saaj.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:d7:ab:0e:97:21:2e:c7:e4:22:97:f8:be:85:cf:c7:cb was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saaj.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:d7:ab:0e:97:21:2e:c7:e4:22:97:f8:be:85:cf:c7:cb
Serial Number (int): 344312145154852809480318913392727961880523
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:71:ad:22:e0:d5:5b:67:2c:d3:2d:62:75:85:3a:be:f3:03:4f:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:2c:64:27:33:f4:ea:ff:0c:84:5f:f8:ec:de:85:d9:18:e0:f4:74
Fingerprint (sha256): 8c:38:4e:fb:a1:00:3f:de:14:b2:59:86:44:4d:7f:11:01:a8:d6:dc:18:e1:ab:01:5b:8a:2f:7a:8e:b5:54:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saaj.co.za

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saaj.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berrienwaste.com
buyamericantech.com
eringeecomposer.com
featherrazor.com
formulaultra.com
green-company.com
passiveincomeforwriters.com
rxsugarsupplements.com
saaj.co.za

Other certificates including the domain name saaj.co.za

(limited to 100 certificates)
movedandsecond.com.saaj.co.za
saaj.co.za
theplaygroundcase.net.saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
vedderhouse.ca
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za

Certificate

The complete raw certificate details for saaj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLr+tbmeKcVSs78zmtV1
ojsXG+JA6kwrrVJBhbsBD4QnCkEVHH60iy2e08Xf0FUoVS9TxFbePdTL99wp5vu5
kvikWsZqV9c4cGwxzVYjqYmAOwiJGFW/XR1egiyg7Ly/JDZPJmMRA5oky/DY4J4e
5ogZQdICpvCK6wMXPQLlcgIXlI2AYauowFVRFxF3HfehZZ9P0m5eiHUltPw5LZtH
FhuSm3Ks8zgjmkvB/aq0j0/NWuW91v8bzfsTRlok/LxvDMoa1tlJ3TNYM4eBcYPq
/hmVThAdPcZb0eeZirvtEwDlOAhGh4xrkl3euwri7oozUdwuX787YJjolrB4dLek
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344312145154852809480318913392727961880523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 15:46:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 15:46:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saaj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22815105545604067388240746788918191374706670093902201805966965714615059338859637731421894348114306081836770316145244830860246874552700996538996230913256928352725154972277161563521380966148965017102353354293578531322431459683164200882266208010685766173180356264739314070264842646533886169769449561969613981934196173826683861462513273349730069890896411578863951895624156975519649282246505642929492028953497457802560068228880666494879852746789510285104405908127603020298584554637331891990571514687471921476697953956785692360406324324968413505195772279211313105013727140913402945552125305958721812780662239741267857089667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4771ad22e0d55b672cd32d6275853abef3034fda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berrienwaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyamericantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eringeecomposer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featherrazor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulaultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-company.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passiveincomeforwriters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarsupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saaj.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dfae95b780000040300483046022100cb6c5f92481c6aac865ac955d7df2757515e18f12c24ee2ff7230bab66fcbd98022100bf1998a5a32f409f120a005c82760c5921547d6b8dbfb00fb9c532f08c57020b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dfae95b9b00000403004730450220061d92f5bb1fb4e2e39e8411e40a0c529c335105a6293a2425a03c5ba70caa99022100990da2a2e9763eb5f75149048e4cb2fad9c3e7bc6c8af1217784b6db93068eae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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