DV SSL/TLS Certificate for www.vivalife.iconcept-s1.com

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.vivalife.iconcept-s1.com DV SSL/TLS Certificate

This certificate with serial number 06:1b:86:94:a2:e6:0a:e3:21:40:78:fb:4a:fa:75:df:99:08 for www.vivalife.iconcept-s1.com was issued on by Let's Encrypt.

With 11 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.vivalife.iconcept-s1.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:1b:86:94:a2:e6:0a:e3:21:40:78:fb:4a:fa:75:df:99:08
Serial Number (int): 532040227812773262877850719572226717227272
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 9b:36:b9:f4:da:7e:7c:8e:da:c7:18:bd:6b:30:96:e8:cc:3b:10:26
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): dc:7b:c7:c3:3f:8f:6f:0b:78:6b:64:b9:58:c1:ae:2c:ae:39:d3:ec
Fingerprint (SHA-256): 89:82:e2:48:d9:b1:4a:3a:a7:29:2b:25:75:ab:ce:d7:09:c7:b5:28:48:7d:e6:6b:0f:c6:2e:0b:d6:b2:be:af

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/9.crl

Check the revocation status for certificate www.vivalife.iconcept-s1.com
11
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.vivalife.iconcept-s1.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.iconcept-s1.com
*.welux.com.my
iconcept-s1.com
oglpl.com.sg
vivalife.com.my
welux.com.my
www.oglpl.com.sg
www.oglpl.iconcept-s1.com
www.vivalife.com.my
www.vivalife.iconcept-s1.com
www.welux.iconcept-s1.com

X.509 Certificate

The complete raw X.509 certificate details for www.vivalife.iconcept-s1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z6pMnDkkHyp0kHrIeKV
s/jb7mDiESYzZFLoZ4zAgETUSX0LNFdmxBYN+oC7dmPTpukFCcSZi0lNqhaKFdXs
CD2ll2KJKpyXkvI5Q6+3DnpR8p9B325iqtukRFD6e2G5g++0Pmit01UPQ9SZrvoL
Fkansg6cGwCjzVOsuW02bmy26QpVoXgEx+uMhZFzLyfX6DZe5tSkj+nWTtQRzLsw
ngHiOQQDHUPnwRE4qwP6eQnR9CQfelPQvubz0HFWwG6q46TiE8vfgn96ZzDgkHPH
bDa4qJ/OubYgbuzWJwFNumoV+O90j/ixNIcTWHugZVxjiR4XRY4/AYdprPz1kWNf
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 532040227812773262877850719572226717227272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-24 08:07:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-22 08:07:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vivalife.iconcept-s1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30706807360953578574637730973500707247975401761369277973678125015343561019795045780466840382313404371377125878442954927424963708047884510753818682415425872456582598389006151873021158695219900600914419487585872659673640551238347882514528625763007041075835115521092242287039030367002115512112090420105001621424094190256923002289119682203863442851355075829860017382550605432150299772604832508019086154164486819255626325879438011420769630021207573916906944734190835180122124965542752098893893001486393326578617979271414510746492551962291527154445341908269789377455437340923174035233955412841670683783034061284224501243743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b36b9f4da7e7c8edac718bd6b3096e8cc3b1026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iconcept-s1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welux.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iconcept-s1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oglpl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivalife.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welux.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oglpl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oglpl.iconcept-s1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivalife.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivalife.iconcept-s1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welux.iconcept-s1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/9.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b800000197a12fa2640000040300463044022074da1e75cbb8db7933c6d1f8ea515cb9bd80dcafba74d6913b4266cb2581716502200ec6aa5ea8d461eac5d26c3b399e8a4424370edf865f5be932d1f162ad94f6f8007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197a12fab0e000004030046304402205f2eec7358a24ba658fb8c9435ee6e3fe79e567c9c1e775f165b75076c319c1102205240dcab25b7f95f717e65a9ffd6e58b35adeee5a365ef5cb2323448bd25699c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00826555d5cdbb20dc232e034cbd9dc671eca4710c276053034bd10723bab97fbde9dec2e52f1d27d361c7f9fb5e3f399ce8566f6692e56dac8901e69651bb3a56e3a20cc5e9da39cef75c21352ced2ab1a4ad1f9b46fc4eb0ad1df2f0e5c2bfe5943215d4e90890a2b7d5404c6c46709990fabf28d05ece016627883bbdd6fcacfb551b0f1021a1513d6ca7f1291e4a8f8f1c11a776549e7374ca326d9a012a1985c706016cdae321be8c16b6fcc9c2fda96cdd286e4ccaf46e5ca2f52286c521a8febe3f647ef1ec597b6afcbac474df9d447f8bff9215b01834b6d0ea525a32f6e0c82f577e5c7cf5cdd8a1c7dbd79d6d558d6cc75f2e3752926ac98c1e7f7e