ketok.net.majesticdata.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:be:f3:f0:fd:b7:50:30:e6:3b:b8:c0:7d:20:c1:47:4b:39 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ketok.net.majesticdata.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:f3:f0:fd:b7:50:30:e6:3b:b8:c0:7d:20:c1:47:4b:39
Serial Number (int): 326314761210454032294113348238817974766393
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:c8:43:5a:0a:fc:df:e9:bc:2f:59:94:bb:86:5b:03:c4:7f:a8:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:df:2e:c4:b3:5a:b5:97:fd:f3:e4:7d:b7:d0:f3:4a:36:0b:37:62
Fingerprint (sha256): a0:74:c1:21:77:8a:be:f1:e7:54:e0:7a:20:3e:cc:fd:64:09:92:a5:ea:b1:c8:44:fb:0e:c8:55:3b:0e:48:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ketok.net.majesticdata.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ketok.net.majesticdata.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ketok.co.za
*.ketok.net
ketok.co.za
ketok.co.za.majesticdata.co.za
ketok.net
ketok.net.majesticdata.co.za
www.ketok.co.za.majesticdata.co.za
www.ketok.net.majesticdata.co.za

Other certificates including the domain name majesticdata.co.za

(limited to 100 certificates)
workdrive.pinkertonpi.com
majesticdata.co.za
workdrive.pattyk.com
majesticdata.co.za
sales.mplan.media
majesticdata.co.za
books.thedc.me
majesticdata.co.za
projects.loba.com
support.periodik.co
majesticdata.co.za
*.majesticdata.co.za
majesticdata.co.za
majesticdata.co.za
projects.loba.com
majesticdata.co.za
asaci.co.za
majesticdata.co.za
majesticdata.co.za
servicedesk.majesticdata.co.za
majesticdata.co.za
asaci.co.za
majesticdata.co.za
support.intellitechsystems.co.za
majesticdata.co.za
majesticdata.co.za
workdrive.peterkatzspeaks.com
servicedesk.majesticdata.co.za
majesticdata.co.za
support.oozou.com
support.periodik.co
servicedesk.majesticdata.co.za
*.majesticdata.co.za
majesticdata.co.za
ketok.net.majesticdata.co.za
asaci.co.za
documents.atte.design
support.oozou.com
projects.loba.com
asaci.co.za
www.asaci.majesticdata.co.za
support.periodik.co
workdrive.acd-inc.com
projects.extremeroofingsolutions.org
classroominabox.oneacademy.com
support.getdialedin.com
majesticdata.co.za
support.oozou.com
workdrive.acd-inc.com
workdrive.acd-inc.com
ketok.net.majesticdata.co.za
servicedesk.majesticdata.co.za
majesticdata.co.za
support.intellitechsystems.co.za

