traintickets.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:06:20:e6:76:19:b3:34:e7:50:26:37:24:bd:bd:43:47:54 was issued on by Let's Encrypt.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=traintickets.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:20:e6:76:19:b3:34:e7:50:26:37:24:bd:bd:43:47:54
Serial Number (int): 350534569848069696752562839467318332049236
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:01:dc:0c:3f:ef:9c:6a:ab:8d:8a:e3:96:a1:19:1e:93:8d:77:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:e4:eb:1f:c7:35:59:ba:1e:82:aa:b7:07:e6:d5:df:a8:b5:a6:a7
Fingerprint (sha256): f5:70:05:31:b0:18:48:ae:9b:29:9f:69:8b:26:10:2b:29:60:57:ee:f0:a1:8c:36:b2:c5:ef:9e:17:19:61:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate traintickets.co.za

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for traintickets.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliates.cool
authorizedhealthyhomerealtor.com
banneradmgr.com
brakerepairhouston.com
buyknive.com
cabaiguan.com
cashforsilver.in
celloexcerpts.org
comicbook.bible
connectri-digital-equity-public-comment.com
egyptian.bible
eliteallamerican.com
farahhotel.com
faviconimagemaker.com
gaysexstories.org
goadentist.in
gradingwizard.com
illinoisartist.com
meatmansauce.com
mounthollyfirewood.com
navita.in
niederwald.com
office.meetingwithric.com
ourmissionslaons.com
profit-from-inflation.com
retirementwealthplan.com
saretirementguide.com
summitparkbiblechurch.org
theweinerexpress.com
tickets.noncompliantamerica.com
trader4vip.com
traintickets.co.za
universityonlinemba.com
virtualipmanager.com
webfest.in
wepdr.com

Other certificates including the domain name traintickets.co.za

(limited to 100 certificates)
traintickets.co.za
traintickets.co.za
traintickets.co.za
donnybrookwrestling.com.traintickets.co.za
ateliernovako.ca
norwoodwater.ca
traintickets.co.za
mygrinder.ca
traintickets.co.za
traintickets.co.za
traintickets.co.za
traintickets.co.za

Certificate

The complete raw certificate details for traintickets.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgTmJ4yLQsxMYLUf0Ujm
xJ/LY4TjcqnI2rwEf2sfxoNali/UIyk+6I71gaDh8f9jis8iRWUt/JI00FeSfz0w
ZKuSYtIzIBdB/7dUHIamG55b5T1ef6Ll0Tm/AyKRunQyt0AbFzUYqWjmMc3DrDsx
g81Bi96grF3Jheki2VwztAhu44CAavKTDwIIK2ZjIseITnEWN3tp7HEYSTj21/7V
1DYcbWQRvMrmwn+lYCFu2kQOApaTj511Mj80CBc03N6PELp0yOhlsMahsa19Xldo
aZhqwqw3nUtyPLCR2ey9oX2MTC1802IicC64PxZZy1XNbAwiT2krk09h0GtM08C8
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350534569848069696752562839467318332049236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 11:07:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 11:07:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'traintickets.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20957974431506328472628813582683745068106111410040886020673544630799194058996851433604476320436758853324213325680167106266301393805558126378287541067870148203636631754168398211469522141210045818933160006539553901530425701082522314707168821410165614109941321343844642547984952755319190962627327568716235964705024079393301328922108498482407832219156449508972639929703596888539556846488455760900235845128938976342938236120404859895885091470186729996300532455900125487115297612420318653257737055304967673137618846421162492852376641425770166367082106622128088325738082245220059054583288592963047195617849325284580078435339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6201dc0c3fef9c6aab8d8ae396a1191e938d77f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (756 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorizedhealthyhomerealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banneradmgr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brakerepairhouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyknive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabaiguan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashforsilver.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celloexcerpts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comicbook.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectri-digital-equity-public-comment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptian.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliteallamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farahhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faviconimagemaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaysexstories.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goadentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradingwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatmansauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mounthollyfirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navita.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niederwald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.meetingwithric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourmissionslaons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profit-from-inflation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementwealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saretirementguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitparkbiblechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweinerexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.noncompliantamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trader4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traintickets.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityonlinemba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualipmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfest.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wepdr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7e5089d2000004030047304502210083a95dc9f28c3a91972bb47f4d455a2829306ea3f5ffe788a7cd2472df3f437d02202a4a6d51ab9b5b31323844eb8eac621bdf5bd46ab32f0c86f16e05dac0f3b678007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d7e508a430000040300473045022100861854256cafec07de6365e7c824d9273c232dba247c6598be3eabbba71d744d02200f27e892c67ac7df1aab1d3fc9c7790720e494638c0165f8fe95399bcba2bbe4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061ac49c7dfb436e8411d623a486699c85d7581b5cfdd68e5bb7bbf91398f4d06bc922d36d027e9b3291921987a4186d6c98f0bc8cd7faa4969b003c88f4b20ef0e67f2c14d39eb1cc003a910633e40c749373675efaee05588fb65fb262d8f7543af05ef2ee52612b96edf34c1af0a8569986349629e50b501c1940c7d8d64288d5782b4f873eea308f0d9c95ecb5750c0bd797708cbbc2b3fe14bdfbc406c8d445f3b16345fb68170cbc5e237e493544cf4330a067e8d936cacd024286fee7049e176ce0609466dc1d8db9c5385b8aeb4a3b91aa323a259a18a90514e3facb47d4526621217e5324b16a204d232bf7dda11e808ddb0f2ff271fd63d70a26d2c