DV SSL/TLS Certificate for *.lamminsalo.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the *.lamminsalo.net DV SSL/TLS Certificate

This certificate with serial number 06:49:92:23:fc:a6:df:7f:f7:a2:08:a7:4d:fa:1e:e4:27:c9 for *.lamminsalo.net was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.lamminsalo.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:49:92:23:fc:a6:df:7f:f7:a2:08:a7:4d:fa:1e:e4:27:c9
Serial Number (int): 547708582517952899106752293000907323615177
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 69:57:e7:0f:f3:15:fa:52:dc:a6:dd:e0:58:c9:c3:1f:50:db:9e:66
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): af:15:2b:19:ad:09:51:00:ec:7a:cb:a3:ec:41:bb:27:0a:25:1f:5e
Fingerprint (SHA-256): 7b:5e:d0:16:3b:75:1b:36:64:3a:79:d3:ad:3a:25:ea:de:7e:db:65:df:3c:32:ad:d7:40:e2:66:49:d4:f7:13

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/74.crl

Check the revocation status for certificate *.lamminsalo.net
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.lamminsalo.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.lamminsalo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNjjeMhRKzXdMVnE9nWM
45ZY/rVUguGY7xiYL4LUIDhBe4ZzemoWH/BP2doy6nYl37GT4bfTuEzQDSTdHmtC
R1iHtJ8wPK2a/L6gTvOiZOlDwa0g4mlGttq3OPpqdh1fWix0mqycP+e5oy3jh7gv
Jd6vG0eRe0Fz0ZKlEz5cJHLKkJJmWyNlavXG5GmxFPSSxVQuP6PC/H1sHHGbHrpP
BK3lRWpe5r50vEplD/B3559dthF5iqGoFHEs9VPjddtNWAn5OPofp1paNUs1B2BD
2QlDGOqL7t1VDoyFBtx+96Ljeyy6nWDuJoXUcCOnSvEQlHAhq/+ay+kAj2zRw3s5
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 547708582517952899106752293000907323615177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-14 01:15:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-12 01:15:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lamminsalo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25354612729153731972039339223267835396366542816784276232688675411413749919805569999203290071541720664550239723977137665104801677989557617843150625673683325670799751193651630438188409149332460432824959911988346238545961827074813574145416655802060496236634939798414721067120470133028007128669918983146670609963943586857888338144361268497903768943647390990353457531440265434260799831430994469680514558022276829396836420900014054931651418668952980406662935366726112320860618641104749056568789736570230267867992952428159690010505946897247474103083114746820359087605780822874498317771072127417377711101272428744298660051303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6957e70ff315fa52dca6dde058c9c31f50db9e66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamminsalo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamminsalo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pekka.lamminsalo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sampo.lamminsalo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/74.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019806b5d2cd0000040300463044022100cd3548d90190791f00c78bbe742f76f662ba7148c17c319dfeb6cbc9eaf9f1c4021f6cb55fc357857081ad9592bbe467a2191b2333c95589fb1a354c88069c66e40077001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d0000019806b5d2ae0000040300483046022100d6e409a3baea1cf123a09f9ab476354c914f53a04e737e00077188dbb2075eee022100b4784dd74b7934aec22f9d8b7b172aa18904d203e45584345a66b0a5ed2e447a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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