vmm.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:a2:f6:64:07:b3:79:86:5d:9b:c0:7f:a5:e7:8d:8a:81:bb was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vmm.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a2:f6:64:07:b3:79:86:5d:9b:c0:7f:a5:e7:8d:8a:81:bb
Serial Number (int): 403902396641078278894975893737132461294011
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:01:ef:e4:3e:2d:4c:bf:a2:82:7c:9f:99:f2:21:f0:d6:d8:5b:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:ed:ec:a1:ae:f5:5e:47:6a:b6:f2:52:46:54:12:00:18:4f:79:6d
Fingerprint (sha256): aa:f3:43:81:7a:51:f1:88:be:09:78:5c:6f:4f:ce:c9:34:40:d7:c3:1e:93:45:4d:1c:0d:77:40:51:3a:70:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vmm.co.za

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vmm.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

almostnovel.com
arbitrage.tel
benziecounty.com
biogenology.com
brickellone.com
chewfamilyfarm.com
georgiamortgageinc.com
gogreenhomela.com
hotsexybikini.com
ilove.promo
istlm.com
karnatakamatrimony.in
mdpool.com
paternitylawyers.com
periodontics.in
playlistparty.net
prairiecounty.com
rxbloodsugar.com
sachillerparts.com
specialityhemp.com
swarmbox.info
treatla.com
vmm.co.za
whistle-blowers.net
wildhorsesinneed.com
zziioo.com

Other certificates including the domain name vmm.co.za

(limited to 100 certificates)
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za
vmm.co.za

Certificate

The complete raw certificate details for vmm.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA405O1q90oKNnNLhDKdhF
gl6oggHCQnVW7Gsrj9m/7akfeCkekyfxau8S9hzshIQE6f7YClv00pJHnXVCMtmE
v1bvNTyoAYLKV7zqnpG2g+O5Hzgf7gn5OZn4YDT8INtS++MDfCcrNqi3JTGqjQDJ
i3XfctxEIcmWGqxr5dD/uMRUSXD2deGvvVEMaeiUvr+xPJ8l+QSxW7D+aSvFInc3
ZVvHAFvKLmdrAylh0/HsXd7shA7N+KnIgbUj/7PuEmcewVgPrwFqrSsdMD7bhKfn
2xv/pdR3Gu+gn+Yf7YvLEgkBtnhVrPsVOyk0cMtJ232vFTUWZ7h9DLe4+afdvLuo
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403902396641078278894975893737132461294011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 05:35:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 05:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vmm.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28694710323222017171804333885744093241080027345289090057681002394666500140855371409659082077150506500725544485505886783997440421508250015808127720495861583219967103974133436604361646756243949060980691478209799827557798801115700763258880448561479798450142037284632013304762637889447753358070372502434686116702271515652593540880494868984095968591808755016088827831074753128003792784077354460053472757079634503577515119158411818002919780733204067520367989613248608656311318692665714761857687436757367354967813712981347620031729729974169965309334628922091324250715908615156865622133285265377608460409436196144616998414361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9401efe43e2d4cbfa2827c9f99f221f0d6d85bf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (458 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almostnovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benziecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biogenology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brickellone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewfamilyfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiamortgageinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenhomela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotsexybikini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilove.promo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karnatakamatrimony.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdpool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paternitylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'periodontics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlistparty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prairiecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxbloodsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachillerparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialityhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarmbox.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmm.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whistle-blowers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildhorsesinneed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zziioo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f236a4c070000040300483046022100ec41c507d0ed860b0418cea012f1ffec99305216fce4e593be5f4b7267ed4af2022100978c01c61a47920e1a61bcd7436528475fdfff66a815f50fcb835faea724172d00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f236a4c2d00000403004830460221009b23cbd07264cdb40e8901d725ae920b4eefe3b3bd82737deeea517013e7c19f02210082bb2beb67b858b03b222d4acad6c8ea486baeaacd10dd002de66d8a61faee40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014a66f2763ade07f902fc9ba8af2a769325f80c154961380f9d397de4d501b109c220f761a838cc3ce7966ba6ffd1382b44cab65a5e9452f349fdbcf7906e76e7eaaad3088c25eda3cdd41e2a6c2bf385d41b14f58d664263bf086cc530502118a6814a448d19a354a342b59453f8da72eb964de60ae3d62e240b0551b7f0567f0b30e5d50a1d7cf937e80ee8755e4fc6287c314b00067515b5e120638349f1b464423593815e01640f7631bf8b1b6d49326ad57110c81e6f95ed2daa910cdd0d4169960093025f65498e8a849e13d58730c9f793d758c1584eadc0798263c3d74191aedd4309860e9dc92023e8241ac12e0e7ec8e7e8bd8b6c0c9b0b92e8350