DV SSL/TLS Certificate for domains.blarium.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the domains.blarium.de DV SSL/TLS Certificate

This certificate with serial number 05:7c:f4:f7:26:b0:a9:f2:cd:c9:1d:96:45:f8:4e:0b:e3:47 for domains.blarium.de was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for domains.blarium.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:7c:f4:f7:26:b0:a9:f2:cd:c9:1d:96:45:f8:4e:0b:e3:47
Serial Number (int): 478082058070021498317767934888337600144199
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 98:d4:e8:73:57:55:33:32:ee:fe:d7:3d:68:aa:17:75:28:69:ea:ab
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 27:ea:05:6f:61:d2:91:aa:5a:97:87:38:f5:ed:d4:0b:3a:1f:35:73
Fingerprint (SHA-256): 63:e4:99:66:df:56:f3:6e:5d:6b:5d:f3:58:2f:2c:20:dc:8a:ad:7e:53:dd:b5:fc:b8:ff:04:13:f8:78:ee:38

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/72.crl

Check the revocation status for certificate domains.blarium.de
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for domains.blarium.de

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

domains.blarium.de

X.509 Certificate

The complete raw X.509 certificate details for domains.blarium.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDjIhcvyCQQ59Lam490j
V4Cyflb3ifnSj8KA3nZkdA7lcAcP+KAIIRwxEDhjEk9dDbcAeqwEZ4gORSzdCR/x
DUgcVuTN8kJAr2KlGqQQxm6liPIR6d+mxIyUCkkELD387Uu5fKl7LBcldu5qzGsZ
I7+OFeTe2HEcZiQQm9FKoidEKsFVZQhdBVl4CIEvBAzYTHqxkMkvTWeoa9mxLJyv
ExRzR1jmrGLnqRlmWtGhdYQI5t6YfBFEecjAXrbnN7FV+SKXPZaUyXs8ldApI8yP
htgO9RuWbWmQjyM+UucXJ8tGleZjTdl9F6g0VphHEbcUpQrEfWT5XHhFBzNN9SXI
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 478082058070021498317767934888337600144199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-29 12:52:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-27 12:52:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domains.blarium.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23255848998437703316850123547050942795913392613832963493104115138376608985343817910824387643459745674226526267973069352752674022668026192814404284702182592769436832458645601652027348317925746949870516759492359529167166932590457573684630975693137256488928684191894309096706126692893900980239903190226014888533080035574904983514918208140454989495021939504334355716175665599732007824644825716910848215955219739908607264005764283998815053530719834958788165740156047570323106487297455650307990357246182650654406567178348204816901193969747262066525442657098845998977950642194786347237598488706932082624445055149195313662121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98d4e87357553332eefed73d68aa17752869eaab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains.blarium.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/72.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001971c4f8af80000040300463044022049912cc8b888c666b5ea77e8755633a1f1d145c3bf0d60d9963a37769dc2832c022029002c2d0be5e1b904cb8bea76f3f0115d4239ef2e7c6a03458915937d85277a007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971c4f92ba0000040300483046022100c8d6fb236ddb623817f1ffe4a42edb1e8b17d9678d539468c1adb6c90f55b2f5022100d0dc9b032320e1bdaff44659d9e2e43c12defcda966ff754b8afb34f9a2adc92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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