ufx.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:45:99:5f:e2:b6:4c:73:d4:e7:38:a8:4d:15:07:b0:cc:34 was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ufx.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:45:99:5f:e2:b6:4c:73:d4:e7:38:a8:4d:15:07:b0:cc:34
Serial Number (int): 372132496794410150398143716809185409682484
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 73:9a:9e:ee:b6:ad:68:b3:09:d9:44:5d:57:e9:2b:99:d4:95:f9:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:71:cd:cb:be:32:e0:62:94:5b:22:28:58:00:e9:e3:cc:18:8a:b2
Fingerprint (sha256): e0:58:dc:5d:ba:0a:a1:bb:62:cf:58:02:97:d3:63:72:23:16:06:3b:86:76:b0:64:82:4d:34:65:e3:12:97:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ufx.co.za

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ufx.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantagebasketballacademy.com
arbitragefreepricing.com
blackwallstreethere.com
campinghq.com
centralvotes.org
fijigo.com
hempeast.com
housingbargain.com
inspection.sammamishliving.com
latemen.com
liquidproductions.mobi
mississaugahomebuyers.com
monsterventure.com
neocity.cmtasphere.com
porschecountry.info
signsofsupport.us
texascampdirectory.com
theequalizerinternational.co.uk
ufx.co.za

Other certificates including the domain name ufx.co.za

(limited to 100 certificates)
ufx.co.za
ufx.co.za
stemdenver.org.ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
filetminion.com.mnmeetings.statenationals.us.ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za

Certificate

The complete raw certificate details for ufx.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36g/osvAyz9/q9lnCkov
FUlNtr4w3CnsLEBl3vOjNBLtZMVSVcS70jsQkrmz0gU7kQWjXMww18XluVd1dzD9
k9FibafnjMeELJSa2uqeFE3+uOYiwYQTr4pc5u2mQVj2NACDyH5F9GUVbUHX/B7g
Rmu05nTJoB52z9n71YigJtHVNhEH4mrtgdMirrT2tiLhjS2I+gEs0/MK820DieK5
VJq6nm5UGWTNqP4LWOmHmLSkATCjIuTod6cytYqGDh+IqMIYsYHVeX6EijuB6xud
WhWRAnFSW34AnP4/doR59hfUTe/h2z//NnS6WG+iVYuCGcitMb1g+fZ5ooD+OB6E
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372132496794410150398143716809185409682484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 16:00:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 16:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ufx.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28234108473355886506675412202864909263493282715774149352230640555869547966678734333073638289727971883617876252169892231869689440229801716287855380644587277696332595139656383472173522019594179362562322488483908999435069207144275907802298145028354079910857522527875056292079723459844850698227411805479805117597575141494586584548774044338937588958736188796940081226677671839561654506694341980424196887980285008121858173428556219442677607518481800541224255658726006174881614921173008309834441105049647461845686759788357223261841912188528976642937056370420022604515640873733294938245232845066120706849364283510222718141609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							739a9eeeb6ad68b309d9445d57e92b99d495f924
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (414 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagebasketballacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefreepricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackwallstreethere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campinghq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralvotes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housingbargain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspection.sammamishliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidproductions.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mississaugahomebuyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neocity.cmtasphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porschecountry.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signsofsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texascampdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theequalizerinternational.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufx.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ee2b38bfc00000403004630440220356708df8244bbed6db8a09e0e2b1b60bcab7d8d77a19ee2851549de3f61b19702206aa7198023b3f0931ab955fdada8041a919819c7c2f4e139be3a87e3420c537d00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee2b38c29000004030046304402205573fbd7c237cda35f0e50bdbe12c1bc051798a3a393de6bddeae3f6e1a1ed3f0220152f2a87f742a76b8e5ddfe24175d330e29af9eab5901a3c3e950cd91a717d56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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