ed9ebdeb90e5b24aab4fff09ed136ecc375bc20d0974d842ca13f71eca4cff1092c48b9cd68814c4811a7c8d1b517b06f919eee8ebcdf58f15e62fea0cc168b4fd404baf5e9665d6760750b240a92fe337cf6d4e0f094500dd2dc0c92bf1acbf56ab7535ee1957b279e54fb5d06dafad573b42f511d04c7efa27896a2e2c6e43d522dc1ea95ee409ddd22f7d9524e62d06944e42d044ba1772e0338fbb10db3fbf1b01c