zan.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:94:5e:52:16:b5:6a:00:36:1d:56:ff:d4:fd:6d:ed:77:79 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zan.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:5e:52:16:b5:6a:00:36:1d:56:ff:d4:fd:6d:ed:77:79
Serial Number (int): 398936307691872175489002208899443180009337
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 02:b5:0b:df:95:a2:15:f0:a1:8c:f5:81:15:d9:8b:af:a8:48:4b:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:ee:77:e6:27:fa:a6:7a:1f:b8:41:05:ba:54:0d:ef:57:b0:fc:a8
Fingerprint (sha256): 8c:b5:98:9f:fc:3b:42:72:70:65:a8:ba:dd:e4:2b:c4:13:41:88:fe:c0:24:9d:1a:72:f2:7d:d5:8d:ef:cb:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zan.co.za

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zan.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altlab.co
antelopemeat.com
appcard.org
aussiebattler.info
dios.tube
flowervalley.com
formalweddingfavors.com
gaytravel4you.com
gruntsgrind.com
hempf.com
hettingercounty.com
realtyarbitrage.com
saeatlocal.com
shereedutton.com
slovozaslovo.com
southburyrealestate.com
stadiumsvacation.com
texas-domains.com
tuberculosisvaccination.com
www.checkupbuild.com.au
www.enerpac.co.in
zan.co.za

Other certificates including the domain name zan.co.za

(limited to 100 certificates)
lastortillas.ca
saaj.co.za
zan.co.za
zan.co.za
danhenryandassociates.com.zan.co.za
zan.co.za
zan.co.za
zan.co.za
zan.co.za
zan.co.za
dallaspublicadjusters.com.zan.co.za
zan.co.za
norwoodwaterworks.ca
netoose.com.zan.co.za
zan.co.za
zan.co.za

Certificate

The complete raw certificate details for zan.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru1hlE1BAbjEkntg+SOl
iJYqNhf6chPgglzmEm9E2ZpGSMZDGCetx2808KfWPnXbkYkA7yyuzMLStw7Lo+1r
TnlktofVe5tQNkwpPFskPG0Zt60pOmhp6C9wTEDQ573GZ9U1xNkjm+d3S/axx5OC
mB5ByVmxrfSkAr3PgF6ILOtFzurLm9kESyCz9h6MWPgmUEvhTsDi4kDBo6l4UF4N
XRwYarXPEAWY2MGjL18EExjPSU4Oi0TGank/P3XgD2nSFlrKIaQ1yDEQ+IyiCjZh
sGA65GYe83ZD8SWTvxrujF5VjV4ACyKd6cc3L1Mo/TIHKFgUvpk9Jr8y7X8A1r4p
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398936307691872175489002208899443180009337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 02:20:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 02:20:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zan.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22082522081379545324704551433712543220052288399880968320695190052106930815921966506150106283440487630047105366613076284925441200211820584199286418054586838783000979159919525848352745301257852107223906054858468997923644641746237087994547325908269527726722106000219065225414188289435418359473662447603748927538749242589635656598010347979020506675899127708650522687978524245623467777413485254937814671618527082852813824987071902112263009042375597380038062648799731427655442453726420896527851010832223468743405396931092329424919444452142780642314328001622145687750272148193501166369102979931501112449487875421282712299941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b50bdf95a215f0a18cf58115d98bafa8484b96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (411 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altlab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antelopemeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aussiebattler.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dios.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowervalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formalweddingfavors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaytravel4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruntsgrind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hettingercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtyarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saeatlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shereedutton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slovozaslovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southburyrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiumsvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-domains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuberculosisvaccination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkupbuild.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enerpac.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zan.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dba3af5220000040300483046022100f0fb3f65ce31d5ba20e07b11edf81156db8f7d2768f764276a56a68e6c99c8f20221008b343ffaac258a4cebb57ce42958573b445b9e7d600eb348fe0282f70254387d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dba3af5bf00000403004730450221008536f7656d02cd46bf9a249069b4d1e9fbbfd17c59ea1bb3466bc442506120ee022047e7a9413f57b634919f1f5bbf7e98ed954abdfe8b796f04cbca5a90c926ca5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e09584d6bf03f47eed713dd16c48d238f4b2bce5e08cb1362c22c0115a4c5f73111cbd6aec1d7f2b29a7ab1bce1a77455bc8b3036874540dadb9311267039906c602784020b6923a34a9ad78936ce3e0676278aba4a70bb2d3ae591541c4a01521244edc13a53db6c59b921725431d19a824c83806846862600628e5de63888e0a02ab947ed4c8f6df45db60f282733063c8b6d7f0e85474d52ed427da5ab1e6f58bcef5de108c715a7f07d436b85664e75973a7f9fb85ee217269b2cb0e7f7cba43e64af53caefb68b91102b88e28ec1e030c880fd5e80337a8296df08aecfd5511b20cb008b9b054bb269426df4e6697e3baa9ce709ebedc5cbff271da3bd