www.grimtictac.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:a3:57:41:cc:34:6a:2a:19:f5:b1:82:b3:d8:ea:90:40:48 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.grimtictac.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a3:57:41:cc:34:6a:2a:19:f5:b1:82:b3:d8:ea:90:40:48
Serial Number (int): 404031154011847328479963548503264254246984
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:6e:a7:e3:e0:ef:77:df:a3:5c:b0:91:9c:93:69:4a:2c:b7:f6:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:cf:25:de:24:dd:d8:e6:01:91:a6:1d:15:c4:9a:2b:4c:d4:b1:2e
Fingerprint (sha256): cb:50:e9:24:09:34:99:dc:20:e9:59:7b:3d:b6:d4:91:a6:d0:79:4b:8b:80:e8:c5:42:d8:b1:45:97:7f:7d:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.grimtictac.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.grimtictac.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.grimtictac.co.za
cpcalendars.grimtictac.co.za
cpcontacts.grimtictac.co.za
grimtictac.co.za
mail.grimtictac.co.za
webdisk.grimtictac.co.za
webmail.grimtictac.co.za
www.grimtictac.co.za

Other certificates including the domain name grimtictac.co.za

(limited to 100 certificates)
entry.do
grimtictac.co.za
dev.willwright.io
www.denishussar.com
grimtictac.co.za
api.airene.fr
www.losfogueterostenerife.com
one-beta.ultroncloud.com
codelerk.com
tv.wiro.tech
www.arkstud.io
www.erikedit.nl
www.cinefile.cc
badminton.freesportworld.com
parkpoolr.io
goldfinchproductions.com
badminton.freesportworld.com
ktdigibank.com
grimtictac.co.za
pasaranyar.karanganyar.co
sigmaproit.com
www.hundredthousandloaves.com
www.hydrofrolics.com
auth.orbix360.com
group-match.com
www.grimtictac.co.za
openpartyplatform.com
vaibhavarora.net
api.airene.fr
auth.orbix360.com
grimtictac.co.za
parkpoolr.io
sigmaproit.com
basracorp.com

Certificate

The complete raw certificate details for www.grimtictac.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzW7GdynIjq64iLN3aok
vWDMwuaNgENtgaIIk2y3X396PBUA6jesSdhEn5FNGdQsZ4YmOLnpj2QI5tH94UIn
SUgRUS4Vy6HYFgFX5hc9dXOPCJxP8hoku/bpYepmpYpMqiFahi025pmBM2HdIEyf
HGBvHdRzZU5MtYIEWIHcOB/lK0OkA54pTnZOvGadRXUaekjQv4/YmHBu47YtlRSm
N991vEnwKgTi/1GrCzLSCAQz9yLcbRpTpFcCwpH2Do/jv4Hbk6Uoi1pB4WWWWNvy
XEcJgldarQ4Z4d+LvFyKqLJ+80ebQxEQEw1GiU3kid3UspNTYOYN6Sjx9m51Ud53
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404031154011847328479963548503264254246984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 15:34:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 15:34:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grimtictac.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19593432945975029926072392957587069434339487163043264055375872539735816523706998609701073724322283561919308520788125633336431104495105136781410559936914104284499160154041420655241346275000676963405373353929715573199777403829642006274120450703908029495322358089749270544517645320856931403729317809176850131650617996739431842806752462764966974028564896599845996266059581454668402375016647402909143718794537644826933897178146332122675696878569958450264519222228299292571614440432550502700345704615921544799137637442497779152260536888196003970229206541131732091737180235198077090738239911184714766535969323345623593678847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee6ea7e3e0ef77dfa35cb0919c93694a2cb7f629
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.grimtictac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grimtictac.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ef735ccf70000040300483046022100ae8dd08336e31672082b262c4a4ce6a19edb1b87aa25930938c1e79711675290022100cc196da6626454dd5cd98bd4411f5ef6dbc17dbf745b4a53443a09def1ab3f920075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef735cd2f0000040300463044022031637e62f19307081bd92ae89e223f3411da1a7f6d52bbe0cc50642d731899190220146c1be4ef39deb8d12ac004a113750677425ee44b57487d8f4bebe1fcf4ced4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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