DV SSL/TLS Certificate for www.duff.tv

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.duff.tv DV SSL/TLS Certificate

This certificate with serial number 05:71:05:8c:52:e7:46:c6:6f:eb:cf:db:c9:2a:37:7e:ca:a0 for www.duff.tv was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.duff.tv provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:71:05:8c:52:e7:46:c6:6f:eb:cf:db:c9:2a:37:7e:ca:a0
Serial Number (int): 474020711863887595946477798298432466504352
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 9f:bf:46:ef:b2:2b:87:46:c9:76:9b:a4:89:30:ab:5b:c5:e5:a7:53
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 4b:1e:b7:e9:fe:6a:ab:36:44:ba:b4:a2:80:7a:60:e3:7e:58:48:62
Fingerprint (SHA-256): 90:da:27:08:4b:3e:56:8e:e1:b1:d8:28:81:b3:53:53:3f:42:4f:d5:cf:04:b6:bb:67:4b:7f:b3:a9:45:e5:58

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/33.crl

Check the revocation status for certificate www.duff.tv
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.duff.tv

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.duff.tv

X.509 Certificate

The complete raw X.509 certificate details for www.duff.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaNQVsLzQw/RUZKf6r3N
CkHIs0hqY3Q786rH98IujrZFOi2OsDYA14pkPyMA4YBEFFIAgiw49ylWimj66KBx
rE26WtvohDRBN3ykrkf7SNMo46vPnXBai/x2Te+8rc6E4g47Xs381j5jG3yuGZRQ
ZQo40nDwISb9aw9/Z2w9QrbkQnG1uE5CyXoUSmtLhJ1RjCri2lelw/aH0YICXuE1
2ohCAdB0vijtvM4NAnvKz44XX53K8UZCn8soO/Q59HOAw4mFFRuiE3asl5GdxK5Y
a5qHz4h7oSxZr1DRVC5oP59GeJw74JQ3wjFY+WdoF1gqH6NUANtiGu1pSAxPl3fs
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 474020711863887595946477798298432466504352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-04 07:10:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-02 07:10:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.duff.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25959385566102979822796010903958659787752745709466371356894471511745284521088647163060873917920401933215854414509686928314956681942493891006802738103828345084320159348398363365079500864885839956928814683799257358321882343831887395618072886881703701456499430336372473337835964195076278439266050257649756199911953649958802819907955498638583681083489394206879268074556670376818540435821234493222571388892242458622706199279957325328836969650690322899848010241436258283557095513995570620920575757218505304468448024005404265540274027721165070120959442058927109440087986352936216739079713736800565289599019830749717648108751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fbf46efb22b8746c9769ba48930ab5bc5e5a753
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duff.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/33.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197d47b9e41000004030046304402204367064bba0ca74b92a374d4b0c6b417631d06dc242ffeab717c7348520df9ca022072758ea4b9717f35eae44ca464b75c3a345a215618f289e49ad6fcbfc8cb72bb0076001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d00000197d47b9e8d0000040300473045022100cd6d8e5a5190206d5156db4b9982e1a81f416a2fce29d8d776c6d44c401a4e3e02205a25dd86774432499669b7206a37d31ee8a57784720c01a0a628d8ba8018e19b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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