DV SSL/TLS Certificate for juiceapac.name

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the juiceapac.name DV SSL/TLS Certificate

This certificate with serial number 06:65:ee:4f:16:3c:5a:d1:23:c3:6f:50:4e:dc:8a:56:4b:36 for juiceapac.name was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for juiceapac.name provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:65:ee:4f:16:3c:5a:d1:23:c3:6f:50:4e:dc:8a:56:4b:36
Serial Number (int): 557359001555019706435138785443952614329142
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b1:2c:d9:53:8d:62:d3:51:b1:d7:3a:bb:0a:49:ad:9b:70:78:5b:d2
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): f2:6c:37:d7:25:5c:4c:c7:21:45:39:43:df:0f:53:12:7a:46:be:db
Fingerprint (SHA-256): 17:db:3f:0a:60:92:2a:24:20:c2:82:a4:df:66:0a:f3:03:e0:dc:35:2c:35:fb:47:17:3a:b2:90:76:c3:86:ea

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/55.crl

Check the revocation status for certificate juiceapac.name
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for juiceapac.name

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for juiceapac.name in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6gq+qW9X8JwFxuOzSyd
kCoGcePXnxQqM/x3MeaBnrVAibCPQpaCeAZFzxvNfx1XDibXJP6xunWChh7dPsmN
ShBH2L4hm99yUE3xZCNrJGq6iL7MjL9IXgFXbgfgzwajcKDDaRNihCI3UCGMw3oV
7MxAByh4bEkyPAlpL8wVM2mFTLSZNlb4FqucY3ZdjqkneXwQMx2tbtCe/YVOGU95
JOxSmROA7wr9rBqsmq3ORH6OkpltfHAgznpM04tZXuhYEQHuc8BpN13sY/DCqozx
pUQwzVFloYY76LBB2Iqeg4mnQfsF9tF1WBC0SWPSlQvgStfwouAGFsa8rDd86zkn
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 557359001555019706435138785443952614329142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 23:57:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-21 23:57:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'juiceapac.name'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22679583264761264722937001752761179212643680732247619229033727524666344274446267311470232316640794076043975121272968973593448004973987462301027202241825691258696194734677703781097486335670662374420606250976116948369977373547012581161584189156546848838730068019115734699053078127981066782257776197480103868852366904678950962807440637112528741704885638901713648922496373734307524440450434273939967264747426262441030605494157643372809886217428514761709505539876344228615389623203023841980100828157885894706201519206797053847393997645233854404977329129867792410525774186700366732883579878433068151946827741257086916962109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b12cd9538d62d351b1d73abb0a49ad9b70785bd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juiceapac.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juiceapac.name'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/55.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196ffca86a1000004030048304602210084bdf1c6e6ecbbb63c24bfeaf0edf2b961ecede685ff2266c85db52b262804d1022100af92bc25dbdd7d549cb316916d7282690b211f8a5f66615fcc231d36a98eae20007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000196ffca9e570000040300473045022100cc095ea04973c2e753d3ffe44ede9cbba3ea9808a1b6dba92bee855e2946149e022052e201aaaea25afcedc053827e918b3fc41356f723cc4b0938e771d2f0e5b906
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000bde51527dc00c004ffb3695f098a74d782d2653666f5956cdc2946483891dee902bd13e4813b5d484343bff8e5d9158e85ea1aead5d50c73cea54e2205eb5b797d3d1428bfdee48e9516a50e530dc2f943e53e9f3824721e12bacb4337674f3badd3ba7f2148c9f8542e7a9499312babed2a4c9c36faef7659f3a200fdc74a33287ee9b744e99699e2148d677a0d82baa625c1edb431331cc52827c234aa9c94f157a32859991bf2a3c97010fab51dd278946d0ee60a95e169c1ef559b99c678073ddc99444bb314876200fa9d5a21b4d933c7b505100ea70fc9f0c5d1cdec607abb787d90fdcc798ed514d2e510695947ee6ec17cd51e6b8faa09fc2a791a5