nfttheocracy.com.qdd.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:d6:c2:e5:bc:7a:21:5a:4e:e0:3a:48:66:6e:0a:64:72 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nfttheocracy.com.qdd.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:d6:c2:e5:bc:7a:21:5a:4e:e0:3a:48:66:6e:0a:64:72
Serial Number (int): 402158942089921344384739221738995445294194
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:8b:8e:c9:b5:e8:8f:e8:af:23:37:15:10:c0:95:9d:90:fc:05:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:ed:ea:35:a3:41:1f:c3:16:69:d9:ec:59:d4:ea:c8:02:0c:12:ad
Fingerprint (sha256): 63:70:15:22:13:d1:be:ea:bc:f7:88:98:62:5b:78:e9:df:1e:ec:57:9b:95:d2:14:13:0e:8a:a0:80:ea:15:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nfttheocracy.com.qdd.co.za

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nfttheocracy.com.qdd.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1usp.com
3wheelerforsale.com
deannewton.info
diskret-ohne-rezept.info.rilassativo.com
dont-get-zapped.com
masterresellrightsproducts.com
military-biodefensevaccines.com
nba4vip.com
negativearbitrage.com.worldgoldbullionprices.com
nfttheocracy.com.qdd.co.za
nutrishusfoods.com
qrflyers.com.yellowmedicinecounty.com

Other certificates including the domain name qdd.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for nfttheocracy.com.qdd.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TNkLsbvtgxRBHiDV60i
hxvZmkyuZIakOaE0gFFZSUjbTRQC85mY6ZZwNZ2+fUaj0FN9MLbxm7ANabkukUwJ
F+nI8/A2ufldZvBS+kBu45+1ugeHxWyaqoBrqOm1h0q5KRzfoqkQlaay9e4bBtWC
Kn6BuWLDgkUf6LCtR83YdkhSUkfMUUIl70ZUbi99B4Z4ac8xKIWbpMMngN6TmTpf
O9Ik5IATGIw1+HakPCrU2/iJyh06t19rQwF66P5ANa8yNBzgKqSNS7QuvgytFUGR
kTXiY/9qsQAPrjhLf7mHaF16GZaFthvaKSBQqJlmJMaBuCjNvNoALiKUy2g2JjFD
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402158942089921344384739221738995445294194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 00:00:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfttheocracy.com.qdd.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26409147751559493276315664474642462623676168467830641078330114934377570712761923078447105974901288727697510918754673572226201648221159438056993487204827109302556522524852733155847057829642324482824761108025996074691002209258850073787975205677512896701999643324538907362632682536600765699888171923420713890195851123941505310941130467772033046166105587527842748054394279084545348804186568781255209686134425442802082289928767001266353749268832325269144045791039095513778822989201844518436170268046098521001117686977300713385079215361173154339925337650012460840159371116305351365338151768385406162458120528445411624567603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c28b8ec9b5e88fe8af23371510c0959d90fc0522
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1usp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3wheelerforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deannewton.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diskret-ohne-rezept.info.rilassativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dont-get-zapped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterresellrightsproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military-biodefensevaccines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negativearbitrage.com.worldgoldbullionprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfttheocracy.com.qdd.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrishusfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrflyers.com.yellowmedicinecounty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c7f970da40000040300473045022060ff97dae4fcb52ff906119497b2321f8e4a82bfae411d29d1902769b1ad56ad022100f4b469f4e4288d1fabb780592d34fb20102423844a92aed79a8f32fbac50076b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7f970d96000004030047304502204169cf82e6da98afb30cb57e5b2fdf8ae7d45ed8316aa003d81437f784642d1b02210096c69891570d0a3bd6c94543a1410ddf7755432b33d5e9669332eed53667a673
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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