capals.com.parcel2go.co.za
Issued by R3
About this certificate
This digital certificate with serial number 03:37:c3:97:8b:6d:ba:50:8c:76:77:2a:61:1b:3d:54:33:cc was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=capals.com.parcel2go.co.za
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:37:c3:97:8b:6d:ba:50:8c:76:77:2a:61:1b:3d:54:33:ccSerial Number (int): 280312374299884518995391403662383835788236
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 34:60:72:a7:14:e0:ee:c0:36:7b:f0:f4:5c:3e:14:68:0c:3a:70:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 8d:6e:0d:ba:56:48:ac:31:a4:45:ce:96:30:b8:ae:0a:cc:39:3f:17
Fingerprint (sha256): f2:9c:26:fe:79:59:02:51:b8:5d:71:c8:c2:43:eb:c0:37:9b:62:78:bc:b4:a7:fd:d6:9c:9f:ca:bc:a5:38:e8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate capals.com.parcel2go.co.za
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for capals.com.parcel2go.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aboutstl.com
atlfamilyattorney.com
bestweddingproposals.com
capals.com.parcel2go.co.za
enerpactoolsgroup.be.readingroadmap.com
myperfume.in
northtexascoolingtowers.com.abbamusical.com
ohiolube.com
theplanagers.com
atlfamilyattorney.com
bestweddingproposals.com
capals.com.parcel2go.co.za
enerpactoolsgroup.be.readingroadmap.com
myperfume.in
northtexascoolingtowers.com.abbamusical.com
ohiolube.com
theplanagers.com
Other certificates including the domain name parcel2go.co.za
(limited to 100 certificates)
Certificate
The complete raw certificate details for capals.com.parcel2go.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAzfDl4ttulCMdncqYRs9VDPMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMTUwMTQwNTRaFw0yNDAxMTMwMTQwNTNaMCUxIzAhBgNVBAMT GmNhcGFscy5jb20ucGFyY2VsMmdvLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA63X2B6Gv8ZrL/Vq8ZCVPiFk/Smfkk9Sh4RNLWkiZs+jx+X6v yR/VwjdPXi74AVnmYmi9QJt9W91Q06Ko3XumqzJ+hmBDRrLOZZNg+lw0WNORMyTj pK+2VLZweEPMm43hF42je0JJNrQFYBeyPR+VLBTKs4bElhXZeuxLeF2nz9belYjY Oock5rZ5jNUvC4ql3bGmO0u4zkR9bJahGDNx1/XgDlE6qCGqzOJbM6kmDOESBpc8 QTAxwy0aowCqCSheFe08kiPkYuqj061+hGIzGCJbzCNsQ5G93fqV+6AL2j5a3eBC dchPOANidt8iSHeXrVD0QmpmbM+lLFV+1KTHNwIDAQABo4IC4jCCAt4wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQ0YHKnFODuwDZ78PRcPhRoDDpw4zAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCB6gYDVR0RBIHiMIHfggxhYm91dHN0bC5jb22CFWF0bGZh bWlseWF0dG9ybmV5LmNvbYIYYmVzdHdlZGRpbmdwcm9wb3NhbHMuY29tghpjYXBh bHMuY29tLnBhcmNlbDJnby5jby56YYInZW5lcnBhY3Rvb2xzZ3JvdXAuYmUucmVh ZGluZ3JvYWRtYXAuY29tggxteXBlcmZ1bWUuaW6CK25vcnRodGV4YXNjb29saW5n dG93ZXJzLmNvbS5hYmJhbXVzaWNhbC5jb22CDG9oaW9sdWJlLmNvbYIQdGhlcGxh bmFnZXJzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABizE1 PREAAAQDAEgwRgIhALUpzjFsLZDROQsB6C8qVhj3gFszg2YBpmwwYCyuizh/AiEA u0QrEoxSPw4ZRcx8WRrigZ+vtVqx3sIYfjG2wdT7/DMAdQA7U3d1Pi25gE6LMFsG /kA7Z9hPw/THvQANLXJv4frUFwAAAYsxNT0QAAAEAwBGMEQCICAYsdxl41TIAo7j 1bnkSEWt+p1NJk8L9Eh+k7iylXtAAiBWAMhwgpMUythzhFadQu0mJbIEB9TE+bh4 is2FS2mtyjANBgkqhkiG9w0BAQsFAAOCAQEAoXI7NQJD6rOlW21n+6uHekD7s3/a Qpwdt44GX8LNeeA46FXmsD41YYbEvnlufe0cnzSlPv7MyjTKlVUoJvBSLA63/k+a 1Bsvz2ptVm5Jr+JJUhgvyhS9iBFjiEiTws/adXIbflf2kkeBoLExYvKogE9X3jak VgEy+UyEjAgVzxzlYL3a9j6q8PnTO96Ppxj0ShRAeLT3Msix2jL2uLx5cV/RFNgK