DV SSL/TLS Certificate for ddcandassociates.net

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the ddcandassociates.net DV SSL/TLS Certificate

This certificate with serial number 05:b6:d0:9b:78:d0:19:4e:7a:d9:71:1a:e7:87:82:32:89:2a for ddcandassociates.net was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for ddcandassociates.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:b6:d0:9b:78:d0:19:4e:7a:d9:71:1a:e7:87:82:32:89:2a
Serial Number (int): 497770107117924811226066791276772068591914
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: f3:09:2b:ef:27:c3:b4:48:b4:48:20:30:d0:bf:16:1d:e0:39:b7:c4
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 7c:75:ee:bc:eb:5f:b0:46:72:f3:b3:0e:dc:57:24:67:2b:8c:fa:ae
Fingerprint (SHA-256): 1c:89:93:89:1a:83:c6:18:51:5d:0a:0e:4a:24:f9:60:0c:8e:ff:68:c9:c2:6d:8f:da:ab:2c:5c:62:a1:4d:db

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/43.crl

Check the revocation status for certificate ddcandassociates.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for ddcandassociates.net

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for ddcandassociates.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 497770107117924811226066791276772068591914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 04:27:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-18 04:27:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ddcandassociates.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688827659903174901566991056035689329782499790575587682992556871340601929355860641123640634847720712460058425095119407319554343616315408942559582755204290661666117138813835240930267301494083566501661509174702699055914022127890582388070683743351908455325973402777473727529349766429406722477557743352913604602202548748021317073425296876813093737486323932700282678376180646071203103223032580867894432024197431945007588018320882277797815045615090531175767434954252081740925692703227323923460337520172276339906394306522225336857906911063508201263778787364741481845047083167478226712303968604011565987864688608650823999191939159861657726408759139843921977229008642587909451353110931278704476341045670876987729124496543698054908854996107242278326358166317650376692015037969309047228932870027740084340482159718797755125354257299567803320292708972237626112161016726647364586263810349217171493876137216689893165787294375552773516670331168508716953876110577522577872956667033732150999726654278496103028488637765022604806210777095446387266534824611767308170264495988046019184514598328602631530387097585584897058092316577998986977926379899367685068642382092380739229928254303230075475490261769220473382613555766087172042742372655211552468090550157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3092bef27c3b448b4482030d0bf161de039b7c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddcandassociates.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddcandassociates.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/43.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001978bcd756e000004030048304602210087b7b7bdaac9cbf438354f82f8b262a0936117c49a781b1060ec7b8a290d29eb022100813abc2ed82f314e2f6161887c8f19e77c5e3a34add68d52213b62bb143d1f4600770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001978bcd75610000040300483046022100a6097d8fa1b18023c4fc7b7afc4e4c8e5728db50af3838707455ae566c27173a022100d0d7bcc5b34efbd6153dfb81322dd9d5d41ab02807327665dc33f5caf67d8670
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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