rplayer.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:75:6b:db:0f:d4:b0:b1:98:78:b8:7a:34:d0:38:74:27:e1 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rplayer.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:6b:db:0f:d4:b0:b1:98:78:b8:7a:34:d0:38:74:27:e1
Serial Number (int): 301293259554678743860162215242110795524065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:7a:5e:cf:a6:62:20:bc:44:2e:66:4d:0f:44:9f:ef:da:c9:ea:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:dd:d7:b3:d1:e7:58:73:63:1d:e7:5d:65:ab:08:03:b2:d8:98:cf
Fingerprint (sha256): 6f:fe:7a:80:84:53:28:a9:20:a3:7f:97:65:af:7b:64:f5:ff:b7:a1:39:77:57:32:ab:ae:37:7b:05:e1:51:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rplayer.co.za

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rplayer.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfblog.com
adultpartysupplies.com
bronyforum.com
canibuild.report
dramacafe.com
handson.vc
hcj.co.in.femdom.org
mobilebadassmechanic.com
mrzcoin.com
probaseballcaps.com.allphaseautorepair.com
rplayer.co.za
tocitizens.com
truhaiku.net.nywebhost.com
ubiquisense.com.lepusholdem.com

Other certificates including the domain name rplayer.co.za

(limited to 100 certificates)
modalatmaintowns.ca
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
rplayer.co.za
tenniskleid.com
rplayer.co.za
tenniskleid.com
mineralindependence.ca
bmu.co.in.rplayer.co.za

Certificate

The complete raw certificate details for rplayer.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OIdqCOXL6RbmskX5CBe
bJYx6pTKN2EOjqrxn7WjIjEKIQzMMAl43qd98TnHAJM3a025KZUxIGmMPdLjbp+v
TsnbC8kOMpXB7foH3ZYjgWlWVCB0JhSHB8Y/tD7arODSW2TtTxU1DeV8bhO+5UHn
eP2v+HdnVUIDlGaKL/S2oBnPmUXN5/kxnt5Lddu9RZfnkh3VBWTShy8jbg+qmehY
3S2FI7+zcanpxseedFzas11xlNRx2nJdewA3jZ3l3v6AxX8tkyByjmWeo1mX9ggu
4AnLazO71CMmtBLrKjztiqWSbYZHY3bzanXsQdSXNkvpslYn84uihJ2qHqkhJnEz
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301293259554678743860162215242110795524065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 01:44:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 01:44:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rplayer.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28388882192209815237662061339749908619278125736195652683952742398142623610125631111828012791294133561702918813194933621229128492389134625603599552332263686908654393535603395830505740899348116394650269696061711950912264227369195205865668086026098830997929985540435430806677835525754438160770505894163279599130303004398911831488274751603521176570610669444768680833967783061302259911794255645587711796952755382286449873963966746798981762426242476459875962817215211069110594203838859946987890760711911949643405827513888169796122509254965085598390156948898302681116064190493164571847516221396429990575256809180395534889787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a7a5ecfa66220bc442e664d0f449fefdac9ea71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultpartysupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronyforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handson.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcj.co.in.femdom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebadassmechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrzcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probaseballcaps.com.allphaseautorepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rplayer.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocitizens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truhaiku.net.nywebhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubiquisense.com.lepusholdem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c75a8e741000004030047304502206baa755253a7dec3c9f8a9a7ec3ba78aa141cd90b674625058c7a09bed43b5f1022100cf0b0f4708249275ea706457dfe090a46a9607959986ac481caaec7745ea20e0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c75a8e75a0000040300473045022027694a0aed6a2315711bbd4ba252babd4007841f6886be5bb74cf09e2a9db062022100c7087c0b3130496b374a87f864d2876710d9a3f352455e082df7b5b0715ac76c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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