nfttheocracy.com.qdd.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:9d:d6:c2:e5:bc:7a:21:5a:4e:e0:3a:48:66:6e:0a:64:72 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nfttheocracy.com.qdd.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9d:d6:c2:e5:bc:7a:21:5a:4e:e0:3a:48:66:6e:0a:64:72Serial Number (int): 402158942089921344384739221738995445294194
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c2:8b:8e:c9:b5:e8:8f:e8:af:23:37:15:10:c0:95:9d:90:fc:05:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ed:ed:ea:35:a3:41:1f:c3:16:69:d9:ec:59:d4:ea:c8:02:0c:12:ad
Fingerprint (sha256): 63:70:15:22:13:d1:be:ea:bc:f7:88:98:62:5b:78:e9:df:1e:ec:57:9b:95:d2:14:13:0e:8a:a0:80:ea:15:c7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nfttheocracy.com.qdd.co.za
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nfttheocracy.com.qdd.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
1usp.com
3wheelerforsale.com
deannewton.info
diskret-ohne-rezept.info.rilassativo.com
dont-get-zapped.com
masterresellrightsproducts.com
military-biodefensevaccines.com
nba4vip.com
negativearbitrage.com.worldgoldbullionprices.com
nfttheocracy.com.qdd.co.za
nutrishusfoods.com
qrflyers.com.yellowmedicinecounty.com
3wheelerforsale.com
deannewton.info
diskret-ohne-rezept.info.rilassativo.com
dont-get-zapped.com
masterresellrightsproducts.com
military-biodefensevaccines.com
nba4vip.com
negativearbitrage.com.worldgoldbullionprices.com
nfttheocracy.com.qdd.co.za
nutrishusfoods.com
qrflyers.com.yellowmedicinecounty.com
Other certificates including the domain name qdd.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for nfttheocracy.com.qdd.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgISBJ3WwuW8eiFaTuA6SGZuCmRyMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTkwMDAwNTRaFw0yNDAzMTgwMDAwNTNaMCUxIzAhBgNVBAMT Gm5mdHRoZW9jcmFjeS5jb20ucWRkLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA0TNkLsbvtgxRBHiDV60ihxvZmkyuZIakOaE0gFFZSUjbTRQC 85mY6ZZwNZ2+fUaj0FN9MLbxm7ANabkukUwJF+nI8/A2ufldZvBS+kBu45+1ugeH xWyaqoBrqOm1h0q5KRzfoqkQlaay9e4bBtWCKn6BuWLDgkUf6LCtR83YdkhSUkfM UUIl70ZUbi99B4Z4ac8xKIWbpMMngN6TmTpfO9Ik5IATGIw1+HakPCrU2/iJyh06 t19rQwF66P5ANa8yNBzgKqSNS7QuvgytFUGRkTXiY/9qsQAPrjhLf7mHaF16GZaF thvaKSBQqJlmJMaBuCjNvNoALiKUy2g2JjFDMwIDAQABo4IDTDCCA0gwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBTCi47JteiP6K8jNxUQwJWdkPwFIjAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCCAVMGA1UdEQSCAUowggFGgggxdXNwLmNvbYITM3doZWVs ZXJmb3JzYWxlLmNvbYIPZGVhbm5ld3Rvbi5pbmZvgihkaXNrcmV0LW9obmUtcmV6 ZXB0LmluZm8ucmlsYXNzYXRpdm8uY29tghNkb250LWdldC16YXBwZWQuY29tgh5t YXN0ZXJyZXNlbGxyaWdodHNwcm9kdWN0cy5jb22CH21pbGl0YXJ5LWJpb2RlZmVu c2V2YWNjaW5lcy5jb22CC25iYTR2aXAuY29tgjBuZWdhdGl2ZWFyYml0cmFnZS5j b20ud29ybGRnb2xkYnVsbGlvbnByaWNlcy5jb22CGm5mdHRoZW9jcmFjeS5jb20u cWRkLmNvLnphghJudXRyaXNodXNmb29kcy5jb22CJXFyZmx5ZXJzLmNvbS55ZWxs b3dtZWRpY2luZWNvdW50eS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3ivia bfUX2AAAAYx/lw2kAAAEAwBHMEUCIGD/l9rk/LUv+QYRlJeyMh+OSoK/rkEdKdGQ J2mxrVatAiEA9LRp9OQojR+rt4BZLTT7IBAkI4RKkq7Xmo8y+6xQB2sAdgA7U3d1 Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYx/lw2WAAAEAwBHMEUCIEFp z4Lm2pivswy1flsv34rn1F7YMWqgA9gUN/eEZC0bAiEAlsaYkVcNCjvWyUVDoUEN 