cpcontacts.centraxdigital.com
Issued by R3
About this certificate
This digital certificate with serial number 04:bd:c7:5b:dc:43:bd:3a:d2:64:76:61:91:9d:b1:95:4c:c4 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cpcontacts.centraxdigital.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:bd:c7:5b:dc:43:bd:3a:d2:64:76:61:91:9d:b1:95:4c:c4Serial Number (int): 413027504412770644579022594517812573981892
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 29:cb:ca:06:63:f1:00:29:7b:dc:1a:37:dc:35:3c:09:2d:fa:64:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 45:ea:c1:36:68:26:9f:94:a7:e3:26:6a:4f:f4:29:5f:e6:65:c9:48
Fingerprint (sha256): a0:87:95:70:a0:60:95:a3:18:7e:dc:69:69:ae:a1:5f:b9:5a:27:09:f7:98:71:ad:0f:fa:0c:49:90:27:b4:3d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cpcontacts.centraxdigital.com
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cpcontacts.centraxdigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.centrax.africa
*.centrax.co.za
centrax.africa
centraxdigital.com
cpanel.centraxdigital.com
cpcalendars.centraxdigital.com
cpcontacts.centraxdigital.com
mail.centraxdigital.com
webdisk.centraxdigital.com
webmail.centraxdigital.com
www.centrax.centrax.co.za
www.centraxdigital.centrax.co.za
www.centraxdigital.com
*.centrax.co.za
centrax.africa
centraxdigital.com
cpanel.centraxdigital.com
cpcalendars.centraxdigital.com
cpcontacts.centraxdigital.com
mail.centraxdigital.com
webdisk.centraxdigital.com
webmail.centraxdigital.com
www.centrax.centrax.co.za
www.centraxdigital.centrax.co.za
www.centraxdigital.com
Other certificates including the domain name centraxdigital.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for cpcontacts.centraxdigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgISBL3HW9xDvTrSZHZhkZ2xlUzEMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTkwMjMyMjVaFw0yNDA3MTgwMjMyMjRaMCgxJjAkBgNVBAMT HWNwY29udGFjdHMuY2VudHJheGRpZ2l0YWwuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAv5GcpeT18iU/qkyrcVoavuDbxPLtffzAO4OzbqVTdwm9 mOyeoPAk5eAk+8A6v+6He3T+Zh26fqLmvXzMCIbpChni6bRJO3a7Se4SpUZCh2r5 Ateu7Df1Xtui6Swh929B65WEehY060KzZanHp1BFK0C/lPgk1NZnRj1M0cHjKU04 1FzLIUh+1rok6u52/C55kmepLBPo/vFxK6Tzjyng4kQ8iirUpkU/G9EevwNhg3Bx hMiaqeEO3pS4Zu+BIlU0nfV+k4+z7hPvnvkH+yZSSyFq+uVT8NfblID/gHTH5980 H99EfCCehbQrF4F7Pqk+DfZ8JJ6we8N0rO9mXZQpRwIDAQABo4IDTTCCA0kwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQpy8oGY/EAKXvcGjfcNTwJLfpk8zAfBgNVHSME GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov L3IzLmkubGVuY3Iub3JnLzCCAVQGA1UdEQSCAUswggFHghAqLmNlbnRyYXguYWZy aWNhgg8qLmNlbnRyYXguY28uemGCDmNlbnRyYXguYWZyaWNhghJjZW50cmF4ZGln aXRhbC5jb22CGWNwYW5lbC5jZW50cmF4ZGlnaXRhbC5jb22CHmNwY2FsZW5kYXJz LmNlbnRyYXhkaWdpdGFsLmNvbYIdY3Bjb250YWN0cy5jZW50cmF4ZGlnaXRhbC5j b22CF21haWwuY2VudHJheGRpZ2l0YWwuY29tghp3ZWJkaXNrLmNlbnRyYXhkaWdp dGFsLmNvbYIad2VibWFpbC5jZW50cmF4ZGlnaXRhbC5jb22CGXd3dy5jZW50cmF4 LmNlbnRyYXguY28uemGCIHd3dy5jZW50cmF4ZGlnaXRhbC5jZW50cmF4LmNvLnph ghZ3d3cuY2VudHJheGRpZ2l0YWwuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrr wb8ohez4ZG4AAAGO9Gma1QAABAMARjBEAiA0hkLkD3FtvfjVmXv/YM5+YhtLN/ju 