qdd.co.za
Issued by R3
About this certificate
This digital certificate with serial number 03:c2:de:ab:28:59:15:24:58:8e:39:98:c5:65:f7:78:70:21 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=qdd.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:c2:de:ab:28:59:15:24:58:8e:39:98:c5:65:f7:78:70:21Serial Number (int): 327647614294124096365639432043518416678945
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dc:09:69:e3:92:2f:70:ab:0b:89:15:4d:f7:6c:9c:5f:db:24:72:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ae:11:44:b1:c8:26:de:e9:38:35:e1:58:01:62:d9:50:ef:a4:ca:fc
Fingerprint (sha256): bf:f7:3d:66:4c:f1:d4:6e:8d:a2:30:13:f4:d1:5b:87:a9:91:7d:81:ce:be:79:6a:3d:a5:b9:14:06:68:f9:72
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate qdd.co.za
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qdd.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bestinschools.com
conservativephotography.net
familyadventurereviews.com
greenforum.in
iniftar.com
lastlottery.com
mxp.in
omeiapad.eu.omeiapad.ch
qdd.co.za
rencontreadultes.ch
transompod.com
yantrana.com
conservativephotography.net
familyadventurereviews.com
greenforum.in
iniftar.com
lastlottery.com
mxp.in
omeiapad.eu.omeiapad.ch
qdd.co.za
rencontreadultes.ch
transompod.com
yantrana.com
Other certificates including the domain name qdd.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for qdd.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISA8LeqyhZFSRYjjmYxWX3eHAhMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MzAwNjA3MzJaFw0yNDA3MjkwNjA3MzFaMBQxEjAQBgNVBAMT CXFkZC5jby56YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMg2mom0 1oubSzOG5h24MfXVuy7rWz8/bmHHwznmLrOtCb5tj4atWllvLPiJMx6qyq582tce ZcBrgW4efEy8JuDJE+VxA1aZ5NmD3gl7fue6USExFsX50lJuXu66LtYSoq/zxcP9 VY8iJKj1RTWNyVZUeTkX7eEWEBbLZSNxkcu7sKLrWbM2XTQXQ+vl4dcUJBTbosRK /ryy+ir6T5fTghOOkQfxkW+OxjMttMstbWdDYeV3Q2llQdH6nQr21MrJIKxjQtZT TC96+/btMNe7fEMOQWiAK97Oq5aBduBmzxtXOy7p0AQ1ucjKDjVzWsS6oe/XsFhb thcz08uqoYQLQRcCAwEAAaOCAtswggLXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU 3Alp45IvcKsLiRVN92ycX9skcnIwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgeMG A1UdEQSB2zCB2IIRYmVzdGluc2Nob29scy5jb22CG2NvbnNlcnZhdGl2ZXBob3Rv Z3JhcGh5Lm5ldIIaZmFtaWx5YWR2ZW50dXJlcmV2aWV3cy5jb22CDWdyZWVuZm9y dW0uaW6CC2luaWZ0YXIuY29tgg9sYXN0bG90dGVyeS5jb22CBm14cC5pboIXb21l aWFwYWQuZXUub21laWFwYWQuY2iCCXFkZC5jby56YYITcmVuY29udHJlYWR1bHRl cy5jaIIOdHJhbnNvbXBvZC5jb22CDHlhbnRyYW5hLmNvbTATBgNVHSAEDDAKMAgG BmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AN/hVuuqBa+1nA+GcY2o wDJOrlbZbqf1pWoB0cE7vlJcAAABjy3UguMAAAQDAEcwRQIhAKAu2WL643j6u2IN L0/MNHVfkIDvv6O6EFdbLH7IDuCLAiAn2UWfReWKwDOUliUbHOsxDbiCc1gZ49Ft jCPHDsl4qAB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjy3U iewAAAQDAEcwRQIhAMtQo1Ww8HeVKhXcquYAn5tWf2eGScMYQm7qSFXUqy/DAiBD 0k9f7aDIn55agfsZdmquGb0v+ubFfdGHFN0EcOPorDANBgkqhkiG9w0BAQsFAAOC AQEAJXHjqpxAd346DBKuf2IFq9K1MGP8hxm5+VNpW3f9ze2Gt2d2BD8OjXxrGHBj o8ZaYHX4/w9S15+LK77zP2aPbNYqdQsZ3H6j/RoYzE+vJCJ3gjMEJN44OTNs1J0N 8G5kcYfdXgc6AAdcnfUgVwU747nRdohR+OfHX+bcnmssFb9Z5IKZGmJnmruwE5kl 0S9AE4tpz5OS8UL+ayhmK0DMgLzDesKez3pzdjkvEPgpkealAtiAk2TSNED/3tye 3rHv95IjtaQ9JEuIdASRM+OXrwQweKOz5Db5u9VYOTTPPGylYQbme51tyBsI+nfo 1bpAhZfwHWPlueaazNoJK03jsA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDaaibTWi5tLM4bmHbgx 9dW7LutbPz9uYcfDOeYus60Jvm2Phq1aWW8s+IkzHqrKrnza1x5lwGuBbh58TLwm 4MkT5XEDVpnk2YPeCXt+57pRITEWxfnSUm5e7rou1hKir/PFw/1VjyIkqPVFNY3J VlR5ORft4RYQFstlI3GRy7uwoutZszZdNBdD6+Xh1xQkFNuixEr+vLL6KvpPl9OC E46RB/GRb47GMy20yy1tZ0Nh5XdDaWVB0fqdCvbUyskgrGNC1lNML3r79u0w17t8 Qw5BaIAr3s6rloF24GbPG1c7LunQBDW5yMoONXNaxLqh79ewWFu2FzPTy6qhhAtB FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 327647614294124096365639432043518416678945 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 06:07:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 06:07:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qdd.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25274587063346789794001552840454527814922993235085359349858387121043677021712012888337583514144110491326482521834553671168615367985271708917061663380727135146162584254024175387173986140898506865547075946322579744603940309012925332727242576731833290615822309072340601453772564376374474244367516119704229805614931440615574158943104867915646805074957288042364042401792272310752756300967652944074618818193376455493190719588682386404327961828913283493848256877069437171356151136986963684057141566165894836322700236766046112852059171159830320835319550777741475445981589442594404614680106854673355730206985379579211968889111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc0969e3922f70ab0b89154df76c9c5fdb247272 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinschools.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservativephotography.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyadventurereviews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenforum.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iniftar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastlottery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxp.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omeiapad.eu.omeiapad.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdd.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontreadultes.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transompod.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yantrana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2dd482e30000040300473045022100a02ed962fae378fabb620d2f4fcc34755f9080efbfa3ba10575b2c7ec80ee08b022027d9459f45e58ac0339496251b1ceb310db882735819e3d16d8c23c70ec978a80076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f2dd489ec0000040300473045022100cb50a355b0f077952a15dcaae6009f9b567f678649c318426eea4855d4ab2fc3022043d24f5feda0c89f9e5a81fb19766aae19bd2ffae6c57dd18714dd0470e3e8ac . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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