DV SSL/TLS Certificate for xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai DV SSL/TLS Certificate

This certificate with serial number 06:0b:e6:a2:2d:c4:c9:10:b7:01:54:61:63:44:5b:32:3b:41 for xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:0b:e6:a2:2d:c4:c9:10:b7:01:54:61:63:44:5b:32:3b:41
Serial Number (int): 526723386146112794981809992059392583940929
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 9f:1a:0c:7a:c0:50:69:ea:a6:52:3f:bf:89:ff:e4:96:c1:d7:0a:ed
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): e6:e3:82:09:73:ad:da:34:a2:03:ae:85:a0:38:c8:79:59:28:13:ae
Fingerprint (SHA-256): 7c:df:c7:f9:ff:0f:91:4d:20:e4:9a:b5:8b:5e:16:56:42:14:ba:47:13:e0:59:e7:40:81:92:c4:9e:58:f6:c4

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/66.crl

Check the revocation status for certificate xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvSnkuUxvzRpKoQPu160
gLYAYB19+yalI813sGbjlq2yGyE3SN7O/iriiblgTsdVukiyar1BXcSmZVO2DW+B
IWS100PtyGTTAWoKgL18GOCsOMZEnT01KVJ9mbTa6JzrVa5jASqw9y+r/17lM10Z
MOMyIeyZTOJNXjas3EtkPbTooyGG/bG+lfxNi3Oe/Qm89Mpq4vN/tH4It4f34jCH
E9EeJO1c4QS8se8wLdpnn4NKAbmClAwtGX0HK4YJlSUuNY2qclYYwN6CE996x6H+
RtzCzRNFVsxW/mbekepxJvF7bH8pHY+yDtDE8slzA97PEgVR/ZxeJJVQuZrU7xl4
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 526723386146112794981809992059392583940929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-27 04:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-25 04:41:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25620781275554373822292270743258949070022835899320126135580474634199114326756135889802934506080128569424431388297085948264856668274243546340059389889073385929240911473799549783037566931557371273116742327023735141262167456257210829895392098442555934713299975872386906213849494851923246573733098070858857106416931553196491071951039933838311362418207060844996588522191846693640952105637474522517552013199305065694846128638354714591721663901473840629722960927008666000877254572068739260579572770696297526894352397279797185225667176056870538457482431342500450793984786242341679743615135425762690985006061056228047732701411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f1a0c7ac05069eaa6523fbf89ffe496c1d70aed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn-----7kcbabd9atvlfyi9a2c3b3g.xn--p1ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/66.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971040f6480000040300483046022100c4868b5a942c5ad00616dc405123e0b1b8e3e5e2a2ceee27b71f0a2b2147b3200221008cf6ec3994a3582d67aafeb8a0102e8b25d411333bbd475ac369548ed5b347e700760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001971040f65b0000040300473045022100dc00bfd9d6204894188bd6b7608f7b1c914fe55a585615c67a10d2f05885b2020220747fe9234eb8413080c02f305244add2727bc204ab57724eff795043892a26c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090ea24d70dac53fd59a477b7e3ac1ed13354f17bd1c6ab52cd1289ee3e69b83359247707c8185df2cff07f1491c5e04e9e034726ab8f66d65d36334f2fd6230fa9e581954bd1520bd34a1f452e502fe2035b2fa2d38cab7513c5ee632b7302edd0b1778e06dc46bfc29ac1f1e0dce3fcaf7f8dcbe14377806590c3dd365df38faa9be13222917ead499c227b92e93652304e25b6b69ea84a65f92eaee88f8b1f4eb254e58f6d4211822681b9b23118b9320279ee60dda6fa59cd368f264b1dba71aa1831fe9cd5cdad5763d229a096f88918fa8dbb23825527c55f6da80f95f09652bff93048fdf2e88a87c52fb83ef66479103742cde386000fff5d65f48ae0