esoft.co.za

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:16:d9:3a:b8:fb:91:ed:c6:df:95:c9:39:42:84:9e:84:ab was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=esoft.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:d9:3a:b8:fb:91:ed:c6:df:95:c9:39:42:84:9e:84:ab
Serial Number (int): 356224103179499553191096451476417553532075
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:c5:be:d0:df:17:66:82:05:6f:20:b3:a8:b8:64:e7:aa:b0:de:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:4a:09:91:45:cb:e9:80:75:f5:d6:bd:06:8e:60:32:14:02:79:6b
Fingerprint (sha256): 68:45:c4:f9:52:1a:d0:1e:1a:6e:7f:a8:07:f9:11:1a:19:53:9f:47:c3:18:d5:ce:ab:87:e7:38:cf:a8:88:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate esoft.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esoft.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esoft.co.za
www.esoft.co.za

Other certificates including the domain name esoft.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for esoft.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356224103179499553191096451476417553532075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 05:18:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 05:18:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esoft.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 595763654203099364542904525829271047677737325070580052050775696789199528885524580266238418572526640962755033032158269665030674185508939957496327539785873826955297969305939030334113320325331072705037584166500051227172114434122887161016034761067718285230197391670251929551782231503953692932622723465571495931700900940432512331888574755009708243277942514231820476098635968953737710573220498164314278005167211284368505496774410633800245466453640943112463190084880235308678722962712030455791185728598917086962860569885679304892710517711022040488893381191542526616352339794320980291860490813422372046785355724608707470186463136782029396672784237696836900359870398795626050173445025420294467675520326365984420417079941304901569304353234424383297633194538488855044132260148650895815223901302533828015285507795923170520930044886236796040166601320549878075109639830323987793696491906161168200075641783652092751816697250378038493708658937492028884691023188478672770874308675404358905893783679225157891941737597192553122939402556063500150856329516856871378969409812035206271480722649644414867771078188851023570373922636065527288560975943036048652980343790663583056227580915661493553470012405067452375651197369817450106311709990923675860354373451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7dc5bed0df176682056f20b3a8b864e7aab0de44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esoft.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esoft.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f88f4b2810000040300473045022100cc1c9bc735933ed759a51d1c127f9fa9b430bda44e8bb5be9851dd1449dcde07022030aaec914df7dc276db1ef2d61b31b7e548246afd597e7098fa936402717ce8500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f88f4b2a50000040300483046022100c91ab6d52e8def50480365847fb39472bafd688486a09f0926072282cd37ea4b022100bc189c0445c208e1fca03711638809d71a326701ce1ce8acf1d91232b65ad2a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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