DV SSL/TLS Certificate for *.performa.is

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the *.performa.is DV SSL/TLS Certificate

This certificate with serial number 06:b8:12:b2:99:57:08:38:56:df:55:66:7e:ca:79:76:15:49 for *.performa.is was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.performa.is provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:b8:12:b2:99:57:08:38:56:df:55:66:7e:ca:79:76:15:49
Serial Number (int): 585310524546883168329648808352999976342857
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 36:9b:a7:a4:7b:96:12:af:c8:58:c0:54:3b:1a:a4:df:e5:3e:34:46
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 08:68:24:c7:9b:7a:ba:68:13:ce:9e:22:29:85:17:c3:27:af:db:1b
Fingerprint (SHA-256): 81:94:71:6f:d4:a7:5d:ce:ce:dd:a4:06:39:fa:5f:53:4a:b2:c0:bd:b6:d4:d1:55:28:88:7f:91:99:af:ef:c2

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/74.crl

Check the revocation status for certificate *.performa.is
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.performa.is

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.performa.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QnRpCr/enGYJknb1PX4
wc+CNJIwnHnc/dWdm1Np2W72H1RPMo/6h8PXuiNqMmUSBEf5ThO4ZdKIcvKaueq0
x9nULE85mcOjGBu5ewO2G5ZmtMgHTJ6S6W/Nowt4emIeFdyWWy55j35x9//cO5CG
HBRRl1xoK8dfEC1VNbXkAzz1VLd/xupCjbt14llSMWFjalwcFw+pkRtfGlI1c0Ad
WR2q6ceReVjJn22x+wTyprYkvVAtlLMIR7KJyz17W4CaA38jm9c9e4WpNcaiAeJw
lPxBcFP7EVfJisJvjqwcTWutRyL4eNpznMnYYcOKjjPJbMS6Ddqi72w8PE2qMPYA
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 585310524546883168329648808352999976342857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 06:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-29 06:39:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.performa.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29923320162554928761707379789469479430897884312928849422398913128801586607242708249864730617812366734242020240081823006016768781510902409284011957567022017832941961235210591191399066585780176128548043783176326338755207062753335117979892129169303418992478997895445159340890396277099788168879619332914828983934298831796417633592894282613645530064181919599325341247823428795888309794105556074887966275838309080365352193687256447828851584551024259703826703176151732656323906102765526513259180075562377287042726796913088684984429145502831941373816221924254252433128600483377836773349999222623253188007282456140067219308737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							369ba7a47b9612afc858c0543b1aa4dfe53e3446
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performa.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performa.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/74.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019725465bb60000040300473045022100d54feaa44c866a2d720a0dfc86f9a37d06c451fa00108136cb76c3745393e66f02200e6378c4c88afd8170572163f3d260df247b8d973db6748dfec3b7845e248455007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a8454000001972546636c0000040300473045022100fa15e6ca30e3ea35b2b65dd0135779fe316e603f9253d6c8f5fd023612a88f280220404687d20a35378b2c3b86ee64d9953ba0071333bf54ba9a808baffbec594782
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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