DV SSL/TLS Certificate for *.kawa.es

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the *.kawa.es DV SSL/TLS Certificate

This certificate with serial number 06:0b:01:65:a7:2b:42:54:a9:26:ed:cd:b4:73:d2:e0:c9:af for *.kawa.es was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.kawa.es provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:0b:01:65:a7:2b:42:54:a9:26:ed:cd:b4:73:d2:e0:c9:af
Serial Number (int): 526418678667260043068461334233572591061423
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 83:06:29:aa:c2:4d:ce:36:2e:6b:b3:e5:03:9d:46:54:05:05:4e:8e
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 2e:33:a5:c1:1a:93:46:9b:f2:48:d8:7e:ec:5e:20:d9:97:76:81:ab
Fingerprint (SHA-256): a5:be:9b:d5:c6:9b:97:47:33:76:6d:2a:b1:4c:67:61:88:9b:a6:66:f6:38:0d:63:a7:5a:28:21:1e:26:57:78

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/48.crl

Check the revocation status for certificate *.kawa.es
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.kawa.es

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.kawa.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S3IWuDi3Wx7HCmEeNU3
L8JZCSiwigC0VZi4oAOle5Gt99JlcPvXsdI8uV8KxEwVTxE6zSuywebefyqe5p00
FWnlYg975rimaPb8gWPQF52mO5NwY7SOtmjAZK9tC2hqbjwLezXKz+tarnCLq37h
GjuflCaKG+norhIhkoQ3/P/UWW58vTDxYhyv2N3vZIMQz7Umdu7C2wpmAMRcAEHQ
VIh4suIfnNWNHloUiy3RE1UGePUym5wfkpZun5j+cwvolrMb/Xfc3HcXsI41fQzi
bP0En16KqKXSpDMclVqKRPsX+3rxIkFvVW27CgsHmFb5JlbZ1u6+wOe2hcWo/3JG
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 526418678667260043068461334233572591061423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-06 22:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-04 22:47:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kawa.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28931148096810583346765625503728659335456712519308103589092521120378796087715331849268329770716397841655378299122572196991686854590714958507638234789123817647711574468095039282107728027944479739085976431543226181163405376798384680072822115785407461250304706296549197773092000414122038912535027500491217437139102352819454810437412158385945216889221206011796688750705147079714840927334892978955868535993131515672010758682557124622747131211608235703240602705771975213691820586234270116649035388993734973846719853638812481383278625958798551978748144702003389371406201988159607131486779392773665531710547160490850571667181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							830629aac24dce362e6bb3e5039d465405054e8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawa.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/48.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa340000019747a347cc00000403004730450221009b224e6f5741d7e3476416aa41729c84c82c7cffb930a3e7f3d17b480ff04cc602203211be5e6c50e6b958614ae585ef5c8fa9d32355c60faa81d3981fed30e44838007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019747a348700000040300483046022100b674fca986f6ab4bc75460db2bac0ffa536f9f2336220f6b0806120cdc66b68a022100c24d40648c1cfbad8d034bd63764ac51ff4f3f9fb38807acb518b7950ba20b85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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