DV SSL/TLS Certificate for milanomedia.org

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the milanomedia.org DV SSL/TLS Certificate

This certificate with serial number 05:db:88:f4:e2:72:55:d8:8d:ae:6d:cd:53:2d:9f:eb:14:36 for milanomedia.org was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for milanomedia.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:db:88:f4:e2:72:55:d8:8d:ae:6d:cd:53:2d:9f:eb:14:36
Serial Number (int): 510265314535230136763041636755030367999030
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 24:87:08:88:2d:53:f3:60:4c:df:c6:4d:3c:f4:be:93:66:a3:42:b0
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): fc:09:2a:5b:ba:d2:66:a6:4f:e8:e7:48:2b:c6:1b:42:93:11:63:b2
Fingerprint (SHA-256): ba:3b:72:03:ca:99:53:08:d5:2e:ca:25:97:c3:6e:73:6f:c6:9f:0c:59:ac:a8:33:5c:7d:5f:c6:01:95:38:34

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/55.crl

Check the revocation status for certificate milanomedia.org
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for milanomedia.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

milanomedia.org

X.509 Certificate

The complete raw X.509 certificate details for milanomedia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdh9oiINKdG2LAlV4TSa
kUdQ8wm8XDZ7yhdtu05OxIxFlgFC3CsCr//fNavHU56T/jLjbeEnkclVcl2arvlD
iv2TlQ7DdKbbIlxMqRKirw26w7pIZzekxcBEL2KFUxnVRBGd8UuuyY4vGxnquHPN
n+Ng8ijiatxpa1n/U/VJv2KllU7lyCSuhtowU7VNSWTe+/Ns6ZcVPC+i/df2Ubib
6pk0u9kB+Kxty2IqvNre/XGiXvOQyaQ3d652sVKgImPFcS56dK25y6V6/vbVeG8f
CC/UIC51ypx7ISkX7A4jOBU3MLYLZLJHagec293UalFIpUYxsMQylC9NnKIFL3Mu
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 510265314535230136763041636755030367999030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-09 21:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-07 21:35:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'milanomedia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23965795208810492010104469937009420078770204838136458252681545700120435024180348979556837147747824597501721963350160543709590546842871347802495839964874295199850422106067237846303476815152053257790888441728135150038835671065656898427840666788951028407091205079434940476525662575808703798642329204452916948586912626928460534008156749552072649407843077942490677028794428468270864734941425005515118607725593536840080191520852334631546032997585984868438638188808161961524651318471794725244709049816956354190767925099689817557814939451098445801871671615260449417056742936350408507946070720791476824776272260042124210417251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							248708882d53f3604cdfc64d3cf4be9366a342b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanomedia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/55.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019756d4b68700000403004830460221008f79ac5972d1d8f4c52573190b072c2697863864a5437cd7ffc066097ab200f0022100f513894e65ab85145c069048982ecff70417ca8edc88ea3ff81bd1613d99809a0076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa340000019756d4be1a0000040300473045022100f36505a945bc05c6307c1271eaed397c7abf418e8a236003375a213777e26786022050533a986f4cde9aeff3896805a4425774160fd656edfba2b8b0330b1b672d6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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