sanl.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:87:cc:05:bd:c4:f7:56:1f:b9:20:e0:58:ce:ec:6f:2c:c3 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanl.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:cc:05:bd:c4:f7:56:1f:b9:20:e0:58:ce:ec:6f:2c:c3
Serial Number (int): 307546169651212529877454046801759703084227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:61:2b:cb:d0:96:2f:12:71:f9:86:56:8d:89:e3:18:63:ca:49:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:25:9a:fa:f9:0a:81:b6:80:76:48:69:a1:6b:ba:0e:ba:1e:3d:d8
Fingerprint (sha256): 82:c0:e2:e5:83:61:b9:93:0b:94:56:5c:bd:bb:5d:6b:96:21:30:15:0d:58:28:f2:27:16:55:76:88:74:67:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sanl.co.za

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanl.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agencyforvip.com
buildmybase.com
depressionfederalreserve.com
divingequipment.online
highscale.in
jaipurdentist.in
lgbtqassociations.com
love2hempyou.com.hexaspark.xyz
pedodontics.in
privacyreports.com
sanl.co.za
streambankipv4.com
studentfreedomassociation.com.priyadarshni.in
texnetsys.net
wiki.silevis.com

Other certificates including the domain name sanl.co.za

(limited to 100 certificates)
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
gemalings.ca
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za

Certificate

The complete raw certificate details for sanl.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj+MGl3tHb7bdW2cdZon
oPIVcdocW1nKS4Qv/WszcW9+kPfK3CgMWHdhVMeIToFVgiwFAkV4DPnymcdlUftq
cdrIoMQpWzplP0Ue5pH6F+caUEUtj/r7IghkVBtzpQO25FylEjNubhqvcEwntZt8
f0vS02A1N9i4oY3t/quSudd/p3IVKMgl2i7AA9nhgV1Iv2Q8B5aNfWDP5Udhd7Vl
Fo+4HlPz1XcQ6DQkZDmPsrR7sqTiV78GuuOGGDC4JVeOYMCmErQynahtWVZ2we9l
tSlr9Mff/VvctWmY7PP/Zd2eR1Q9Y1BjBz1PylWxw8mMGA8+uwNNPu+JnmS5d44f
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307546169651212529877454046801759703084227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 02:19:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 02:19:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanl.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21491848174600914659170962514389244449003943595295117314137455169282282198399720836074820295754959360239151599347763690329371041836497525940152265119865355131211379096060918888313470343038292646002658311326421663948681399303087089046191963671053288380571252350472231534530746874069106571750532124270018691080733352022177955893611472727784250044938214805641522027876637310095987877844589498001260601406925112938540132285245943481197513441161989357293358934999482436185217860591033837379594028757661729929669233175859892074030625006337529507699485710376138087553912902779752146715576672080916849450132855518249792446329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6612bcbd0962f1271f986568d89e31863ca499b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencyforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildmybase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depressionfederalreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divingequipment.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highscale.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaipurdentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqassociations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'love2hempyou.com.hexaspark.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedodontics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacyreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanl.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streambankipv4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentfreedomassociation.com.priyadarshni.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texnetsys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.silevis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa64d521100000403004630440220481e074d2f6b226fe45e5748edff710bc6a72c260e8bc2633804366f89145110022043619754ff7be6b7ccf7c6adeaea07116c3ac80017c27b8c68fda30907f693a0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa64d522c000004030047304502205d3a255155e6f7ee68db0d061fcbf84775d9a5572dbc9083f3663b26713e5497022100b8f2610aab567bc1346a87707473224ebb18cb073bd9a9bfd3a6f16fc4014035
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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