q8.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:99:4a:a6:b0:46:c3:c3:41:6c:e4:cb:06:c5:1d:bc:9b:a9 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=q8.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:99:4a:a6:b0:46:c3:c3:41:6c:e4:cb:06:c5:1d:bc:9b:a9
Serial Number (int): 313499288302461572650854272641656789179305
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:21:79:72:61:74:09:8e:a4:a0:37:0f:2d:01:fa:88:e4:b6:b7:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:75:dc:40:d0:17:5f:86:05:25:42:87:ec:e2:17:3e:ef:4e:cc:df
Fingerprint (sha256): 85:f2:32:ea:df:8d:4d:7b:61:4e:e7:a9:bd:d9:38:b6:3f:e7:15:ee:b9:a5:63:df:51:8e:ce:ff:02:f5:01:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate q8.co.za

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q8.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advoxate.com
boisechillers.com
brandorigination.com
champaign-tv.com
flappypegasus.com
glass-restoration.com
madeswealthyby.com
q8.co.za
secondstorystudioanddesign.com
shanecurran.com
spywear.in
swedencompanyformation.com
thecortlandcompanies.com
tiabeth.com

Other certificates including the domain name q8.co.za

(limited to 100 certificates)
pixelworks.media
q8.co.za
q8.co.za
q8.co.za
q8.co.za
q8.co.za
tv4.co.za
kvpentertainers.ca
americourt.com.q8.co.za
q8.co.za
q8.co.za

Certificate

The complete raw certificate details for q8.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8P5RhZfVPt7aJjslnBK
g6ySljiarTJOyehSBdLsyUppvsTAmpGxDknpzT1/QkmDN9ZCK9Csi9QCr4l41Q+D
TXHtLqam3BnMPRGgFqtdvZLaj2OTvHesbr66g550hduz7720sbnLVrXj0sy3yVz0
494LZtZn+HJrVj2OFLpFlaGNryC3hn6p5vNY+Cex6yibsEGQ5EU9FNrdErrri86O
lmV0Is1mvJkLoU72pyNu2qu3RjF5b4sv4WFNTPSOUIi1FrYkR8o1l1uFyvbihVNi
xrAlO81+2vIynljjDrgCJ23sOoT5LgOCSlwdOJBKTqNx9mEQkL3wd1GIrJ8cPs6r
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313499288302461572650854272641656789179305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 10:22:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-19 10:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'q8.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24713107714280225663822852581748884220404566937829062291177947959685144586459477097603198766633632357555972362625675670505124811481889172491808668409515706006235513333192827495198132317015814421858580778254187696271201428879875409341734798743161809711402146138340822152729197930811196392319373010810603461328565093819894320404993489735684598723277413605860725235640709846986180236087485121796409472712026804082368388794330127158120926502103019811249638151839647623293549879771024882466507517129512879393193766670449488055972488591560879375323589349509635293224846849892589419179743061806436136719098793805380796197741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e72179726174098ea4a0370f2d01fa88e4b6b763
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advoxate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boisechillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandorigination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champaign-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flappypegasus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glass-restoration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeswealthyby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q8.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondstorystudioanddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanecurran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spywear.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swedencompanyformation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecortlandcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiabeth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f9ae30c1d0000040300483046022100c11c18c2910eafd603112ad2e5f4e3f81d09b09d5d3979d348d0400675dcdbe7022100f4855809b8c791e6f0d92b7913af1360e20ae9357d263abf2bdbe703db5504ce0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f9ae30c7e00000403004630440220478c2e621d3a491d1fd71731e71192349f4313d36c37a9aeb9c091390f15523e022058f1583d6530d499f7c15b28b02ecf599b9d59e6ffd6dc66f93e9299fa3c3c44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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