DV SSL/TLS Certificate for thedunesatarniston.co.za

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the thedunesatarniston.co.za DV SSL/TLS Certificate

This certificate with serial number 06:23:ef:cd:8e:25:80:f9:69:47:c0:22:e2:07:6e:c0:fa:6a for thedunesatarniston.co.za was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for thedunesatarniston.co.za provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:23:ef:cd:8e:25:80:f9:69:47:c0:22:e2:07:6e:c0:fa:6a
Serial Number (int): 534902351227716441966772608224666601978474
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: c6:53:54:1e:5e:45:31:b2:26:0e:02:3f:88:9e:2d:f2:1e:1c:0d:25
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): c8:12:65:42:df:4d:b6:dc:ab:f4:2a:cb:a9:93:c4:04:64:69:8e:2c
Fingerprint (SHA-256): 51:a8:ef:63:0c:7f:a7:88:aa:e7:6d:e3:5e:0b:4f:ef:9e:21:40:c6:a4:9b:06:3e:f4:a1:56:4c:95:1a:55:21

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/107.crl

Check the revocation status for certificate thedunesatarniston.co.za
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for thedunesatarniston.co.za

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for thedunesatarniston.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U/D0JlwXgpKYeT/KAZX
2LbOPcNEaMDQVcS6/K7Jv50vZkd9LJLiLbeBgYvWx3n7H2sq0F51e/sTKiRM9qQw
UTPWO2Fg5Me45mEIeIvH/GtgJ9djAr0Ta0/6g63PDX3y9oaK2K6nxVDddwsKZham
xSqDECf5sjWpkWsZheM+Gxrxo2xQQ3O0LcFNZCKkhsha/Ha8bxss/UklVIEkuHN/
/XqYfn9OXvgk8IBqzvO1nlJP+lrJwg7ZjsjBkvEbDTPfEKTm4qAfOB59k/WrMzGC
Dd1mdidLiJm2PH3DGgFJYoDBxYsst8i3dEFr6RLxsqpWtrFw0iGBXXexluhfLfPg
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 534902351227716441966772608224666601978474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-15 16:49:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-13 16:49:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thedunesatarniston.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27937998936520035731315130225721284949540394764561461429529564004984667814821393167073286780758240502967630045344194540610043078357956815105909991158816193141725855313363875145043252690997786700651940639611383417494560671188489199656313306920725714210657796878814754370057142331534250162956566770819929744514034616453223859535452807393073116226572426506495427940507635920242339143704216007898846407845187430710657066835226627604094512519824140676399325080127271218957326764122901757882817949113183271336879714005103310503265162543645880846753195806502208587926779817458070701485017951521583739901952035568934030925853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c653541e5e4531b2260e023f889e2df21e1c0d25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thedunesatarniston.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedunesatarniston.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.thedunesatarniston.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedunesatarniston.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/107.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a8454000001980f333869000004030046304402205c0728b4b1a93d050712c7461efc907774b415e734ac54cae7b5091cfe793d9d02205783ebdf77d0ae8c1d5b620620c40091957476640c15043acc49de2b5cd2c64b00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001980f33387e0000040300473045022100810d8c6a2ab4ca995f054115c412e7f4fc7cedc54fdfe6b7e6b2123196a2636c02204047930a5cabd9b1fcdfb6eebf4e6f2d1da4a1a9322c57ab6228e7be50ec1b54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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