Certificate

The complete raw certificate details for ketok.net.majesticdata.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISA77z8P23UDDmO7jAfSDBR0s5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDYwNzAyMzFaFw0yNDA0MDUwNzAyMzBaMCcxJTAjBgNVBAMT
HGtldG9rLm5ldC5tYWplc3RpY2RhdGEuY28uemEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+QFmkC3iBmS83Pgkuc5vj90vSi8q/EqzpIATK2AUjwcoB
ATIPunqyDgVHx2tgfNqWw/AtxhoMHm3Dkla4BA2vONth7Kr3hlegfVuEMp1pkiQ4
aqi8s7TUGq0owfBV1I+DvQDvNN6mTOeSfzHE4nQY4hIzMohKgcBSjiLQ5TQUJ10C
L7+ET55Uiv0KwZ5um7SJMIH932R5Dl2Eu10y/5/v3674aEHADIxDTDWFFxSgp1Bu
fBXSrYcpc5LdjT4lMz8DuKmAF/zLcV6HkXjJ/hXPTq+agh28+be7sswU3MeFLpzR
XNhWAIedWNyqDnIsOmuy2zRI9IxPaFN3b2+V7ypfAgMBAAGjggK7MIICtzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFGLIQ1oK/N/pvC9ZlLuGWwPEf6haMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIHDBgNVHREEgbswgbiCDSoua2V0b2suY28uemGCCyou
a2V0b2submV0ggtrZXRvay5jby56YYIea2V0b2suY28uemEubWFqZXN0aWNkYXRh
LmNvLnphgglrZXRvay5uZXSCHGtldG9rLm5ldC5tYWplc3RpY2RhdGEuY28uemGC
Ind3dy5rZXRvay5jby56YS5tYWplc3RpY2RhdGEuY28uemGCIHd3dy5rZXRvay5u
ZXQubWFqZXN0aWNkYXRhLmNvLnphMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y
b+H61BcAAAGM3cuECgAABAMASDBGAiEA0sHazZJiIQr3lGaLfyRJSuw39ikb5lLN
sB68YlO0eroCIQCRNgsPaRmyqUnvSuwTZk2CWVet2L7f8AZ2Wei+lv1abAB1AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjN3LhwYAAAQDAEYwRAIg
WZFu061AoXKFcxiTPIkEeuDqqwihUUBXk7JcTq/Ws6QCICpcV16QBmnl8o83Uuu5
M6DN4yZ33cGtrXJaYy8Jy8YOMA0GCSqGSIb3DQEBCwUAA4IBAQBAX52D7meIgyQ0
Fiibahqp3cgbF/RgKxhurTVaNunQ3y5Ly0H2c+8pUBCgbE8H2QWbWNeYXDlQ8UXz
TwuSfBebtfT/ZC68uhY+HcgdDHZDevj/oOWwxhgWoIlsEoM7TIPKUXCrINdwvbPL
5XGOHwpvFyUQcpuCuoYrOBump6cCc9iMA+RRR2FvszVNGyxGvCI1fhpdG8oR5l91
lJSVoWBW1qKuPfdEmr8VOrpj/LIBF3u5fpAmza1rqmUmwMm7ZXJx8LHGUryTpNhT
zP1m8TRVmLQdxwwdY1gptQ15VOubD9bfP6U9Gey4wjmHrvWem9STPFNvMca7ZQCt
T3617rrJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkBZpAt4gZkvNz4JLnOb
4/dL0ovKvxKs6SAEytgFI8HKAQEyD7p6sg4FR8drYHzalsPwLcYaDB5tw5JWuAQN
rzjbYeyq94ZXoH1bhDKdaZIkOGqovLO01BqtKMHwVdSPg70A7zTepkznkn8xxOJ0
GOISMzKISoHAUo4i0OU0FCddAi+/hE+eVIr9CsGebpu0iTCB/d9keQ5dhLtdMv+f
79+u+GhBwAyMQ0w1hRcUoKdQbnwV0q2HKXOS3Y0+JTM/A7ipgBf8y3Feh5F4yf4V
z06vmoIdvPm3u7LMFNzHhS6c0VzYVgCHnVjcqg5yLDprsts0SPSMT2hTd29vle8q
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326314761210454032294113348238817974766393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 07:02:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 07:02:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ketok.net.majesticdata.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24017010189816021940673286310540554027748119574239273893170448113531900612645058649408721579514732196461323643039996711524463914317390399279262361150337312006746989937487260013841862605275890584942885869380159948337922997759964969920593354893101481632147004602993431744838159198054804010802155333239886755441602940854464173064111519116938700923851859497956652332595314254424876974148150718775771969401000939644751804528617605479314703263797770981433169640292542970150670064359781224347864488091647933530217233288232218323652298972792454201574232930179338233892841722060080854253737278988734443991575919297961198037599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62c8435a0afcdfe9bc2f5994bb865b03c47fa85a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketok.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketok.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketok.co.za.majesticdata.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketok.net.majesticdata.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ketok.co.za.majesticdata.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ketok.net.majesticdata.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cddcb840a0000040300483046022100d2c1dacd9262210af794668b7f24494aec37f6291be652cdb01ebc6253b47aba02210091360b0f6919b2a949ef4aec13664d825957add8bedff0067659e8be96fd5a6c00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cddcb87060000040300463044022059916ed3ad40a172857318933c89047ae0eaab08a151405793b25c4eafd6b3a402202a5c575e900669e5f28f3752ebb933a0cde32677ddc1adad725a632f09cbc60e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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