secure.chmip.co.za

Issued by Formidable CA Services Domain Validation

About this certificate

This digital certificate with serial number 7e:2a:2e:fa:ad:8e:a2:c7:89:ff:2a:5f:df:dd:d5:99 was issued on by Formidable CA Services Ltd..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.chmip.co.za,OU=Domain Control Validated+OU=Hosted by Formidable CA Services+OU=EssentialSSL

Formidable CA Services Ltd.

Organization: Formidable CA Services Ltd.
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:2a:2e:fa:ad:8e:a2:c7:89:ff:2a:5f:df:dd:d5:99
Serial Number (int): 167701756788553602158895853277141652889
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0a:8c:7a:17:55:30:18:37:95:1e:f4:47:a7:4b:79:bc:55:99:5a:08
AuthorityKeyId: de:39:b9:a2:6c:8c:63:01:d5:f7:5c:12:95:70:37:6d:2a:2d:a8:6f

Fingerprint (sha1): fc:9a:e6:2f:f8:b1:37:82:17:48:04:ee:a8:05:01:3c:c6:30:2d:56
Fingerprint (sha256): 66:1b:f5:a2:e5:2d:33:5a:58:e2:ff:b5:41:b7:3a:27:0e:b1:b9:c2:d7:db:29:b7:48:ed:87:07:a4:9c:4a:99

Issuing Certificate URL: http://crt.formidablecaservices.com/FormidableCAServicesDomainValidation.crt

Revocation information

OCSP Server: http://ocsp.formidablecaservices.com
CRL Distribution Point: http://crl.formidablecaservices.com/FormidableCAServicesDomainValidation.crl

Check the revocation status for certificate secure.chmip.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.chmip.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.chmip.co.za
www.secure.chmip.co.za

Other certificates including the domain name chmip.co.za

(limited to 100 certificates)
secure.chmip.co.za
secure.chmip.co.za
secure.chmip.co.za
secure.chmip.co.za

Certificate

The complete raw certificate details for secure.chmip.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3D79KEm/+CrEac6i+Ey
N3rf6WtspIMUTB2NrSolNzj7XVZwdBcLYRV2yes8qLMxjNxZOy6Q2SHTg3cLVOCR
pQhTdiIVG9VcxEjDrMPu7iPEVoEbCEea8q4RnqGyTTNjDGE5uGYRVTMMaB6fw5I8
TLLp2bDm9JtDWFKpU/Y1NW4oT+w3Xj4ETtYX+KuAP4C/00hWR7LGFacD4vc6Jb/2
qel4TffCcDTP6ftAVYZSpO7HQdYBj59+GFy+GQK9eu8ly9Nlj7TIyc8djATkPCUM
wZEUchid9G3tAxGeUkFslRra/ABcAPZdxbrwLloyZ285SPcXHAkpOiPsPtgVwFWt
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167701756788553602158895853277141652889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Formidable CA Services Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Formidable CA Services Domain Validation'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Formidable CA Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.chmip.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24672184054652128551409428332676272651262193641381902270009577284697973842124563079884694167684662630000518207919018623353226919830409038422028081969708886626189082212653037942119843615659687890727134241310229072011970433436377546137089049936369171111169012567984003654205825514646342408582087280658639385208370533897466471877317891953628306294532349066776011748900417489892563155445409250001833316134444552272329813034287610547219794742507468068669049175355964809291984753196424122978196444978060698815663356856891176768270547591093418070545771386105247585482985421562176392942011311850424672386340599272167074803123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName de39b9a26c8c6301d5f75c129570376d2a2da86f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a8c7a1755301837951ef447a74b79bc55995a08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.39
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.formidablecaservices.com/repository/Formidable_CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.formidablecaservices.com/FormidableCAServicesDomainValidation.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.formidablecaservices.com/FormidableCAServicesDomainValidation.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.formidablecaservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.chmip.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.chmip.co.za'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e370ea7834e8f0d9f7c5db3a79e68611e00436ab533906fff7e3c9ec2d7ff3ea624c2937ea62c19068f410eb3486da0c5c0d70db3a248e427bd8eec07c5416e0b47d74b925de8cee0966750f70987cd83a74876a174995b90d50247e18615927e9d75672fe0be80a61a1b279c50f6d248608753e127a885f7c8ddda8df6cdd1b665ece105ea06a4278fd7e69f377192a14ec6031ce5decf1eea1c07d1675314171cfd534f56283eab75b4d47eb4704f02fbbc5f85536559ff00ad5e6876cfbacabc9a19bf58002eac9bceca6d303dad4c75d6fbdfbcfb678ac22801d8d4a64fce016923625ce1440878a71fb92846ebcdf4b59dc10fc60b0970e63f41709577