thematch.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:27:3c:0d:14:7b:1c:49:77:01:00:0a:9a:04:1c:24:96:0d was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thematch.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:3c:0d:14:7b:1c:49:77:01:00:0a:9a:04:1c:24:96:0d
Serial Number (int): 274687691700205606376204520239964726007309
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:51:84:3f:cc:ae:81:05:e7:58:dc:d9:63:d1:21:37:db:c9:02:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:f5:da:f9:f9:54:65:23:62:f2:e1:ab:ab:1a:83:c3:36:6b:a8:b0
Fingerprint (sha256): 8a:2b:28:d0:ac:5c:aa:5e:6e:4f:a3:3c:70:d9:c5:ca:7b:8f:6b:51:97:a1:80:72:9d:f4:6c:e4:fe:bd:71:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thematch.co.za

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thematch.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acro.in
alpenacounty.com
aphasiology.com
arg.rip
backyardblog.com
bestmiamimovers.com
bizbanners.com
bryanct.com.1stcommercialrealty.com
caffeine.co.in
canibuild.co
centoff.com
cingulatetherapeutics.info
cubacitytours.com
digitometry.com
docksgrill.com
eproject.in
faithfullyeducatingusa.com
freedomprojectschool.com
gaydentists.com
gaydivers.com
hellraizer.org
hemptelevisionshow.com
hyalutronic.com
iwontcomplywithyourlies.com
jabless.org
jewishstudynetwork.com
ladyboyquest.com
lessbroker.com
lifepetitions.org
marketersadvantageprime.com
miamibeachrealestatecompany.com
mrcreampie.com
museum.bible
mypoisonivyremovalestimate.com
negosystems.com
parkersburgtourism.com
paversealdeltona.com
plymouthlawyer.com
renovationrealities.com
sawomennetworking.com
shsadi.com
siam-invest.com
tgirlsasia.com
thegatalog.info
thematch.co.za
watch3dtv.com
whoisjamestopp.com
wtfproductions.com

Other certificates including the domain name thematch.co.za

(limited to 100 certificates)
thematch.co.za
thematch.co.za
thematch.co.za
thematch.co.za
thematch.co.za
thematch.co.za
thematch.co.za
thematch.co.za
saxa.co.za
thematch.co.za
thematch.co.za
wizardscript.com.healthstaff.com.thematch.co.za
thematch.co.za

Certificate

The complete raw certificate details for thematch.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxG/M4dgCWPEgiscl0UO
138Smu2s3tMl4XdnD4r+qyZwljJBIXljMv/F3OeYX+xJ6Ro5AaZsaw9sDgofOERN
1sjGUAAvA/RUref5Ee/nnOj2CtFYcBSuFaGd+15pQIcXDkLPX+Bq5ox3TbXcH+og
7MF8R9uz0oZZ65rq7rd1u5JDCjwgdow2Q80hJQqASXEW5JZVjeub8T3l8x0cKqJP
/lRHfNR9OZEL0XBjyzqvacF1os33HDbj8FuBlVT06PI1Rwum0ebA1ZCMH4mnWfah
MTsIgpsumXoZe1FZIrj50fMlf3oGE7+Uk8fmQafJpeJjwBHx3n9geNTRmTt0Qqa9
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274687691700205606376204520239964726007309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 12:58:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 12:58:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thematch.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26140080440676521805922845807942992618560632568386010892857934121265521709703451022263986950275215364733405349690226492318604022815503114758836866647185213043897599003198578098422371045121663038590306813119745627913696292211424114090258718828628197476758658725277725512254650826449685418839403312975134186045836899984908305523045049778913305015705744235901972069824237494610261163478514954974647168957868147322546716675207967467676731023615584349645785106301059624447881195541769511991111513609971974192272370780733197761334506872103803315018336847419796637139269479329911962842188556454988500229468775039092553858421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e51843fccae8105e758dcd963d12137dbc90238
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (935 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpenacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphasiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arg.rip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyardblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmiamimovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizbanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryanct.com.1stcommercialrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caffeine.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cingulatetherapeutics.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubacitytours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docksgrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eproject.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfullyeducatingusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomprojectschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaydentists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaydivers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellraizer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemptelevisionshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyalutronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwontcomplywithyourlies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabless.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewishstudynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyboyquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifepetitions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketersadvantageprime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamibeachrealestatecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcreampie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museum.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypoisonivyremovalestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negosystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkersburgtourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paversealdeltona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plymouthlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovationrealities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sawomennetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shsadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siam-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgirlsasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegatalog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thematch.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch3dtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoisjamestopp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtfproductions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7eb668ad000004030046304402201e9203bc08c761a8330f590e8e4d30a172d9e385d6d5c991dcd87f8b5275f94c02204f7ed1486ae3c0f9a2b7172ddbbfedabdb7543a2245d3b5d07c0c5ecb430002a0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7eb668b60000040300473045022100f614d35b00a1dfe4b9d8021ab940fae66c03b2a13b8a1408ba54ffd071fdf22902204a1dca3563c8be1d2ea7404fcd5e6c3abd5ce74cec3b9f2f8892bf0887f38c85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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