DV SSL/TLS Certificate for uprooted.me

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the uprooted.me DV SSL/TLS Certificate

This certificate with serial number 05:0d:81:37:cb:09:fa:78:87:6a:49:30:21:be:3c:64:60:e0 for uprooted.me was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for uprooted.me provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:0d:81:37:cb:09:fa:78:87:6a:49:30:21:be:3c:64:60:e0
Serial Number (int): 440156860534676626788218796631146543472864
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: fd:d0:94:10:a0:a6:43:bc:5f:e8:7e:78:e2:44:e2:6d:8c:ec:77:78
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 41:3f:2f:72:62:9a:83:1d:64:2f:63:9b:00:12:09:32:7a:b4:f3:8b
Fingerprint (SHA-256): ee:f7:ec:44:f3:c8:f5:8e:8d:66:94:a7:2c:7b:70:7f:9a:e5:7c:7e:50:7e:60:cd:28:52:a7:71:16:70:c4:24

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/97.crl

Check the revocation status for certificate uprooted.me
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for uprooted.me

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

uprooted.me

X.509 Certificate

The complete raw X.509 certificate details for uprooted.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAXoyl4TnaXxzrBPvefk
7gco3WuMupmVmUa8noqoZXLjLrtptFIvFEaO3jNdlyvdcuEZiOPp0TUMCO7jQdsP
XSl+skdWzNt1Q+db0eJLaGKhdxBMQEC5WgAXaAjICxg8MnhRJKTZq7uYwyws6gRx
4mDhAIKLfpX7MyfSzVO9MjF42Xp2aqtb9moopCZ8H53+5gkgQD41U5K3rXAYKPPJ
eQ161f2GCqurxwTIEfYF85+ZHPFpS4qUDWaY/9sIE88C4LwIYuW3S9UgkdRNaxuA
94pSTrmwGJGMniUUJTbYTXQeCOA0DjHdIc4TtENjSDxyoQd8pBpBTM1/C9OYgiwC
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 440156860534676626788218796631146543472864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-23 08:18:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-21 08:18:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uprooted.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19191136357957299968346185685541199412191940863983706061455733721144916940388726162093940223249851057247460395454031694553506547425922546643441825199529080458482613668909572938750406837281075331923835515325502203803654701307177768005423105090973906420899892662912247583753362747385564366190051119278937609649074304458406482993377495184601534727866235908595691802222053385426931712623489644763395263487343568672686700187248349031458255956240522358880696374782414082803345704362157989744916439711016017928484255152445278978483555580382518690382339776063951699177616361637060886920755342468035294944897330132156293055213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdd09410a0a643bc5fe87e78e244e26d8cec7778
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uprooted.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/97.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001979c14081e0000040300483046022100b84730d109b484f21a743ec1e147fd09e1836de792428ec16353c2748ddf89ed022100a0802b3a2e99e8ceacd24f767ab9cb06ad9a72599ee00845b4a739bdc5f325f4007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001979c1417d1000004030047304502202ebb761bdddf7aa17791d12dbc5d57224be7691de0b8f3928e7fa5d8679b8b4d0221008093e98824b156a498f360f51cc3f16d83260966fd9974fffd344f2bcbae9d9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005dc3d4c089badbc54bc3c887a5d692bc093e2df2406d1056f7d59fe2aae6963c46587285d35d144f9fc14f7379f021495b2108f896582b26ebd73808aebffb3a0891e578ca8f6bf78a069253f1c2737a9c9de79e9b9ab73d2314c67c5d5ad41c4e3cb941206caecef65409c0536c1cd8109a5f7a1a493dd27ceb4ac1d7680e4d9fee225048804cbc8c5ee30c5743bc75cf1e0ab4f7b24cc366a4b969433c7071976f200f9740f38fb151c6dd4f27e5175872ccf989792aa97584608e14a2be137ec96638923cd8ea84c3bfdf53711045184ac82726d660b7616e93d9f4dccfc8bc479b94f3680f6df74761b7cbfd0dbb99e010efcbf3a1697171e66b199f8f3d