ptschemes.nicd.ac.za

- National Health Laboratory Service -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d1:e8:2b:73:cc:18:ee:54:00:00:00:00:50:f3:57:02 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Health Laboratory Service

Organization: National Health Laboratory Service
Locality: Johannesburg
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d1:e8:2b:73:cc:18:ee:54:00:00:00:00:50:f3:57:02
Serial Number (int): 279014145308244225304916374024900269826
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:b7:90:be:ae:84:7e:ca:32:1f:f3:f5:bd:30:08:de:31:e0:18:df
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 40:51:a7:9d:d9:d4:67:be:64:ec:f2:1d:fc:58:c4:d5:de:df:31:6b
Fingerprint (sha256): bc:f8:a8:e9:e6:03:16:3d:c1:e4:73:c3:ba:60:2c:69:92:ed:41:21:f5:26:ce:ba:20:a5:0b:f2:4d:3a:13:ea

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ptschemes.nicd.ac.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ptschemes.nicd.ac.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ptschemes.nicd.ac.za

Other certificates including the domain name nicd.ac.za

(limited to 100 certificates)
doctors.mycure.md
ptschemes.nicd.ac.za
webmail.nicd.ac.za
securelogin.nicd.ac.za
webmail.nicd.ac.za
www.weaknesswork.com
nicdbramowas.nicd.ac.za
survey.nicd.ac.za
gis.nicd.ac.za
*.nicd.ac.za
wastewater.nicd.ac.za
www.gamasoft.co.uk
*.nicd.ac.za
securelogin.nicd.ac.za
sandexweb.nicd.ac.za
webmail.nicd.ac.za
nicdeocvcse01.nicd.ac.za
*.nicd.ac.za
legacy.nicd.ac.za
sandae.nicd.ac.za
autodiscover.nicd.ac.za
*.nicd.ac.za
download.nicd.ac.za
mstrmobile.nicd.ac.za
bramexweb.nicd.ac.za
query.nicd.ac.za
www.salavirtual.retransmision.mx
nicdsandowas.nicd.ac.za
ptschemes.nicd.ac.za
ptschemes.nicd.ac.za
securelogin.nicd.ac.za
webmail.nicd.ac.za
gis.nicd.ac.za
www.foodiebot.recipes
query.nicd.ac.za
webmail.nicd.ac.za
autodiscover.nicd.ac.za
download.nicd.ac.za
ptschemes.nicd.ac.za
webmail.nicd.ac.za
autodiscover.nicd.ac.za
laviwoodsculpting.com
webmail.nicd.ac.za
nicdeocvcsc01.nicd.ac.za
autodiscover.nicd.ac.za
legacy.nicd.ac.za
sandexweb.nicd.ac.za
www.korley.net
sandexweb.nicd.ac.za
bramae.nicd.ac.za
app.bridgetownresearch.org

Certificate

The complete raw certificate details for ptschemes.nicd.ac.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgxv3evlIuP6QZeevKOX
88sQQznzIZSbCEbKCD5SwkJG2DCBQYlkPcteCooCBgYqT2HmXj/CGPkxvfNF7/fJ
Y/BCT4x2dHwHJmkGzg2ydfpUmu2hCZpOUeTF1gy7uFo6W5IVOFWFLirav4QFOwuY
33z9/GaGYH8EZulvCNxYYghBV2y9s66Kx4DZd0ItRH7j04kDNshslUN662S17Wqe
Gnf5IqDEXJDGQXMVPvX1RMnO5C9WxJ3mHMh45J2zymU152y415grTrr7tjpp4CBR
06Qx7Tzm6w1ZWm3eZlRAk7geMrUT6ozdxeHGbkIbHiSED04/eDk+wYKJ5T6coCIg
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279014145308244225304916374024900269826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 09:59:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-19 10:29:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Health Laboratory Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ptschemes.nicd.ac.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18436925428460392072669472874533458158881259092318527342420049397955190533796872350703352327846716729212122224879255007990008046785184183099525104023282922180140154759471197771840581290285932719057166410854771290356634714723250722139295219087760828945936312292932488518524459978059070338123931802633855293496907957091936571423206195798733050499035268639871278318746867872583349419856083601766860306259580257433373487982558463892528918702740747626474955332021388774133478827857288709289692488333567290273622794774726209841141651908718043628774698811848448727664583801274937936419813640893860442596335857792267136933963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptschemes.nicd.ac.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e10076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b746f1f6200000403004730450220068ff17a6aec0904d1198372ceef55c8c010616cd1a21cdcaad4e75051a876a2022100aa29e1301bdf77439bd3efc73aa68f90a04760a51071b0bc0e466e30e16ce5980076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016b746f1f7400000403004730450221009109819920ea4ea8613b44a68a65d9fc18dd34277291a06a8a55ccb92fd6fe3002206189bddd8633deaace8bdcb8d823cb69ce3a37a309aae2066aab16f3a51306970076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016b746f1f9e0000040300473045022100efe02008a64203f862b6a3b8422156ddedd0d570b0c1ea065ec580385a3ce8dd02206b97d60db8e0c71e97d5854835f40fac78c6bd40dec633d5323484cbef907c66007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b746f1f960000040300483046022100c2503d1aa324ebaf39c70f6c9ad68b38007cef6e6172231e82014cab3f27fd1d022100964a0846d3b51df1b5c0cb70a9f03ddce8ae3978d9cdd9d089d8952f13418c16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0b790beae847eca321ff3f5bd3008de31e018df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f0e219b7e604c065e3fff46739c728c33df47369f1f13b531247ef6c438264c9d15fbe3c618cc608399a991c1925f4ce0a2a969b45e002dc9e79c792025b7b251791c3e6301393ab1c16d03f2062998cdffe338df5445daed1b1efdea71b354578799b19a588b55e79c602d628d96deac6d60d29c427075e28f1d2a427a184b305c9760471d133f64e84ae695eeaa1dad3f1ef78af4d04d3f0d8040bd027237431caf1a2dbbb6e6f5edf09da9147e09f6dac5423e1cdfd794903072c326261b091fbe6016ba455226436860e0e669c7cd095be7e284e38ab67bd0dcf5df03bf03dfa4fd5f9434581ffaf29a11537b6ff778b3552d683754501102cce87ba382