DV SSL/TLS Certificate for rokxat.eu

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the rokxat.eu DV SSL/TLS Certificate

This certificate with serial number 05:08:9e:eb:1d:a6:45:4e:a1:eb:5e:2c:0d:97:08:6d:10:ea for rokxat.eu was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for rokxat.eu provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:08:9e:eb:1d:a6:45:4e:a1:eb:5e:2c:0d:97:08:6d:10:ea
Serial Number (int): 438494927408627716343038700053110834663658
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b9:44:c7:40:d2:05:e0:0c:29:6f:96:fe:af:e5:00:cc:c2:60:93:9d
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): a2:f8:f4:be:34:ce:b8:40:d2:a4:c3:ca:f2:ba:e5:a2:11:47:37:ea
Fingerprint (SHA-256): 55:db:bc:fb:d1:cc:d1:20:30:b6:38:1f:b7:47:10:92:8f:75:d9:2c:c6:f8:2d:12:63:15:38:e0:89:13:bb:b2

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/107.crl

Check the revocation status for certificate rokxat.eu
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for rokxat.eu

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for rokxat.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpRivOsiEintfXL5LaxA
VEMtE7ObKxSuEtm30rOf+pZchBXrFR7SpAp9ZCRgo01yMrbadXXCFbZpR6Cg4x7/
VQ/dXDwz+QpGdY2ifZCJuFCb5z8AAlXm2lSNV3Nip2eS25PplSNNJqQTgz68OcA3
LIbtwvhjvKKXWX4xZTDpxLsdU4IfdIC6NGL/a6uPqJhi1dboS6OQYBpWDLnAofxZ
Gi6vAappZ+NNCFHGfn0sc/rXhr07xIXJLtTaln6ASF0TwHDI+hE64Xkbn7gncGD/
qbkTmhG5n0zciZyIQtsnu8jySGpyVN6hVb3uOnH1+GdxOa9NToqudeep3hEFskpe
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 438494927408627716343038700053110834663658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 01:10:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-21 01:10:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rokxat.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25068356096713743213009950893789652041156218753430721080464452109433800994243635708745594692266266601760473609128078307031702355010829875041122996902781409667490684931042732699562954884762309796997088738133598290244494316522696049578478715650999745227118250913060829637417825781260627712487647519443770261127288671935636389745561311022148620298638105635582469380394880984003327595028169622764223959601502196310686236005989517651405446603394772393492397697467961719902558711319622850140841641303979619864135489265317165199077803500920387332792084472791341568468156345544790779654466486527423592850212749940341808455333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b944c740d205e00c296f96feafe500ccc260939d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rokxat.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokxat.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/107.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196fae6fa9b00000403004630440220352965e0808bf39a4562f081d5d6633d2e9eaecc4cdc2e623b1cd7b465adb64c02200dc297beff14e91160d6e927cfdf8b6763bfb907aa6e0bb54d93c23303eef3aa007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196fae70263000004030047304502201aa5ba623d3f6dc702539987882c1d6a1c0e2b4e84a86e7b0008550295451441022100b234d1d1f81cb67dffa46fe80673db0e3745a6f17396dd55baf27c13bbafb481
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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