DV SSL/TLS Certificate for wa1.net

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the wa1.net DV SSL/TLS Certificate

This certificate with serial number 06:51:d1:4d:46:c7:64:99:ca:51:a2:7a:19:cb:67:7a:22:b2 for wa1.net was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for wa1.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:51:d1:4d:46:c7:64:99:ca:51:a2:7a:19:cb:67:7a:22:b2
Serial Number (int): 550514797204700861037453024651725699162802
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 8c:af:74:c9:c5:a6:ae:e1:2a:c0:f7:cd:f1:c5:aa:15:de:7b:77:b0
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): f3:0f:82:1c:8a:03:0c:30:88:98:e4:1f:4f:f7:39:c4:44:f2:a5:ec
Fingerprint (SHA-256): b4:3f:b2:ec:c4:f9:95:37:fb:72:f8:9b:80:98:a0:7a:0f:70:37:4c:99:58:f4:b6:8b:ef:21:ef:28:21:56:76

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/51.crl

Check the revocation status for certificate wa1.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for wa1.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for wa1.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c+zxtmAFTY344yUA1qh
VZ2JWWips4bfyXEYV/TOIgAbMsuhuoSA+BJfIe/Iq1IyxEi/Kh3kBByhyDUmNXIH
FGAgJofS57+tMY+H59JC4lQMZQWWDdwAM6DOlzqzyywwbh8XELnKQ9N1ZPEOcdkq
Owo8Drw7m3XKx/TDDNcW/vFPIuznWKplGAbloEyBoRXZ45U1ka+NH3NnkHUZEs9+
Nh9DlRE57FQtLjpw1IckSc7nlWwUq+paE7rFLNyHiAKzZn1aXCq24eYe2gslkvBJ
JM7NMNVpmfn4G6xThM8UDQauxtj2jyWWAN3dS5WFYyJO837NsXLSQDE+EkWo2vl8
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 550514797204700861037453024651725699162802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-19 12:53:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-17 12:53:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wa1.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27496133975879165631269128754983818212652506372115675475446120025762136946232146295776965206491166435795424875033669334030495956930697162857718090223919485744076652572108000374771789779347663048756828531101749462502256394875420684783216663052127300594499274525737207556538717854491743550204069063893420820792383195563314181723251003216305277283815111495130684455675685314095599703968391224624933590850923254884351917503838302601484081642724346422720426041005675819104431162523904520388645536200555442757228607557633265932899531795111881924967998671538223645396431217652467238447469245309798512995722615699762683935951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8caf74c9c5a6aee12ac0f7cdf1c5aa15de7b77b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wa1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wa1.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/51.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001978875bfb60000040300483046022100bed5a357ee457e6d017747204a2f622a024f6155e9b365f1c1f06fad51621d4d022100ffb5aa8d8c38b88910678abf9f1b3cbda697e7f3f299c9e85a3d719a20991a4100760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001978875c00c000004030047304502207a2d743efb3cc8be0bad6b54e732d4f0beebda6697637a7c785fb76e374a19720221009f95e4075facc45e7a2dcaf1c0227ceac6055ff73ec5ead5c6203831bc0d7065
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004eb99f8613b3c4d4ae3acc11ac99f01df8917f0693f30ab797fdecc576305379cf2aebfcb3db21771e54d8719aad30059653dd449f01f6245963925f358ad4096e68e5642e94ae1ca400b7a6d556065b2b89df7d985a279ca421122071d671fb1562b316840a6e25c52e498a55b4101ca15ce7a23a16df5f8b168fabb5ce57a09fbd963c1f1f3a9b61bc325cd7ae82869ad41b3331a0936565c34955713ccabaaad99234fb8981438d9571be389aca5ab5711688905a1f041633d446b7f2c90ddab97ff558649467fe391ff66ab91a9251202b6e3827e974003ee3966b4545ff7f7e2fd0c50482ff33a6a4f2e4a5ad187b89238d4ab579252c8b1d3182d40e5d