oaconnect.co.za

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:34:f5:8f:28:b2:51:5a:e0:48:20:3f:e5:33:e3:cc was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oaconnect.co.za

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:34:f5:8f:28:b2:51:5a:e0:48:20:3f:e5:33:e3:cc
Serial Number (int): 4262663956573666231247638482140783564
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cd:38:75:c4:5f:7b:f3:97:6c:45:12:d0:68:83:7c:9c:12:a1:2f:85
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3a:84:d0:ad:d0:72:ad:8f:bf:0e:b2:d0:8a:53:d3:ad:8e:e6:73:bc
Fingerprint (sha256): f8:6b:b5:e1:49:9d:56:d5:6c:9d:44:dd:03:e2:e7:b8:d4:8f:93:20:a7:10:a1:7d:ce:71:17:ed:db:c5:84:2c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate oaconnect.co.za

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oaconnect.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oaconnect.co.za
www.oaconnect.co.za

Other certificates including the domain name oaconnect.co.za

(limited to 100 certificates)
oldnovos.com
ofaconnect.com.au
oaconnect.co.za
oaconnect.co.za
oldsedberghianclub.com
oaconnect.co.za
oaconnect.co.za
oaconnect.co.za
ofaconnect.com.au
oldsedberghianclub.com
oaconnect.co.za
oldnovos.com
oaconnect.co.za
oaconnect.co.za
oldnovos.com
ofaconnect.com.au
oaconnect.co.za
odtum.network
oldsedberghianclub.com
oaconnect.co.za
ofaconnect.com.au
ofaconnect.com.au
oldsedberghianclub.com
oaconnect.co.za
oldsedberghianclub.com
oldsedberghianclub.com
oldnovos.com
oaconnect.co.za
oaconnect.co.za
oldalleynianconnect.org
oldnovos.com
oldnovos.com
oldsedberghianclub.com
oaconnect.co.za
oaconnect.co.za
oaconnect.co.za
oldsedberghianclub.com
ofaconnect.com.au
oldnovos.com
oldnovos.com
oaconnect.co.za
oldsedberghianclub.com
oldsedberghianclub.com
oaconnect.co.za
oaconnect.co.za
oldsedberghianclub.com
obgsglobalconnect.com.au
oldsedberghianclub.com
opconnect.org.uk
obgsglobalconnect.com.au
ofaconnect.com.au
oaconnect.co.za
oaconnect.co.za
oaconnect.co.za
opconnect.org.uk
obacommunity.org
oaconnect.co.za
oldnovos.com
oaconnect.co.za
oldsedberghianclub.com
oaconnect.co.za
oldsedberghianclub.com
oldnovos.com
oaconnect.co.za
oldsedberghianclub.com
oaconnect.co.za
oldnovos.com
oaconnect.co.za
oaconnect.co.za
obgsglobalconnect.com.au
oldsedberghianclub.com

Certificate

The complete raw certificate details for oaconnect.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn2km2We7o5Z/XJ035aO
NLiTqFltkQB1+ZTK5U6/WinY+c0OFVQGllKGvRAC+fSKRcaZGL9sEYnoxm7Sq4dF
n0V7kJqYjf2MaqSWpbBliCFvUdqnl59zvlh8A62jxJFKy0EY4NebRz8OjBoxictK
DGt1QnT6Mx34FMYmWVAdRE03ArVYflsG3Ovs7Ama1pwi82HoPH04obaKiBaozdTG
iKFzBf0/IJX+gtBRCbxhhBjEZzmrGOIGFRBfrI3t1E8UnofYYBJ7PpWG1uuT0IP9
gPg2dSl9tg+u6ID6b/qtwMWkJro42boJxJ7XNWcvKmIt+qqtq1KbNL0TxHuSJSIu
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4262663956573666231247638482140783564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oaconnect.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25562094473719151375470855389340863236325869993908070443495054674619170441497568484376019142734580807396697990444607585269915522797751086330035547707829736491712637919048892414590353760110199690815675737109720216796529234782005496244385996370349320346177302094763772771176777835180897467660127906404154896596796390013851025838113583394248083138091803892364632726741424594869281198061489929102764156081318909140668979926456304669702295107083154061662513896782459948133380504254731291772543482288241996705262402645227012296479234687400638375078866793729470353876616800173078304283365111750113608503296505834593105096289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd3875c45f7bf3976c4512d068837c9c12a12f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaconnect.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaconnect.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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