DV SSL/TLS Certificate for www.blagoedelo.by

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.blagoedelo.by DV SSL/TLS Certificate

This certificate with serial number 05:c2:fa:4c:ac:dc:ab:37:c9:43:4b:b4:31:c4:54:24:87:51 for www.blagoedelo.by was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.blagoedelo.by provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:c2:fa:4c:ac:dc:ab:37:c9:43:4b:b4:31:c4:54:24:87:51
Serial Number (int): 501908913961028409719401937387586062681937
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 26:37:86:eb:54:5d:e0:c0:fe:99:32:16:bb:24:d0:51:6f:60:c6:b5
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 7b:11:0c:e8:9d:7f:3e:be:aa:20:3e:84:86:d3:45:c5:2b:dd:cd:e7
Fingerprint (SHA-256): 79:87:2b:b9:82:82:91:72:cf:04:f4:49:dd:d3:d9:91:07:fd:d2:2c:fe:06:8d:c7:b3:74:d7:af:13:da:e5:da

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org
CRL Distribution Point: http://r10.c.lencr.org/82.crl

Check the revocation status for certificate www.blagoedelo.by
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.blagoedelo.by

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.blagoedelo.by in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISBcL6TKzcqzfJQ0u0McRUJIdRMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTA3MTMzMjE0WhcNMjUwODA1MTMzMjEzWjAcMRowGAYDVQQD
ExF3d3cuYmxhZ29lZGVsby5ieTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK/42TCljGP6/IlQLip1yR4IEW777sut+7kKwk9Ng5I38v9/o/CGRVeJRtzN
xVPOKvmxb4YiqWCyHG7jVx6ytOcVsIyUXvPbyMoSb0vuSKsZ0BO6I+7Q3ldXbhK9
Orom7ucEcVpSTR8zNlyJwsakbiKQrqfnTYlhnbRimemHG7tqKIhDjmMJvbBpwMJ0
U0SSdfYhY9yFJZta0m86jPU0exsktddpQCblGQmA6d2i7O7ghlWYJgIuIiUwQ7lK
2Q+tARr+BlQ9ii7UJdflHtSx4x/OWS4bqYeTywvjFhdmAF0DYTJkybFRqnsOrKXu
Y/BaIThGGuz8di2iBlDTQ2iCMl8CAwEAAaOCAlQwggJQMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUJjeG61Rd4MD+mTIWuyTQUW9gxrUwHwYDVR0jBBgwFoAUu7zDR6Xk
vKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRw
Oi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjEwLmkubGVu
Y3Iub3JnLzArBgNVHREEJDAigg1ibGFnb2VkZWxvLmJ5ghF3d3cuYmxhZ29lZGVs
by5ieTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRw
Oi8vcjEwLmMubGVuY3Iub3JnLzgyLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB2AKRCxQZJYGFUjw/U6pz7ei0mRU2HqX8v30VZ9idPOoRUAAABlqsn9P0AAAQD
AEcwRQIgBvRe5GGNj+Hrb2pEifIOVBjXhLeugaTcASuebXEs9pMCIQCwg4GLZONV
wCl7Gc8W9O3UZcLsU57i71Rb7VB3zKU28AB2ABoE/0nQVB1Ar/agw7/x2MRnL07s
7iNAaJhrF0Au3Il9AAABlqsn9oEAAAQDAEcwRQIgWqPhDQ/i5gLZglpmtZaFoDz8
Mqhi9gIBXetI9n1fTNwCIQD9TqPkvFjCZJJ2QSnVIAb+tW5c+WYVYM+7B+VZc1Za
qzANBgkqhkiG9w0BAQsFAAOCAQEAb/hw2dTcRw6Vv9/e/lirsGiW7VCMsKsakvNn
04SUo6nQNDGtkgAAcDMp0p3hHBV8y6hYFVBr6rxIGAGGm6eaELwXcRsq5tyIndR/
tNn7du0U4ZKIo6bAM33ga3CSFrUbrmlEAjxydGSNArC4GUn4T4latmct1q5Mm+Gq
JvwE8n4AC0RTpUHmINMnsAVXnb8E0bF/0mKm17VpoKz/9JEZE+g1gQ+0agDueT1V
cBvdfm1Pvx9p5XsHyHmnAFu5BCJTDqSZqRSWekhyeZa1fI9ck07saOe3SFlCpuFG
WHFDDTq3qrFEYs7MsxjJTCcceLOyJTmnEezTDdUAlPKZ80/AkQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jZMKWMY/r8iVAuKnXJ
HggRbvvuy637uQrCT02Dkjfy/3+j8IZFV4lG3M3FU84q+bFvhiKpYLIcbuNXHrK0
5xWwjJRe89vIyhJvS+5IqxnQE7oj7tDeV1duEr06uibu5wRxWlJNHzM2XInCxqRu
IpCup+dNiWGdtGKZ6Ycbu2ooiEOOYwm9sGnAwnRTRJJ19iFj3IUlm1rSbzqM9TR7
GyS112lAJuUZCYDp3aLs7uCGVZgmAi4iJTBDuUrZD60BGv4GVD2KLtQl1+Ue1LHj
H85ZLhuph5PLC+MWF2YAXQNhMmTJsVGqew6spe5j8FohOEYa7Px2LaIGUNNDaIIy
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 501908913961028409719401937387586062681937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-07 13:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-05 13:32:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.blagoedelo.by'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22214415087908395858047340225011843319679010914921925407409476716806232165863768515817696752676572629042411293772477210146832641554853243181914236264432957337335298150548363882159294679830962646784889792059387870768665344596098246294070843911784780463290234540063936276280124822981204125767427142637376155574439488481893615264338903596421524109769535243705606691302183337050153234346252552095745979975782720245230692040404848251604710929093702469050598932968076755911856204236361233074929571747575338054218135372183632689300899713748826468711212455224843216097550661103136376690175149729785028502212383898775375196767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							263786eb545de0c0fe993216bb24d0516f60c6b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blagoedelo.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blagoedelo.by'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/82.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196ab27f4fd0000040300473045022006f45ee4618d8fe1eb6f6a4489f20e5418d784b7ae81a4dc012b9e6d712cf693022100b083818b64e355c0297b19cf16f4edd465c2ec539ee2ef545bed5077cca536f00076001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d00000196ab27f681000004030047304502205aa3e10d0fe2e602d9825a66b59685a03cfc32a862f602015deb48f67d5f4cdc022100fd4ea3e4bc58c26492764129d52006feb56e5cf9661560cfbb07e55973565aab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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