T1k41ewNa6SavKAnG/e3KGvuBxI0gPCzZz1fAG1R1K9J8/yZ+7h5mRHTFLvlOM1R 4be0CIK4GZapGWosARY3uQah0sbuO0l7SsFp2QerzasTADC6xjTuWJC9OA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63X2B6Gv8ZrL/Vq8ZCVP iFk/Smfkk9Sh4RNLWkiZs+jx+X6vyR/VwjdPXi74AVnmYmi9QJt9W91Q06Ko3Xum qzJ+hmBDRrLOZZNg+lw0WNORMyTjpK+2VLZweEPMm43hF42je0JJNrQFYBeyPR+V LBTKs4bElhXZeuxLeF2nz9belYjYOock5rZ5jNUvC4ql3bGmO0u4zkR9bJahGDNx 1/XgDlE6qCGqzOJbM6kmDOESBpc8QTAxwy0aowCqCSheFe08kiPkYuqj061+hGIz GCJbzCNsQ5G93fqV+6AL2j5a3eBCdchPOANidt8iSHeXrVD0QmpmbM+lLFV+1KTH NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280312374299884518995391403662383835788236 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 01:40:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 01:40:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capals.com.parcel2go.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29724170430705459422518825329854141705664578338258816145738286181951227305962980224503360499355523415207001165268999818954756430072095117661912671470413101140062544190386218771800994641313706575238401543476507298318050594081531228818203645931375500344631961210505493405475011342816107031406335960982754147442495019051098106904877747195156865266540158714882388779660143295128122191770447139277212309682677076453951781201675061317120064729527307917354118206585022408554045500621278576833384956726338682469571456629708859890798907341809973557558278160545396632158167109753694471510717760827274380210719832687038041474871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 346072a714e0eec0367bf0f45c3e14680c3a70e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (226 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutstl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlfamilyattorney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestweddingproposals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capals.com.parcel2go.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.be.readingroadmap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfume.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northtexascoolingtowers.com.abbamusical.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiolube.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplanagers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b31353d110000040300483046022100b529ce316c2d90d1390b01e82f2a5618f7805b33836601a66c30602cae8b387f022100bb442b128c523f0e1945cc7c591ae2819fafb55ab1dec2187e31b6c1d4fbfc330075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b31353d10000004030046304402202018b1dc65e354c8028ee3d5b9e44845adfa9d4d264f0bf4487e93b8b2957b4002205600c870829314cad87384569d42ed2625b20407d4c4f9b8788acd854b69adca . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a1723b350243eab3a55b6d67fbab877a40fbb37fda429c1db78e065fc2cd79e038e855e6b03e356186c4be796e7ded1c9f34a53efeccca34ca95552826f0522c0eb7fe4f9ad41b2fcf6a6d566e49afe24952182fca14bd881163884893c2cfda75721b7e57f6924781a0b13162f2a8804f57de36a4560132f94c848c0815cf1ce560bddaf63eaaf0f9d33bde8fa718f44a144078b4f732c8b1da32f6b8bc79715fd114d80a4f5938d5ec0d6ba49abca0271bf7b7286bee07123480f0b3673d5f006d51d4af49f3fc99fbb8799911d314bbe538cd51e1b7b40882b81996a9196a2c011637b906a1d2c6ee3b497b4ac169d907abcdab130030bac634ee5890bd38