q8.co.za
Issued by R3
About this certificate
This digital certificate with serial number 04:40:f2:c4:c9:7a:bb:6c:0b:0a:41:09:86:93:28:06:80:05 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=q8.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:40:f2:c4:c9:7a:bb:6c:0b:0a:41:09:86:93:28:06:80:05Serial Number (int): 370549910161633441189295785656401495752709
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e5:c3:7d:ea:f4:13:c0:84:08:10:db:18:49:8e:46:34:8f:bd:35:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 84:18:9c:c0:ce:35:30:c0:55:35:93:0a:5d:2b:08:12:12:ac:6d:f2
Fingerprint (sha256): a8:1d:d3:dd:79:3c:ef:ae:7c:fc:8d:36:52:b6:31:d0:35:e0:81:66:31:7a:56:6a:32:52:a1:8a:1d:bf:64:75
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate q8.co.za
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for q8.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
1800bmwparts.com
clermont.net
dre.chat
endoftheworldshow.com
ethyc.com
makemoneydomaining.com
q8.co.za
quadrautilitylocating.com
rawnewslive.com
resetresistance.net
rockandreview.net
smallbusiness.biz
wnymedicareinsurance.com
yahvah.org
clermont.net
dre.chat
endoftheworldshow.com
ethyc.com
makemoneydomaining.com
q8.co.za
quadrautilitylocating.com
rawnewslive.com
resetresistance.net
rockandreview.net
smallbusiness.biz
wnymedicareinsurance.com
yahvah.org
Other certificates including the domain name q8.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for q8.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISBEDyxMl6u2wLCkEJhpMoBoAFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTkxMjAzMzdaFw0yNDA1MTkxMjAzMzZaMBMxETAPBgNVBAMT CHE4LmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmb7Ezv1 r/sECD9OO6CH/OSS4q6QCFeMxYUDOJqdQnAXTHopUtRPBb82+vCU7CmxVaWCadcC 4IdoH7qKNJneDqgW/Cz7RipHmzTuHWTt6vxu2qR2L/Y3kqV4hfGRO+Sm+T28UJgI 5GCdVSVXi27GZfs89f/yf68HTkwwIKR25TQLU3bffsd0byJ2mXfoV92P6wJ1dVBT 1DQwM3MzdlogeWKkGMI/qHPWJ5nh37PRt0qf1rLFDCvf9dkECX7wDCTwrSf6cZr1 iPr6cofzD6/xvWxJ4IwEhOyVwr9UoMJz1ElPumY8MspM7VtVaavsmHTvvfGAxyR/ FtYa0dYd6oviAQIDAQABo4IDADCCAvwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTl w33q9BPAhAgQ2xhJjkY0j701LzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAQYG A1UdEQSB/jCB+4IQMTgwMGJtd3BhcnRzLmNvbYIMY2xlcm1vbnQubmV0gghkcmUu Y2hhdIIVZW5kb2Z0aGV3b3JsZHNob3cuY29tgglldGh5Yy5jb22CFm1ha2Vtb25l eWRvbWFpbmluZy5jb22CCHE4LmNvLnphghlxdWFkcmF1dGlsaXR5bG9jYXRpbmcu Y29tgg9yYXduZXdzbGl2ZS5jb22CE3Jlc2V0cmVzaXN0YW5jZS5uZXSCEXJvY2th bmRyZXZpZXcubmV0ghFzbWFsbGJ1c2luZXNzLmJpeoIYd255bWVkaWNhcmVpbnN1 cmFuY2UuY29tggp5YWh2YWgub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1y b+H61BcAAAGNwXb+9gAABAMARzBFAiARd81V6Vsx/t5Otbjv+Cc7kwDygoYMPTPB BoHpV6k1ngIhAPtLJDPQaJsAOdVsvfosiajEhB74+dPqRY7EeUAfZ9ZGAHcASLDj a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNwXb+9wAABAMASDBGAiEA tua4b5anLvmIS/4rqmL/j85pR9TvMz90DWiMKcYAgh8CIQDcv8qT8OsYLlTrO699 GBnCJtgOYeuhBOpsyz5Sds7YMzANBgkqhkiG9w0BAQsFAAOCAQEAKBiR/afgP5FG TDY9YoD6r+9WAxVHUwFwoLvj0+yFXC57UL9gC0nP7Ru5v4pRx5BXu8ZTvJNOxLCO qXyGvkeMPUg6Z8fUzZqpFrwgO/ldVQKM8gO9z/V+T+xCeoasB3jmvIiqwnAnOfc0 u/vzmWk0M1Js/Bi/u36uP4BPYv0GLrnYugyqLp0h5oxz9GTfOwN26DqARcmMA8gU /GaCc9PZTQuV5IbCMn7qgthokbesr/oG13q36rqEuQZ4Cf7RA50tYNHoXC2dM4zn sEGeIj2Eaj2cBzY9J2WWTINZ3y6MYGWyrj482aBRRmQ6gfz6QHFcepHVm+oYwXE4 