zaj.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:6e:93:ac:4e:32:ef:15:20:12:b4:99:d4:b2:ce:c9:8b:89 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zaj.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:93:ac:4e:32:ef:15:20:12:b4:99:d4:b2:ce:c9:8b:89
Serial Number (int): 386076495264847617857929577548673798736777
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:3b:38:27:65:23:31:ce:66:96:05:37:41:ec:ee:d3:d0:67:e4:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:8e:c1:cb:6a:41:cd:7f:9b:c4:e9:30:de:eb:62:c0:36:c4:72:b7
Fingerprint (sha256): aa:01:9e:f0:28:b3:04:ff:d5:fc:f5:c6:91:a4:54:6b:d8:ee:6b:b7:9a:6b:60:20:d6:78:eb:cb:75:f2:7f:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zaj.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zaj.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

betterbuiltroofing.com
drugaddictrapidtransit.com.christmaslightoutlet.com
grangerdumpster.com.cryptocoinprofits.com
hettingercounty.com
ibhurt.com
www.freedomprojectacademy.org.palmdesertrealtor.com
xhias.love.sawomenconnect.com
zaj.co.za

Other certificates including the domain name zaj.co.za

(limited to 100 certificates)
zaj.co.za
zaj.co.za
zaj.co.za
zaj.co.za
zaj.co.za
zaj.co.za
zaj.co.za
mycrusher.ca
zaj.co.za
zaj.co.za
zaj.co.za

Certificate

The complete raw certificate details for zaj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlaAIngrSfq4b4zzNErD
ZmsMFU6r/y/e7dEqhDHvdnptDJ0ytL1TtU/P6Mtq4zW7uu6dvSFG6JDJOmO22OhD
f/ZLthFa6DYqH+3ksdFTJLN38FaLLm0piIo1KT8lr1b/uoyJTPAzUOgFoBEO/rjo
WsZAaNyse3laL0OKYIUJzIAs/J4r0GiRLdkPwEqcENUCIQ9RsFJlj5YX0ROq4c3+
jZYd194TGi3g22qicOMjKD5IjdDX8mMQJ6LlKVVidtYioMql58S7NDCmf57mFzv1
e0xpjlUN8kOItQbI+v1jQr2+gDRNRecVAqSgORXLvPVFVs8oFGhS0QEq8MqCC5nh
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386076495264847617857929577548673798736777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 02:45:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 02:45:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zaj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24532886162540559543191773440328399163101475707415508579512832247991290057718134820189020022910066254735746340753949423271732677942476391056250333577145129115175473697266334662268749130572432709831697659414059400061996641714169436462834042963990540140345827616480780463516844354030890247647593836703469586039757872975754958398628609228227044692270182636453256923148389183803296853361029584660164093986032730107583556113716197478519148872273391249213933796607971993515147136315816631493731214473738088512094032025488851767713417870411277798595567885968166558738722407024883695309309752075471780869649915643029156913481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa3b3827652331ce6696053741eceed3d067e411
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterbuiltroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugaddictrapidtransit.com.christmaslightoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grangerdumpster.com.cryptocoinprofits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hettingercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibhurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomprojectacademy.org.palmdesertrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhias.love.sawomenconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaj.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c70bb11e40000040300483046022100ee03616bf9521af4da2fc67ffda2b84fbebe72739f244dfa0c5458e50387312d022100cddd2d6a2db0d595bc5f1286f274436c8deb0955bff7c67cb372ff2d0f0e1aad00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c70bb122f00000403004730450220408a5fe70cfc4dc6474b4ed0a062c4171d2d4335746f504aa65077fe2151b4c2022100e2e918310758981d5411b716043d0317d1f364ff4e106127bb8056cfc5f5c57e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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