www.theelephantcamp.wildhorizons.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:28:42:f4:97:da:d1:87:4e:6e:e4:f7:09:0e:e9:0e:1a:72 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.theelephantcamp.wildhorizons.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:28:42:f4:97:da:d1:87:4e:6e:e4:f7:09:0e:e9:0e:1a:72
Serial Number (int): 362149437452014247592523989897873716025970
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:d0:b3:91:fe:e6:22:42:9f:61:a5:dd:c7:4e:23:84:0b:db:d9:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:2d:36:99:66:c8:dc:63:34:c4:7d:f2:e4:f9:5f:b7:9a:3b:a5:38
Fingerprint (sha256): db:dd:31:5b:c1:63:c1:7b:a6:54:ad:07:4b:9d:a8:ac:9d:88:f2:55:49:a2:fa:bc:97:51:6e:ed:d8:fc:94:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.theelephantcamp.wildhorizons.co.za

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theelephantcamp.wildhorizons.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.theelephantcamp.com
theelephantcamp.com
theelephantcamp.wildhorizons.co.za
www.theelephantcamp.com
www.theelephantcamp.wildhorizons.co.za

Other certificates including the domain name wildhorizons.co.za

(limited to 100 certificates)
development.wildhorizons.co.za
www.theelephantcamp.com
wildhorizons.co.za
mail.theelephantcamp.com
wildhorizons.co.zw
mail.olddriftlodge.com
thelookoutcafe.com
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
thelookoutcafe.com
wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.zw
www.w.wildhorizons.co.za
olddriftlodge.wildhorizons.co.za
wildhorizons.co.za
mail.thelookoutcafe.com
wildhorizons.co.zw
wildhorizons.co.za
imbabalalodge.com
imbabalalodge.com
thelookoutcafe.com
imbabalalodge.com
wildhorizons.co.za
development.wildhorizons.co.za
wildhorizons.co.zw
wildhorizons.co.za
thelookoutcafe.com
wildhorizons.co.za
olddriftlodge.wildhorizons.co.za
www.thelookoutcafe.wildhorizons.co.za
wildhorizons.co.za
wildhorizons.co.za
www.theelephantcamp.wildhorizons.co.za
thelookoutcafe.com
www.theelephantcamp.com
mail.theelephantcamp.com
wildhorizons.co.za

Certificate

The complete raw certificate details for www.theelephantcamp.wildhorizons.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64zI5sQT39MqwbOHZfWz
g7xOC+SrHWuJZKoc2PXlOTkIRG/313ic4sbBzCDNbI/h4g/DnEv+VnJmhYhTBM/Q
pFHzMMdO39WDmWtkdhU4ntiUyXwQuu7jNCuAGzqWHJFlRog/AuJDyc+uwM94IcUg
TIBlLH6iyEYG2o1T+buivRtRqg/ZQ9PhwzIMotDmGfiG1oXNrRFPEE1zrD+fNjT3
jn6whVVDh7sBShzHX99YFnFADjURnVFkBTa/2X0ip0qO9jAV7CAtP55BvNIIviBj
ZbEO/P72ySWmjoQsEfKfL4CbLzdvizrTa81vJa/mKX3ndFaeMQs3PfSbaM8++uG9
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362149437452014247592523989897873716025970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 23:59:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 23:59:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theelephantcamp.wildhorizons.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29735425225158193523252193554748105307002772413870873701084277248854713700458248523534113417179199042620127591636387232170133335513258851994806316962895480435690737684995088351761040508944720509878262311817451787833522822348221579450082142814678186962654117582503099246169585717075077629763235255060591881871974881268605801997384086978940740451089078501011407580565985397597983448596792527708710611229553425259341967515433954417194808382178387591179099583141311392181327415456520512730060514971851745579056137321054380381219193185173118722536352424662000175246847127775549396835887031680485966735861270248386461810101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7d0b391fee622429f61a5ddc74e23840bdbd99f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.theelephantcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theelephantcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theelephantcamp.wildhorizons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theelephantcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theelephantcamp.wildhorizons.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d71a1020d0000040300473045022100a1fca06e9012f1c1cf08bdc825e01c4c40d4b1ccf68fcbd387e395635d2fe9af0220180b8567cbeb568e8df56b2a573255b8102ca0c1e09e85f63414c8e924a9143800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d71a102f0000004030046304402200c84aa5986f41a1b7e58292b1ec57003afb660878b0e09ca043ac7375f1e3b410220438bfc565ac77252c9bb44c8acd02bdf7040430cbad0d5d98f858ff4f44ffd97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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