DV SSL/TLS Certificate for christophermacleanchandler.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the christophermacleanchandler.net DV SSL/TLS Certificate

This certificate with serial number 05:f5:4f:70:9b:81:0f:aa:57:cd:8d:3c:9d:b5:62:84:bc:73 for christophermacleanchandler.net was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for christophermacleanchandler.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:f5:4f:70:9b:81:0f:aa:57:cd:8d:3c:9d:b5:62:84:bc:73
Serial Number (int): 519036203257345090773823386158609142692979
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 26:3b:3c:06:09:be:93:fa:6c:c2:68:06:d2:c4:40:2a:3f:5b:80:7d
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 16:91:b3:f0:8a:cb:a4:49:f9:2d:cc:58:2a:0d:b3:65:1f:38:0e:08
Fingerprint (SHA-256): ba:9f:dc:13:6f:e6:95:9f:86:49:e5:86:ac:4e:50:5d:12:6d:a9:49:e4:26:48:1f:a5:bf:53:cc:22:5d:34:31

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/116.crl

Check the revocation status for certificate christophermacleanchandler.net
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for christophermacleanchandler.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

christophermacleanchandler.net

X.509 Certificate

The complete raw X.509 certificate details for christophermacleanchandler.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYlMtCQoHlhxPMylrSNH
ci+IsiBg54M14Vz6sQkrU6YqKkkWVktVbXoGQJ7IUCcYvvwO7cxJUXHzXTO5vuYH
qlco++a2JsezMSdvmGcL8Yan7meeF4nquoRgXY/cUt0iHbZlKIKz+whhXJQuLbdC
eeTYAhebFAjzstQe42COnRrt8SIl8CzYxuarP5vqqNMR+tC9AihRrKL/ViWFUu4m
8SrJN/ltTytuOnA5gwawEixdwy2tReP7QI65izBHe0d7TEZ7HXrATFeuFWYaHsug
xgYB6G3cFzBlX445BWdQi1K+nLMT6I0pfsEq55v7pcy8KUyC9Rhz/NTLACKy9dR2
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 519036203257345090773823386158609142692979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-24 23:47:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-22 23:47:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christophermacleanchandler.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19887118847534696237984162589633133024985373670826965602693679115783003713576682139874931188235572066875199846452801995993304368473335110994115100864783447803734422549699935328992480146587097313927801007807682331398294339320321606047137296103433940345870161070710358512245187407835511401386643338628459422097521414878836160740384499509890362585972550142571197682828361142163648966642130563962215328336730167399489917951655957902056917885362448951824031632507559561112873580663612208695467936641594564668404106401877511447363577835625075724378495772714332242394743287024108244275270799239615913455844056648643499030023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							263b3c0609be93fa6cc26806d2c4402a3f5b807d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christophermacleanchandler.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/116.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019704e76e7f0000040300483046022100e5a4d84453c152f0ab2a2bec4e59148fe656d204aac5c89fa97f743a7169c6e8022100e9ba0165cf1ebfc00e8c17f437d7c5f7f97ae5844bec7f248135146036adecc0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019704e77e0700000403004730450221009a8003c4873580074a6223f7fc9922aba4839026289d571eeea86d4cb1c7670002203842b07ddb0bb35d91a98745424af08670418311776c92ed205c7836451f6cd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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