DV SSL/TLS Certificate for xn--ninaklin-4za.ch

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the xn--ninaklin-4za.ch DV SSL/TLS Certificate

This certificate with serial number 06:84:9f:66:bd:56:3b:b9:0c:5c:98:81:24:ef:aa:f0:7a:a7 for xn--ninaklin-4za.ch was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for xn--ninaklin-4za.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:84:9f:66:bd:56:3b:b9:0c:5c:98:81:24:ef:aa:f0:7a:a7
Serial Number (int): 567802868729942249624743679208321453161127
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: fe:79:84:81:d5:46:9c:97:dd:de:a7:9a:47:d0:ba:36:c2:2b:2f:87
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 98:73:7c:56:ef:a6:f9:42:a1:5d:46:f2:81:a5:2c:78:3b:68:6f:8e
Fingerprint (SHA-256): a8:58:c6:0e:80:93:5b:07:51:b2:7c:df:56:20:4a:33:6b:a8:fa:54:5f:6f:2b:69:7e:19:05:00:f8:a9:3a:23

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/40.crl

Check the revocation status for certificate xn--ninaklin-4za.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for xn--ninaklin-4za.ch

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for xn--ninaklin-4za.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qf/1eSX1oUO5aqs7t1t
hV3s5xVoHzNACkwIkVwL90pdWEnHpCexnMV32sENHAoRuc4Jze3LHZTU7Befh0XS
1R9+dmAjhFK19l2kLIbCr2q0Zg41KOIFkpDEXFnDHokqDELOix0Dm6PsnXOFM7Ze
DiUYrFfB8ke8LGV+TppfzsSvrOT0z3qEMlbfRJumicLlR4RTiIhFzYLp0SiYgLt6
FEIKAfrwqHvEe5k6Ybw3AqGfM09ea5VdRmwM++prel2ur9i2Ul0cnrt9QcaM9X3F
9gkPK7PJYqbPlU/qrLBREKmoOmlttSAMvvuNlIZ/7bdE2VZgtXAuBENp6d68YET3
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 567802868729942249624743679208321453161127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 01:26:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-28 01:26:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--ninaklin-4za.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27602794053404856895087903348170011579913178513900583305174643069415807817234820255472088012119731520972891134423648899470924259211021576848949025067828879737690706155162063035896558192056275634817318392916198414351193225083091440071442143333100168019606700022576863417809546659693671189930546598601150588102034017630430593290397824571602772631236456139378137780922378502645910351028396970546475939412187647821551544924457090196062993370059508438507879961616547315641530141618029235707898756215646434140763780819465108779423732578082109086607147071076810125036504900769167689669173138191464071414844025078402437674861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe798481d5469c97dddea79a47d0ba36c22b2f87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ninaklin-4za.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ninaklin-4za.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/40.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197bea695320000040300463044022005c81eac67db2efa31c580b05f50663cb006fbf5c246fe2e060ba1a0ea347c2702203c569e644d56d5945ceb98ccc5f6a9564973264d34af403489b79b4b0090a5cc007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197bea69560000004030047304502205b36ab8a4720ff035aa7373371ccd93dd2c654224f7079d09a44fe75b45a3394022100b7af415c6a37aa8892e6e3149ab87334ee69d3c937eb5fc5f4201d41292dfaee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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