uoz.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:95:72:99:be:49:61:0f:f9:3b:be:a5:3d:a9:0c:c0:4b was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uoz.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f6:95:72:99:be:49:61:0f:f9:3b:be:a5:3d:a9:0c:c0:4b
Serial Number (int): 345244970069330157370644473057502338793547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:0f:07:0f:3e:57:6f:0b:99:c3:39:25:48:67:40:a6:a5:2e:84:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:39:c6:80:bb:0f:48:b7:0c:d0:66:e0:c4:ea:a7:6d:9d:1e:30:57
Fingerprint (sha256): ed:51:40:3c:04:21:d7:58:d6:44:0a:3a:ef:3a:2e:fe:e6:33:ff:dc:e5:e7:ab:67:32:ec:52:3e:97:8e:d2:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate uoz.co.za

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uoz.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adventuresports.in
agenames.com
bathtubresurfacingmyrtlebeach.com
bexei.com
classified4vip.com
cuffusa.com
lgb.pw
lifechangeplan.net
nationalhomeschoolconferences.org
ngj.co.in
palmspringscalifornia.com
picocloudconnect.net
reducemyhealthcarecost.com
stlreferral.com
superholdem.com
uoz.co.za

Other certificates including the domain name uoz.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for uoz.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllnz3TMmIkAQ9ATQokRO
YlS3oMSwDevzKXU9z1DnaOFoEWnGPH85dDEPYRvvhxapYPN0y4UATwxl6ELZApJU
yELscMJdwsBp2vsb6KWVz/qSGNMkt2GI54I7IzYaaRL8UkoSzLupTSaPiEGmIwJ9
DMToRFyfVS1gDMKX6Uvdn6iZuft9K1Kbhp/g3mOdEGX0+zM9viBlG1DcEHjJEKVM
G2++ngrqW2TERdht2IpprxhIyNGQOBAMhuIU6AHXBAXp5aHqv4RFFMDZCeSaMiwe
S5HiwoXotLPlHokW44kKi0kjLyjyymxPjMb53H00//9l1YfvBIdnfdl/SCcKMzLi
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345244970069330157370644473057502338793547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 00:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 00:48:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uoz.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18980103022224169643050648476560159995226115336689307569252323830984285115510020225095978549628914127200197267962543511524217408266837073331286762335997641519614153392166339889980816249659970902412488358880946572160778147161292142532963032207587054111483045442802319042931640354546897050343083579968736674868061866780182571769292635382221483785019042185211681853671746895303621524160671247095326484772121867566220664785878650372272262689398824386679900693573417956362222124789998325630622722139060828954868020467321345860397409621356424987420336757776865776543409842712579297654133116959802504544099610384078432559823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							330f070f3e576f0b99c33925486740a6a52e84cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (313 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventuresports.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathtubresurfacingmyrtlebeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bexei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuffusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgb.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifechangeplan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhomeschoolconferences.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmspringscalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picocloudconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reducemyhealthcarecost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlreferral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superholdem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uoz.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef40a72990000040300473045022100e3ccd5981db335c41f2c63affa146040078b93f062128b5593ab8f1c6e2b06170220069a2cab3a9244f9e8e26b1326686cad6f78f1ec117f377066c121d2d583990d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef40a72f00000040300473045022100c3b621eb0ea0ed2b8a1c0ab45755b48bf623ba5fa3268601efdd727e22b05198022017750a6fb526c7a4144a3d4e02fd3e1f09f5a9fec68b184dfe6c57782a6967d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b1601939f6d6db55ee481b685118d45d2cd0876a92db479ac0000be9e260a1e7e06ff422fdc50a8ab979a6f0e9a54e55812fdb62d683dc667d5c5202d257f24afd25c5b121c8f2eba015aec7a04e566772c61546d1df01d4aa371fe437b9631c67b3130e9adbcbe65da861add02a3845c102adc5f4ff01d0c21d56dec9ff6804771e3f1642dfe7ddc8c6475d83f6e47d1ded68c2b3a37f64b8ba206897b096750023b86fa38e3560566c8c57ea579cf0f1b813508660bcbc26cfb13378b6985dc49e6aa347f7418e2b4d933428660ee53866d1917ab4042b7d8f4effb8f680c41935bc3c248221c73cd36c54226ae16d1713a0d68b03dc98919afbab172aef1