DV SSL/TLS Certificate for pemacon.at

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the pemacon.at DV SSL/TLS Certificate

This certificate with serial number 05:a2:d2:95:aa:72:7d:0f:b2:e2:cf:e2:99:5d:c7:dc:b3:e1 for pemacon.at was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for pemacon.at provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:a2:d2:95:aa:72:7d:0f:b2:e2:cf:e2:99:5d:c7:dc:b3:e1
Serial Number (int): 490967088088420366089102881168340492792801
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 2b:77:50:c7:6f:13:05:1d:7b:c1:32:08:67:0b:9f:f9:8c:1c:44:3d
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 5b:f4:97:12:d5:b0:b1:95:f7:21:78:3a:41:83:8a:7a:a6:b4:43:92
Fingerprint (SHA-256): 6e:d0:87:16:2e:0d:cc:77:e6:5c:97:34:ef:96:77:11:47:b5:02:c2:00:26:b8:e2:c8:4c:f9:22:c5:be:8d:6c

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/98.crl

Check the revocation status for certificate pemacon.at
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for pemacon.at

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for pemacon.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 490967088088420366089102881168340492792801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-27 01:28:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-25 01:28:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pemacon.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750110437751308244272446011800225260628119375930331390630659202422083732246216594072225662600018443017317330134942845626577933350801773073024990895031483283289508272945809241607190325019009859580569400552850262995649152057345207523652845025383515337221869569936999061648771142375447885818450176349595152937635007256679690818060290446455899468499593025661750984146643394635123705034801640370015174092389425346288626732966901868436238866629641744647780825033429552978391810971394993401925810670986450397681926324682152017922041640207226599117212752478104682076525990174657438370785358971855372964922561369667897928636434605253345474407896745719658015749014902022692326037071170710448955553520473369241256946791398046232235152744356597603402936107258454385181415970325189650876032987895946819453522064692784746734726173521267682274192514801760459096881597325204171916944937664914779938230058702476287081832450276271584893430643973455975996397234922412975992384093689601136574159931117861774868373272268496046126523871104883524900050799163085735687431992791050695878846777896521441415721269184305797936446560327921187626989460090682331280014103234645804731724225961738687351644919137194031277223644745352267752326455614882057059676384447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b7750c76f13051d7bc13208670b9ff98c1c443d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pemacon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pemacon.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/98.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197af356ab30000040300473045022100bf760f40cef32041d369d6292bb8d2aa6b76ab8a6ad77551cd96467950fdd2680220100d698979c4643e0b30296712dc3beb9e361924dfc5a4a5c652f83f7c7fd8730076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197af356ab500000403004730450221009d2dfaaf03d75b50578fc42fb2e2b0f1131c11cbb55f500538381a02c8a2c94f02206d3cc12dd780d6f9f65a9de77cb8fcb462f70992f226f8233acc654df9aee237
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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