ussf.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:50:92:8d:f7:af:c7:09:ea:57:26:5a:af:94:1d:87:ff:5b was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ussf.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:50:92:8d:f7:af:c7:09:ea:57:26:5a:af:94:1d:87:ff:5b
Serial Number (int): 288754251573879168190968311167384598085467
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:30:c9:ce:1b:91:70:35:bc:c3:8d:04:63:9d:c3:5d:4c:db:d2:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:0b:38:33:98:52:c7:a7:f6:92:c5:38:d6:4d:0f:ce:8b:13:13:82
Fingerprint (sha256): 23:3a:c8:3f:b9:aa:78:fb:1d:1e:64:a6:22:7e:43:9d:b0:1f:c6:1e:9f:1e:11:9f:a5:51:0d:db:64:8d:e7:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ussf.co.za

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ussf.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boredwine.com
dreamingpixels.com
insest.com
look4vip.com
mygirl.fund
nhsenators.com
psychich.com
reguides.co
swarmbox.co
urbanfaith.mobi
ussf.co.za

Other certificates including the domain name ussf.co.za

(limited to 100 certificates)
ussf.co.za
ussf.co.za
xbone.co.za
ussf.co.za
ussf.co.za
banneradvertisingservices.com.ussf.co.za
overcomersrecovery.ca
ialaska.com.ussf.co.za
ussf.co.za
overcomersrecovery.ca
ussf.co.za
ussf.co.za

Certificate

The complete raw certificate details for ussf.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK/Uj4zjgPxeXrKaSzXd
f1+Xk7MU9HmZQPG0xVivUnzrKkiZhUGMk6R1wkm94R3ENvCP/3aitOaKS5hiS03r
Yf2BBQ3qtNl/2XTrZQEzPiEHTK1VH00FMmvObLU1fNlnJwlcbRMB18+fndZMWL5c
MojtPnvVxA/ypAVuR0xyCQ7OmCsHVZC+ZbyHa9F1WS4zrc+lPMOaG+mCPnnd7NxT
W8l19+CItE2opo9hkIGu+YGBPStOJD5ktT8B5u4OorHuJgpiTQB5Rf/6Fq9P9dVE
nWJyYtqm2Nqf649Ci6kzWR1h09cn6UQgH84fVCogXSfbMH2FGRK+b0t9ltdJ7Zj/
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288754251573879168190968311167384598085467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 01:38:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 01:38:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ussf.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23819506493690528803208333039732992886954459356783816844659189577800040084693278640748009891467880023611354154450182300187788690990993776024000378466469964253038150616867765071087533611908137277771485066224298120336633302182157831365679426510384282211493394466237640462685615285652987555019501840802753818875774264763950491324557233001244351147298474293667940374631581960177632361758272789469060598146707568129872213083995253238480134730128763152541316870195119222414954857278296004180363325424285698529125063884819789421722391788479403151015775851036391335623869744295050289380324496980429475997147034204901694046169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9030c9ce1b917035bcc38d04639dc35d4cdbd279
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boredwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamingpixels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'look4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygirl.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhsenators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reguides.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarmbox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanfaith.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussf.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018edf9f1c120000040300483046022100c7c207ddd89222de44f53f7f54d4f629a5136f203412457490a7982ff9b5a788022100e89193ace1faa598e486dc2b8eb9839ef1c06e751cad7ecb5f6948d9dab90ee20075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018edf9f1c1b0000040300463044022048f8b785d9216e1cc9f1388ea48994f9cfc466f572b4ede5705efe2caab8edfb0220688a1a6329acb4818e3187483f0b61ae8d8ae3254de13217cda79c469955de54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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