DV SSL/TLS Certificate for xayax.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the xayax.net DV SSL/TLS Certificate

This certificate with serial number 06:86:21:36:1d:3e:90:23:ee:ba:8a:58:dc:5f:85:e3:1e:eb for xayax.net was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for xayax.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:86:21:36:1d:3e:90:23:ee:ba:8a:58:dc:5f:85:e3:1e:eb
Serial Number (int): 568315698259005130951298438398794986102507
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 2e:e2:04:46:98:d9:fe:46:85:fc:cf:43:f2:ab:89:29:61:82:82:90
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 2f:1e:71:d8:52:17:f8:f1:1f:6c:45:ec:15:6a:fd:b2:44:9d:e6:1e
Fingerprint (SHA-256): 2b:0d:37:ac:0d:b4:24:d2:01:e0:4b:ef:7c:ff:21:22:43:7e:13:0f:f1:37:6b:f4:20:1f:f8:fb:9f:28:89:60

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/108.crl

Check the revocation status for certificate xayax.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for xayax.net

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

xayax.net

X.509 Certificate

The complete raw X.509 certificate details for xayax.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 568315698259005130951298438398794986102507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-15 03:50:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-13 03:50:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xayax.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923262745540386368121912853386149198589226370045509370138366186530540176644138655490283723083461489020180834286108112158417774859995034066292964041427441109904172180764205865743242854747784127229328770248601506696474435006981237359388602128902142538703931297583257145512196686581905336521705654641776530421917318575095411273236815944540986770263008091696796315625479891897167207671764698374371879672692782540827800983713439396507287256462223136757798182036214727745333049620040590511362993394426202684510781227512447672953591432001213240985741847126804113087781789841894029029909935218618402014774180874937449410665293302542964343716778509891170270906184025447638702317043920884737809980557622989845037163629125611410278669907845300203624915096619485695421248530141518050919355482011544960082150817937542496007555781724220602533119698311387288766134730238521744593930132273280932570539275754652481547939395296111363072218241969752785586297591017292131308281307111385495872028391561198126360398242429864455829433359323892071497597249543601191412568050433616169612192725069029041240662069864090690926770179458152474957417377807045711422993312528344900873890392162928823792074072569157686271972338912952141263610661877473418913102551551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ee2044698d9fe4685fccf43f2ab892961828290
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xayax.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/108.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a84540000019771ebcd380000040300483046022100e8ac54aeff07fa655585e2e5c8999b919c0f2a0641c44edbaa02d53e99318f16022100e1decc7190ef89dd0da89d4014749edaee727462141d304cd40e1e628015793c007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019771ebcd81000004030046304402203dbccbc0bdd43dfc455bf8d702b447e5b26789dfb8a224907e4b341fe57d274202201cda934b6968d7ccc57583ef252faf2df3e694b9425913c18f06fb9de41cc94d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030668149ec99d448f381ead9bee01420cdbfdf74ddebe33160b87be1580f891a52f6803d7e0d30b7fb3a25bd3b118507b86bd3df8626e3750512240d2b4cadf3cbf1d3ba5cc02b0e3e1a4d1fdc9a389b4738b21f0e51a726a1c442efe6a9c2a6d7794334433cfa64597aee090774ac06781079b3d5f6289de3bd55de1aa64201f3e3ff7b0780e6c2669a1a8072411e93d7c0c7c0b2b8d5188f2e6ec95e32afa805c2601060786b7c69692dac48e2ea4c8815f7f0edb37ad2438a44e4a74d10c72ebc5cd46641c8e0d3e9f63c311edc435defe3a3d488b99d9e335a6d71a8b369e555712bd84e34e42e505d9e024256f5f4853a49a22587b0ed358b7cb28e53de