thematch.co.za

Issued by R11

About this certificate

This digital certificate with serial number 04:00:8c:86:89:48:17:f6:9d:e2:50:72:b5:30:e4:34:d7:7a was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thematch.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:00:8c:86:89:48:17:f6:9d:e2:50:72:b5:30:e4:34:d7:7a
Serial Number (int): 348635934198631878173474049474028878747514
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:f3:c8:68:99:b3:70:2b:37:43:11:c7:cf:9a:e4:aa:15:b1:9b:cc
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): ce:40:2c:0d:f4:ce:3b:6f:b4:06:38:70:01:44:a4:0c:5b:a2:21:64
Fingerprint (sha256): 74:cc:4c:bc:bb:4a:d7:7a:6c:cb:6b:72:61:97:62:57:a2:53:e3:fd:a4:b6:ad:47:bd:10:21:49:88:a6:08:9b

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate thematch.co.za

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thematch.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afilio.com
africasogood.com
agicrispr.com
aierika.com
aisororitygirls.com
autoworkshops.org
axischiropracticclinic.org
berkshirecounty.com
bunkside.com
diecastforsale.com
dognutty.com
donnally.com
dumptruckcrm.com
flyoverpillow.com
gopvideographer.co
haba.co
hollywoodhounds.com
insidegovernment.com
kgj.co.in
lunachorus.com
mahergroup.com
mattswheels.com
michianascrapandmetal.com
nanob2b.com
neohgolf.com
okr.co.in
palatialmansions.net
petitesanonces.com
prowrestlingbanners.com
quickmarriage.com
reservationnow.com
rxsugaralluloseinside.com
saintlouisschooldistricts.com
sanibel-captiva.info
schizophrenicnwo.com
shalabh.in
sweeney-aerospace.net
thecarlaconcept.com
thematch.co.za
uslegalkits.com
wearetheprey.org
wildaquarium.com
www.shieldtechmonitoring.com
yellowmedicinecounty.com
zinnia.email

Other certificates including the domain name thematch.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for thematch.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+64wrt7yNl8CG7CNokY4
sBAuUq16JyyTP7cbx5nPEcDDBjUbIhi6Om51w3hJ1rIZ360OzHKLTpiQn1SSDFqd
zcvQb4PAns4fKBcK8eMkjD5obPuaLelXaDfGNUL+vlJN7fYPrqQTA7sb4htajJdY
3Cyp09ij+9/coUpebd+4099hcu16+5lHHwGmYEQJnhO1Vq0Jwaw/neYPPg7RF12C
5qlHSq20VqiPuIzVcrie0bmkCpAJ8MKY41oNxaj3E3Y/rEA3iwUgkqnS0KmuP6l0
65e+gLj4uuL9ywK2ZJGQOhy9eiRMnyc5vjr06QNB6TYR3ToVatQIUo5ACSYm9Qpy
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348635934198631878173474049474028878747514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 03:10:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 03:10:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thematch.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31771710919879960208286869920748872292252644748136891099991033212975886343085408209033338759627085675973234902048134362962420997375453559090207610701966592791126078412953851999196707410751391655263841326994215560656161975289923403232680030821600007558060991363213459122400412433789490681037458002475479233072485460055075178785109913283379022475047420083999579477596703872484114148611377749297789259373771309305918817546347209009919459984795770005235892117109999937824898434335090784313406527566382452241401193867497230584870861526986394144485939707762724807534552034619495551205886159359395167950202781518060193477371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8f3c86899b3702b374311c7cf9ae4aa15b19bcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africasogood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agicrispr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aierika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisororitygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoworkshops.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axischiropracticclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkshirecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunkside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diecastforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dognutty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptruckcrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyoverpillow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopvideographer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haba.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hollywoodhounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidegovernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunachorus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattswheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michianascrapandmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanob2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neohgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okr.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palatialmansions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petitesanonces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowrestlingbanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickmarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservationnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugaralluloseinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouisschooldistricts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanibel-captiva.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schizophrenicnwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shalabh.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweeney-aerospace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecarlaconcept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thematch.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uslegalkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetheprey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shieldtechmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowmedicinecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.email'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff60a19310000040300473045022100ccbce4ed22a9d0649ba08e82c1c9f49f56768dedc3faa89e44aeb03d3f1d59ba0220569216b64b9ccc6b22b830e1745a79d57d5a530f7a342f11c4e647b82a3f4a4f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff60a19290000040300473045022076470744183b3c714b1e1efe8fb19b894dd9a4c40579ee20370bf2e52a2bc76e022100b39bc2001b074adaa9b8401bb36c05f368fa547ea4f2391cc783bb1389c05427
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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