8xXhf3cxWy4c6gIgQznDU6hs09rFQjn6RztyGBsrjq5zgzvYHeFQ5fzrDGQAdwDf 4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY70aZuRAAAEAwBIMEYC IQDQ8gHQkaCn2sNpYHWy122l9Rdjg/F1uU7+CEIerVT+bAIhAKtWe/py/Y4k1w4Z k3KgyQVw12fj3MMflp147l1d0DjNMA0GCSqGSIb3DQEBCwUAA4IBAQBxG5Q4yVSD +WcaMHa0hKtnclSijaOJlKtuo5qk277LwLDMqnzU9zhG2e4X2yIh8ufhhzPeLhVJ vmekt26zJHYjXAtMLjgZFDUc3aTe0RUME7XvLwKpJYVni1PYM4Uor3HZ2BZedTrp +o1r+idP6uBzQohhW2cmoDhqQXV1AI8t4drWkGogxeWtMVkoySAW24QSFphw8zl3 RhqtXDLo3Jzs2cAzfjP+fsCBI+g4dTEDNRB7j2kOINDA0emYHnap8v6/5QFLOgxr 5XALsmb+pw4OgorOcLDIzzATyufQPtjmNLr5q21hD+HR0GrZe/dBaysTpYuHx7Th 6Z6XD75pzIK6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5GcpeT18iU/qkyrcVoa vuDbxPLtffzAO4OzbqVTdwm9mOyeoPAk5eAk+8A6v+6He3T+Zh26fqLmvXzMCIbp Chni6bRJO3a7Se4SpUZCh2r5Ateu7Df1Xtui6Swh929B65WEehY060KzZanHp1BF K0C/lPgk1NZnRj1M0cHjKU041FzLIUh+1rok6u52/C55kmepLBPo/vFxK6Tzjyng 4kQ8iirUpkU/G9EevwNhg3BxhMiaqeEO3pS4Zu+BIlU0nfV+k4+z7hPvnvkH+yZS SyFq+uVT8NfblID/gHTH5980H99EfCCehbQrF4F7Pqk+DfZ8JJ6we8N0rO9mXZQp RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 413027504412770644579022594517812573981892 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 02:32:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 02:32:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.centraxdigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24183320155705329292146833811224342530657521211340060087479527777103477768817871596335783782992737930458597850458922287687653554113740343382172125642177491124225562910760343711706459517763381356703951230012073344398100847308660648867503183628277929244757442843729533054577862885528986639027114706262281071872923566487708859278110050677000000835849136826904572312462009378650675636042272333080586607130051356997339787942296788621582309427653014365728303013514601417558806942312115299187689664237817543955645105558802486269540151681506160890680357748118912347083295587159589160769787918965290627397673830130942597146951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29cbca0663f100297bdc1a37dc353c092dfa64f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrax.africa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrax.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrax.africa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.centraxdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrax.centrax.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centraxdigital.centrax.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centraxdigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef4699ad500000403004630440220348642e40f716dbdf8d5997bff60ce7e621b4b37f8eef315e17f77315b2e1cea02204339c353a86cd3dac54239fa473b72181b2b8eae73833bd81de150e5fceb0c64007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef4699b910000040300483046022100d0f201d091a0a7dac3696075b2d76da5f5176383f175b94efe08421ead54fe6c022100ab567bfa72fd8e24d70e199372a0c90570d767e3dcc31f969d78ee5d5dd038cd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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