saaj.co.za

Issued by R10

About this certificate

This digital certificate with serial number 04:23:e5:31:d5:a3:db:ce:56:cc:2d:0f:6b:e0:ca:36:2d:27 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saaj.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:23:e5:31:d5:a3:db:ce:56:cc:2d:0f:6b:e0:ca:36:2d:27
Serial Number (int): 360663678535990109482552981843835574693159
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:03:b1:d1:ba:b3:0a:c6:62:5f:a7:da:2d:6f:05:cd:fd:dd:a4:28
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): d5:ad:84:56:54:d0:95:f3:d2:e6:aa:d6:82:e0:7b:bd:4a:93:60:d0
Fingerprint (sha256): e7:6e:45:7b:b1:bf:b9:5e:d1:5a:ae:ce:24:f3:05:4f:b8:80:c5:4b:d8:0e:38:e8:f4:71:b8:e1:44:b2:eb:db

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate saaj.co.za

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saaj.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantagebasketballteams.com
basedagora.com
bloodsugarcouncil.com
boutonbleu.com
bufotoxin.com
cozumel.info
deannewton.net
dexart.net
download.stronginstall.com
dreamsbylandbug.com
fourwindsdesign.com
giftedthimble.com
hoffmancompanies.com
jimkever.com
karaj.com
mayerresearch.com
nowindian.com
pantyfreak.com
podcastaccessories.com
returnables.net
rihas.com
ronhouse.name
saaj.co.za
safeof.com
sindhi.in
ssmaine.com
thelocalhousepainters.com
thinsugar.com
vernoncounty.com
www.freedomprojectschool.org

Other certificates including the domain name saaj.co.za

(limited to 100 certificates)
movedandsecond.com.saaj.co.za
saaj.co.za
theplaygroundcase.net.saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
vedderhouse.ca
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za
saaj.co.za

Certificate

The complete raw certificate details for saaj.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGnPykzX+siJTFfDxj4x
dzrnlMEQHIiZYjI54WDda2W1YPHRk1y1OThenn2u0iPGi4hIrKzi5gJ7o71H113a
yS3hdqBR4MUuO81Y77TdyCdjXg5JFMZ9AN+OP+2OS7FSceUdc2PKBhFW9IHuJX9x
rHsoKKXMC/81O8G7jPyYKHw+CnDtu7Ik5Wnw9FhaoWEJ21hd/Kfy+S4AZf3Yl517
eMG5PqoJzJlyNSbNiEbXFzcLOFuqCp0HNc8WLnhlU9ZwzHixm/YwlerWkECxTA1g
onOaFPB+Xnz7O5SigsZ0jwh76dJJeAycSDNoVdBddQEC6gOHPc3iSDrdd3VL3slj
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360663678535990109482552981843835574693159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 11:36:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 11:36:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saaj.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21765166138557648454451666229065470941144132848620831094547710188728551441480391099126770784733367109926109745974217300746096300014996236802736551119791357523771272465001615120530851878624334549119642977736899230130635754142909958798796454952033337359670782393826101924927244863295609390477095047320352724592130202235802964445478606772950692805293039767080210799997046543539086487168991070916080684747707364867584761878178987482872858837361693877601227160881050013751664232016379161960191743789497173358715499838677410295439255767384564867012254181294725298787156981949360539554801050063671628268101934879591260316559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e03b1d1bab30ac6625fa7da2d6f05cdfddda428
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (537 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagebasketballteams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basedagora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodsugarcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutonbleu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bufotoxin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozumel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deannewton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dexart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.stronginstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamsbylandbug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourwindsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftedthimble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoffmancompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimkever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayerresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowindian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantyfreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcastaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returnables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronhouse.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saaj.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sindhi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssmaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelocalhousepainters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vernoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomprojectschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff7d9ce04000004030046304402202bd1fde92455f10f34f07c04a485fa8023409ed44c40c016762ad3eab56ab0c9022044b8f3c640814fcafa2b8f5a417fe67a07e62aba951077c471e6c25f26018c41007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff7d9cedd000004030046304402200e182e9785ffdb276a93d6930580a31323c2ed3ef6b74a5273b03fe0b4daf5ff0220581740df03288c0eb27fa353f8fa8e269533848c6bb54bda79ee2d58e1e9cd37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d327e733eb4a4969b4ed2aba11da6b15f95b441a80afa47571f8afdf088cb0cfcfd4a94f3ef94aa7e79231e4e100ec04f46b8b0e24c9e9278cb2cb82a81518fb626ff4ee1edc0d75ca1f7a62d185ca20077992d75acd7de6757fc80af184387023a7e1ffa71ee254fb5b77be36e7cf043005aff7ab0ee09b4b65e46412aec500ff9b3eb6312d1500378fc89c4af186ece07b7a63337efe5061468f2dfb364ae78c91f65bbf86370eb04e00a83a9b80b130cabddd80f2a129982f5a65bc84b724bf617cc2f177e00e5f6bcec9fe1bd2ae11dcf5382344801995f40b4a40ec54ccb6d2b160a684dbcdac989528b511c709431e7902ef9e045348b66e7dcfe2ca3