ELlTyloUaw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmb7Ezv1r/sECD9OO6CH /OSS4q6QCFeMxYUDOJqdQnAXTHopUtRPBb82+vCU7CmxVaWCadcC4IdoH7qKNJne DqgW/Cz7RipHmzTuHWTt6vxu2qR2L/Y3kqV4hfGRO+Sm+T28UJgI5GCdVSVXi27G Zfs89f/yf68HTkwwIKR25TQLU3bffsd0byJ2mXfoV92P6wJ1dVBT1DQwM3Mzdlog eWKkGMI/qHPWJ5nh37PRt0qf1rLFDCvf9dkECX7wDCTwrSf6cZr1iPr6cofzD6/x vWxJ4IwEhOyVwr9UoMJz1ElPumY8MspM7VtVaavsmHTvvfGAxyR/FtYa0dYd6ovi AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 370549910161633441189295785656401495752709 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 12:03:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 12:03:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'q8.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18481574231565652972686105606266890541389142840209064667139707814153403462851585245100963035958808387628098683656049990844887371425641086477444049996513029264031005649291149950477701741292137110034672619698890410032944492216663020088005550425169430869372964533215286449222173333579749816744608023207927034239652322651333278038059109649323503044353216344753559416422244057476595701402965439461283225947013098614837364306850005440319036359442561268049578212255035260496818496002773695668722943418490384802923634207170696992311310363631085674476050778725362065066009435094634872700430376165645857051644430614115675529729 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e5c37deaf413c0840810db18498e46348fbd352f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800bmwparts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clermont.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dre.chat' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endoftheworldshow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemoneydomaining.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q8.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quadrautilitylocating.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawnewslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resetresistance.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockandreview.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusiness.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnymedicareinsurance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahvah.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dc176fef6000004030047304502201177cd55e95b31fede4eb5b8eff8273b9300f282860c3d33c10681e957a9359e022100fb4b2433d0689b0039d56cbdfa2c89a8c4841ef8f9d3ea458ec479401f67d64600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc176fef70000040300483046022100b6e6b86f96a72ef9884bfe2baa62ff8fce6947d4ef333f740d688c29c600821f022100dcbfca93f0eb182e54eb3baf7d1819c226d80e61eba104ea6ccb3e5276ced833 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00281891fda7e03f91464c363d6280faafef56031547530170a0bbe3d3ec855c2e7b50bf600b49cfed1bb9bf8a51c79057bbc653bc934ec4b08ea97c86be478c3d483a67c7d4cd9aa916bc203bf95d55028cf203bdcff57e4fec427a86ac0778e6bc88aac2702739f734bbfbf399693433526cfc18bfbb7eae3f804f62fd062eb9d8ba0caa2e9d21e68c73f464df3b0376e83a8045c98c03c814fc668273d3d94d0b95e486c2327eea82d86891b7acaffa06d77ab7eaba84b9067809fed1039d2d60d1e85c2d9d338ce7b0419e223d846a3d9c07363d2765964c8359df2e8c6065b2ae3e3cd9a05146643a81fcfa40715c7a91d59bea18c1713810b953ca5a146b