33dVQysz1elmkzLu1TZnpnMwDQYJKoZIhvcNAQELBQADggEBAJYzRNodraW32NoB szsHRFeZZ3IaoJPvOEf5SZNtZzOhjlU9b1xjaWoz47tOyL7WVLSgkwGx+jzGaT2f ZegA6lHCJ6xVSCbR3hqiU5SrV8kgH+7JfnUqO9VLusrDo1gLdrgIHNIDqI9HnGoi LgSok3mvLaWJmWgSXEdYdk2f1P1l644kNWnJorMidN1JvABqtEVSV4T96n1ubVto G1manuAEQll+fW5rmooEDSrgmIeU3zedOd3KwAit34tJQ8nPr4fqrxMxN4c0JyNO Jwv8yLrM+DgH+rl2nQ4YLfejHp57zoDqKoo/NEr6JQrsf4hYuM/7y0Mjmlw2kGlu d7EVXK4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TNkLsbvtgxRBHiDV60i hxvZmkyuZIakOaE0gFFZSUjbTRQC85mY6ZZwNZ2+fUaj0FN9MLbxm7ANabkukUwJ F+nI8/A2ufldZvBS+kBu45+1ugeHxWyaqoBrqOm1h0q5KRzfoqkQlaay9e4bBtWC Kn6BuWLDgkUf6LCtR83YdkhSUkfMUUIl70ZUbi99B4Z4ac8xKIWbpMMngN6TmTpf O9Ik5IATGIw1+HakPCrU2/iJyh06t19rQwF66P5ANa8yNBzgKqSNS7QuvgytFUGR kTXiY/9qsQAPrjhLf7mHaF16GZaFthvaKSBQqJlmJMaBuCjNvNoALiKUy2g2JjFD MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 402158942089921344384739221738995445294194 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 00:00:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nfttheocracy.com.qdd.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26409147751559493276315664474642462623676168467830641078330114934377570712761923078447105974901288727697510918754673572226201648221159438056993487204827109302556522524852733155847057829642324482824761108025996074691002209258850073787975205677512896701999643324538907362632682536600765699888171923420713890195851123941505310941130467772033046166105587527842748054394279084545348804186568781255209686134425442802082289928767001266353749268832325269144045791039095513778822989201844518436170268046098521001117686977300713385079215361173154339925337650012460840159371116305351365338151768385406162458120528445411624567603 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c28b8ec9b5e88fe8af23371510c0959d90fc0522 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1usp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3wheelerforsale.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deannewton.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diskret-ohne-rezept.info.rilassativo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dont-get-zapped.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterresellrightsproducts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'military-biodefensevaccines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negativearbitrage.com.worldgoldbullionprices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfttheocracy.com.qdd.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrishusfoods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrflyers.com.yellowmedicinecounty.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c7f970da40000040300473045022060ff97dae4fcb52ff906119497b2321f8e4a82bfae411d29d1902769b1ad56ad022100f4b469f4e4288d1fabb780592d34fb20102423844a92aed79a8f32fbac50076b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7f970d96000004030047304502204169cf82e6da98afb30cb57e5b2fdf8ae7d45ed8316aa003d81437f784642d1b02210096c69891570d0a3bd6c94543a1410ddf7755432b33d5e9669332eed53667a673 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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