DV SSL/TLS Certificate for *.leafo.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the *.leafo.net DV SSL/TLS Certificate

This certificate with serial number 06:7e:43:5d:cc:0a:65:05:4b:a4:af:d1:20:19:67:e4:0f:52 for *.leafo.net was issued on by Let's Encrypt.

With 10 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.leafo.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:7e:43:5d:cc:0a:65:05:4b:a4:af:d1:20:19:67:e4:0f:52
Serial Number (int): 565638839120360264536502490932889962942290
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: ae:32:7e:5f:54:c1:a7:dd:be:a7:6b:78:17:24:cc:53:5e:14:77:f6
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): bb:33:37:be:2a:c6:5d:22:f7:42:b6:45:dd:3c:4b:b0:74:57:34:b3
Fingerprint (SHA-256): 0f:ab:5b:7b:ce:ba:8f:ca:c1:f0:d7:04:49:92:6b:49:0c:11:d0:3e:33:22:c6:c2:6a:2b:0e:e6:3d:a3:ce:fe

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/83.crl

Check the revocation status for certificate *.leafo.net
10
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.leafo.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.leafo.net
www.ase.leafo.net
www.games.leafo.net
www.hiyruu.leafo.net
www.noclass.leafo.net
www.ongakujunkie.leafo.net
www.pp.leafo.net
www.ragnar.leafo.net
www.scite.leafo.net
www.soap.leafo.net

X.509 Certificate

The complete raw X.509 certificate details for *.leafo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gtK892je7mHK/MCUh4z
7TQlvPHFaAWtft7XWUL5+pJVGqlQotzlVjrQkxeHOJDxP8rhWTKxFOniZJ44qYxz
UvVIsSqXa+KXD2+/3pWxbZQKB5jeTRExxfJNvVJnpSf/0q4nzFg/TgV17Tq3p0Vu
kysWSWEMdI5VEaerbUK/sGx0MLKWk4T7npGCZgBF/m9jNZ2hCyWi4+IEJLT6SKoP
EWj0Jk/Q/wUjpX2gpVaTfZLfcHY/02WgzC4Xig/ShXP/LYTL+KzjwP+ssCYPuJUY
PlRzt/ezyB+Y77+JQv2nf0WAlizMhvxLf2J1p4ovofMu96VvKeHjsJir7zIfecn/
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 565638839120360264536502490932889962942290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 11:47:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-03 11:47:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.leafo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27020565941875459866367451498203880711484693711444226314635404453887879892944151900696573748360630045012193563248275491832383042080685368417335047596398841521825305382130402697025973506919124122982161435197563230359796246061506241270858310644906383437206154233842235765277636680074850436480617975021913232935336824627632891855126217915548079358186411287907862029076746919320947405141166392941836400007622839170725216168429076941745101599381318664780359101376486503602692616108484915161139926956196272366281845633705423659921110015699263347790662319691528660656259234554263521221209206712252875057088950581711346466777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae327e5f54c1a7ddbea76b781724cc535e1477f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ase.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.games.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiyruu.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noclass.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongakujunkie.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pp.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ragnar.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scite.leafo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soap.leafo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/83.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b800000197da9ed648000004030046304402200ff332fac219740372ce1c71443cdda0c93a339496ed618cadf847692df822f50220738fc555302710896d26b67903ae0f0c9fb63f71c7aa886a06cb40b5b6828a11007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197da9ede150000040300473045022100a36f2206ea0fdc3b0746a6544d33a9d44744f894e4d178698725ca29355aa79a02204ac4319d8ebdfd7a49292dbb200b6955af9a6c43abd4b72c42c60e8421d14c79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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