cenatti.com.xsa.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:34:b5:d9:a1:85:cf:24:81:e1:71:17:c4:a1:4f:68:db:7b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cenatti.com.xsa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:b5:d9:a1:85:cf:24:81:e1:71:17:c4:a1:4f:68:db:7b
Serial Number (int): 366385547078654557851204620408538633132923
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9e:83:f5:5a:a7:38:42:02:5b:a2:4c:12:bf:1c:e0:58:71:98:9a:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:4b:ac:ca:c6:e7:0b:11:17:19:28:6b:13:30:81:d2:5c:1c:33:06
Fingerprint (sha256): ae:04:5c:b3:61:b8:3d:b7:35:09:1a:06:9d:08:fe:e5:d4:c5:de:86:ce:e0:e6:d8:37:9b:1c:e2:34:5b:b8:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cenatti.com.xsa.co.za

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cenatti.com.xsa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cenatti.com.xsa.co.za
gameforvip.com.passioon.com
xn--interir-f1a.com

Other certificates including the domain name xsa.co.za

(limited to 100 certificates)
aqq3.arina-the-artist.com
xsa.co.za
anri.tauns.com
aqq3.arina-the-artist.com
aqq3.arina-the-artist.com
anri.tauns.com
xsa.co.za
xsa.co.za
xsa.co.za
phantom-immobiliser.com.shepherdingcenter.com.xsa.co.za
xsa.co.za
xsa.co.za
anri.tauns.com
aqq3.arina-the-artist.com
xsa.co.za
aqq3.arina-the-artist.com
xsa.co.za
xsa.co.za
xsa.co.za
anri.tauns.com
anri.tauns.com
cenatti.com.xsa.co.za
xsa.co.za
xsa.co.za
xsa.co.za
anri.tauns.com
aqq3.arina-the-artist.com
xsa.co.za
xsa.co.za
anri.tauns.com
xsa.co.za

Certificate

The complete raw certificate details for cenatti.com.xsa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISBDS12aGFzySB4XEXxKFPaNt7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDExMDU5NDJaFw0yMzExMzAxMDU5NDFaMCAxHjAcBgNVBAMT
FWNlbmF0dGkuY29tLnhzYS5jby56YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMVGpYrY+FC549spn+fKiTs7f3YkPX8hCVYxQA+yr4I9oZCXt9XBz9ZR
HaCcwUQkrkynJmBondXXvNGopPHHj4qVctvLluvCQ8xj+AgPN2nQCLlJ9Xorw+LA
/LjeINbecTC5r5nDJ8sM5MzkTB+SArGL/XJgyOJ2N6aqWV5c/BGZh+xW4Dhyuwe/
0SLpUiw9qoO9b3DFwZ4bnq+swRuELmZOGe/4AJqHe8Emja1/aVOTN2sDwH2EZr/A
1Ob4298QFSseC6DXJDO6ChRtIqsaNoe1lmxrSbEag4O3AJ7jkJ9lOlGU0ZHi5chr
mR4XmGh99wElhBHffDhsLRl5tLK4oKsCAwEAAaOCAkgwggJEMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUnoP1Wqc4QgJbokwSvxzgWHGYmnQwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wUgYDVR0RBEswSYIVY2VuYXR0aS5jb20ueHNhLmNvLnphghtnYW1l
Zm9ydmlwLmNvbS5wYXNzaW9vbi5jb22CE3huLS1pbnRlcmlyLWYxYS5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB6MoxU
2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYpQnQiiAAAEAwBGMEQCIC9x
HLTshUOj1+91xOXvWiEbMiaOAp7jDjOEdI7J5bGIAiBI7KdvAPtjl83ALWePWr7u
Y0ZsIp/0HlxvXidPC/G1UAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr
3IKKAAABilCdCMsAAAQDAEcwRQIgLFUhXDC8dU+5L2TqhZJwzx5nydRAKKjJkUEM
iEpf+HgCIQD7579LMhQzl/9u6kWMjJKVnMcwJKRZ3Y51+wcgJAHtwzANBgkqhkiG
9w0BAQsFAAOCAQEAXO+yoE/THaHZUS12TIfzqMdkaj/KT3am/+sQr781Tx5bUapq
NxGzWRDZVaDlwytJyCqn+E3p/eMGDYjr+jO//0pc/5KRhQ550tqHIoF4lUKEXpqY
If9QEiTtoGT4Q1rTRcYBysNYCPRCT10DK/7Cimmxa9/j+FJkxTWWu7qyozFqVS3Y
fl6bk/IdjYV868R4ickNKAjvuIubMHvo3CCDU3VAeoeS1Kyd6Lyhl1jxuch3n/Xj
887feeOvIJR1LKLPTYyjQKYrnx9+c9zzyyYGF9oLKxLYbhOPYHMOobjmH0Zs8wI5
vMMfpUILjiKfRzC2DCQlMhSxNYa9bY6Nkqv75Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUalitj4ULnj2ymf58qJ
Ozt/diQ9fyEJVjFAD7Kvgj2hkJe31cHP1lEdoJzBRCSuTKcmYGid1de80aik8ceP
ipVy28uW68JDzGP4CA83adAIuUn1eivD4sD8uN4g1t5xMLmvmcMnywzkzORMH5IC
sYv9cmDI4nY3pqpZXlz8EZmH7FbgOHK7B7/RIulSLD2qg71vcMXBnhuer6zBG4Qu
Zk4Z7/gAmod7wSaNrX9pU5M3awPAfYRmv8DU5vjb3xAVKx4LoNckM7oKFG0iqxo2
h7WWbGtJsRqDg7cAnuOQn2U6UZTRkeLlyGuZHheYaH33ASWEEd98OGwtGXm0srig
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366385547078654557851204620408538633132923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 10:59:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 10:59:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cenatti.com.xsa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24903783239775714332525559083468908678096017099403793000837591594051392637102417104484091548462397248856350665712231077876265973629512478335600697933272592148601850303070864454002847822738165044148114601207665489047931443411695102945753541721239743377435303608107396881314932039456318253734580230411111121518579052222636713183166049258648147148269284227293872992071954317489390811761525297065995970721537895197516731620249166320249071533084885874317720462115537145340004468304277979896366777058370996697360387867814078496383848470032451261325577052432924027877243450098949161761614909637392010417972941235239800840363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e83f55aa73842025ba24c12bf1ce05871989a74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenatti.com.xsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameforvip.com.passioon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--interir-f1a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a509d08a2000004030046304402202f711cb4ec8543a3d7ef75c4e5ef5a211b32268e029ee30e3384748ec9e5b188022048eca76f00fb6397cdc02d678f5abeee63466c229ff41e5c6f5e274f0bf1b550007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a509d08cb000004030047304502202c55215c30bc754fb92f64ea859270cf1e67c9d44028a8c991410c884a5ff878022100fbe7bf4b32143397ff6eea458c8c92959cc73024a459dd8e75fb07202401edc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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