DV SSL/TLS Certificate for irr.com.ua

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the irr.com.ua DV SSL/TLS Certificate

This certificate with serial number 06:7e:ee:27:c2:f5:f3:a3:29:54:46:f2:58:f0:01:89:ba:e4 for irr.com.ua was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for irr.com.ua provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:7e:ee:27:c2:f5:f3:a3:29:54:46:f2:58:f0:01:89:ba:e4
Serial Number (int): 565865856539447784144042889859904861485796
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 68:d4:aa:45:ad:5b:ad:1a:3a:11:0b:60:6f:22:c3:6c:e0:26:40:17
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 3d:d8:b5:14:8f:2a:a8:0d:90:e2:e3:7c:02:e8:6a:8d:04:08:42:66
Fingerprint (SHA-256): b6:43:ad:5d:50:13:b0:ae:a2:fe:86:81:a3:08:d7:5f:6c:d7:39:7a:6e:73:55:0d:78:b8:ea:eb:69:fd:2b:e9

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/101.crl

Check the revocation status for certificate irr.com.ua
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for irr.com.ua

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for irr.com.ua in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQvq7P665fP5ptj/bGmp
9pJIZ8Fr6qUfwZj0H3IEVo7QUqnqoW6gfV8qgR5PQFO2WpvDfQbvEkvSx5O5jlWW
c4aU+AJ4zPPwRcRFOXh/0d5EyYt5+ZxmPCoxDA6ry/BdZO1qKKrG2XSioQJlairr
kPvUbFlySJuIWglfaSCov7Vlx+pS7o3Wo4tVsgoLcGtJh+bJHyL112MRjN72u4r5
Z2qhPs77rzbIgx4TKBuV70d6BrvJnmMfbPzo1gFAVDeuKGpkZqA/06qwQ57PblDM
5ki9ajd+TwBFJWFaJFejOlQ63/6ONOUUHZQ6qFS2vt5D6k6MVXWb4o3FJjcZUNCC
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 565865856539447784144042889859904861485796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-28 08:12:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-26 08:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'irr.com.ua'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23359963245148397244443677720671959412737741323269399763614558024331386611599153110310382439343944097707087398081981080586656194418167702771900519914855271019761380557303423630496087916049652811076814395376447674973535595805672862822350411979301654175349857607302591798084557643637414877251770824521620065932517036866190978524733157114681792059987255052064196395838579352735977307364459074001187790006680421023025992189373726504060320893506664358350562985086284242694292932951638860751900866461568958627343178783697922996025888589948094157261443130967156327836009954201171536608490226133948702467199959898025897263749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68d4aa45ad5bad1a3a110b606f22c36ce0264017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irr.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irr.com.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/101.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197b5ce171b00000403004730450221008840b15fe4718dfb7c9629fb92b121732f8eddb8ccd486f1f406e4b3e87e427202200b84382de2d5e466930016e77592a83a2e11b1215977f0d3b98cff22f5e195ec00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197b5ce170f0000040300473045022062176815a4b014e0009894e7d2a9426c5c0cf09e412ef62d73e943a4f2702138022100c83bb049293635e8826efda10ae7c971445ee0a358f51badc7288e87e53558b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a005f230c303247ea978b6aaa59f72d7b98472fcc350c4359f0616bb6dcf73a2dd6f67d9245d7db88eb1d68dad32ed25ab2cc8a913aee2211a889558489da6acb9953cb81a9b08be194f86f24b783091c2bb625d268231cf5e90c1296a7f7464dae7af26f4733e7e2688c9a1622b6bae97621875f90b92223934a352717ee2a50e9a936eebd9e4afaf03e0ce704e8fe87f25acae23e3bbd7dc03aba73e4ad1cdf1e612afc4c50edb92cce0f0d01cd4cd3bebac6a75c61371f1e2de4dfffb95324ebbb9cd5443a8713bce2d4635545a6882d3f509dd87780e8cc8830b82feea2ce4a36a52a6f818821b69becc8e6b9b496113e2b1fc5348c40bfb47351a18f259