sann.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:18:49:8a:c2:1d:e5:55:ee:cb:40:1b:ff:c2:00:45:c3:f1 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sann.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:49:8a:c2:1d:e5:55:ee:cb:40:1b:ff:c2:00:45:c3:f1
Serial Number (int): 269601388719198095502881419047041761657841
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:9a:02:b4:a6:bd:02:f2:f1:1a:0b:1b:16:f0:d0:e3:54:e9:72:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:57:11:8e:db:36:c7:7d:cc:35:70:2f:0f:44:63:b5:26:0e:ff:57
Fingerprint (sha256): ce:e1:62:16:0b:7f:da:90:9a:b1:11:2b:5a:01:b1:95:4f:05:ce:bf:87:ad:53:50:6a:2e:63:f4:10:b8:53:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sann.co.za

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sann.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appsandplugins.com
arbitrageist.com
basketforvip.com
bbtft.me
bizbanners.com
cassgarbage.com
celevie.com
cottour.com
enhanceddiamond.com
frenzycharters.com
harpton.com
joblooki.com
lgj.co.in
mesotheliomaresources.com
murabaa.net
myonlineoutletshop.com
phpmyadmin.statenationals.us
rxsugarraresugar.com
sann.co.za
texasbusinessforms.com
v2prepper.com
whitegenocidefiles.com

Other certificates including the domain name sann.co.za

(limited to 100 certificates)
usc.mba
endometriosisinfo.com.sann.co.za
sann.co.za
firefanged.com.sann.co.za
9ch.us.sann.co.za
sann.co.za
sann.co.za
sann.co.za
sann.co.za
sann.co.za
sann.co.za

Certificate

The complete raw certificate details for sann.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQLebq4lF/8xYeg3EsCd
jJECes/M0SY+EXoDSKxJU4vdaVTsZ+OX7TNDGLBQUQqmJSLvEfVbb4HJ9tty0D8c
Nxc4wU4/Jwu73537YY7DTuwOYD++hOhWme0JgshxHcC3S5/zm1g1f1vAYNxQ3ZvJ
LnqFXamDouYDS1gE+B1svnKM5/N+01lQQhPlfzkPKThzYHD7PIVp/3kmIm7G/4/v
NLQZ64j0daJfaEkcqUXa3HfxpXeufDQe6oop0yTjgffNvkU6X8oGUfiVM9mAEbFM
XL4SNOo/O1mCgPEe/ID45hPbKx/2ADBUUdsEsW9XAK+hzK59Xq15tvEgSg1zk0JA
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269601388719198095502881419047041761657841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 04:28:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 04:28:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sann.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20830735015052630711529907330021502100772688389148485806990927016610644207635654798182781279320141810086828295757843851702990394224838524410358056686838335172714177189700374443148566879135163713133596943813827242012949921893660962980917468101778879385623548580905187598682212874952644467038132398348427183509162482576572304176640822852020020744053996327314588446475871490711115492385081781859985466571779369038867350917623243109203940090083775939557782929419426572085134982369924991387409936309072531728345129790562390293069336432663074314255163050773308789641182864424211827582239339985058503731819173415515978875013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa9a02b4a6bd02f2f11a0b1b16f0d0e354e972a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (399 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsandplugins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbtft.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizbanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassgarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celevie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhanceddiamond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenzycharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joblooki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesotheliomaresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murabaa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myonlineoutletshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpmyadmin.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarraresugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sann.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasbusinessforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2prepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitegenocidefiles.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d443dc9de0000040300473045022100c7dc1edc0023c47d0b304726831fe088d2c771cce70a1e9bd9a02c705bf6972d02206f431c7ac3d185848bab3f6a1c18753d6f639e337f31dbaae7c29a4fef908e2f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d443dcbdf0000040300473045022100834faa6a81f71bb85b939c49471dfa97a8d64bc5b430b4278384f0e69216065202207a99ba4cb2bf33adbb60beb2a9f4c9f57532cc1f9b1def1b8ada52dc936be7f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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