DV SSL/TLS Certificate for weim.se

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the weim.se DV SSL/TLS Certificate

This certificate with serial number 06:c4:d6:96:e7:aa:d4:b0:5e:a3:b4:62:7e:ad:06:39:a7:16 for weim.se was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for weim.se provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:c4:d6:96:e7:aa:d4:b0:5e:a3:b4:62:7e:ad:06:39:a7:16
Serial Number (int): 589654297841463401050419963773711290050326
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: fc:06:a5:90:2b:14:5e:ec:b5:fa:b1:87:a3:e8:fc:18:83:a6:38:1f
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): db:47:76:4d:b3:9b:fc:23:58:b0:d9:a2:71:88:81:bb:21:86:7e:30
Fingerprint (SHA-256): 42:94:4c:a5:fd:1a:56:f4:da:59:07:8d:4f:61:0c:be:50:47:ac:19:cd:bb:a3:e7:db:4d:20:6d:01:99:18:8d

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/23.crl

Check the revocation status for certificate weim.se
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for weim.se

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for weim.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ3soj9AlTf3pCEh7jZo
ZzSW3fcf2TiqseCd+U1B9SSUrb3ltc/uc4NeAa0JoF/OKbkKo7FYFTvN1FKuHAZ2
QtAsbeV61g/8TVA4159hb17w6zjnrZnUA5QKgz2DgujhD63MOIsTD2WgNqV95LMX
xPUwDYUQodZ2Qj2b1P0pOgioWiFpxZtQE/GB9/7RXWqs6kuEGuiCC1NymJSj5QaE
DGK3JTpZmhyJGIu6u5H5fTsAO9GSqUf0q4X2fMwHBVr02DuiM/LvFcMYBaxamd66
VAjjGplULgo2x/xT+uG5OOTUeYMOA/uN3xz7e2mHQyeQWJ6880rgwJGrZN00Bn8B
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 589654297841463401050419963773711290050326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-21 06:12:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-19 06:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weim.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24441868258232402432668614982349560776947513701965666499870260685905473165610900680022917890002906070025832775111188909921547761350119831364465402811851878288985294199645235236490646659286624462881985653045495073403984398313596685541204936663899138797712278917344726447281086533025636947852790469718369780210087083907576267690146503049113249186485481302154591068177497452442921789611958411961169202991201453210791688186491140737228409497405017427489637763186006355276265271362663871760818186643683440784451967302237609177829721592798258811990220850624447003463406647659418095231805363084938873964845842873223240155533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc06a5902b145eecb5fab187a3e8fc1883a6381f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weim.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weim.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/23.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196f1ae8f7e0000040300483046022100ded2088ee12041afc609388959285b5f32cb18bbaf4af2a7e2286824d542bfb2022100a8f325a57bbda8be53939e591f136635758fabb11e1ef79c0d47be35b09739210076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196f1ae8f6f000004030047304502206485c8ac64b30fec281e750cdaa4588d4d71883f748cd06c135f19faeb0df308022100fda05cf156b2534db16e84d6126fd1fa2700bf522d3db3a8d5708ae96b5aae44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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