DV SSL/TLS Certificate for jonnybbg.de

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the jonnybbg.de DV SSL/TLS Certificate

This certificate with serial number 05:f7:6d:45:2d:94:56:2b:ed:14:07:21:1b:48:18:e2:99:0d for jonnybbg.de was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for jonnybbg.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:f7:6d:45:2d:94:56:2b:ed:14:07:21:1b:48:18:e2:99:0d
Serial Number (int): 519756419332757697472487384311972061419789
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 4f:47:e6:11:d8:b8:c9:db:fe:43:cb:34:93:f0:a8:d3:3d:91:c7:6b
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 10:e2:8a:41:a7:81:61:ab:20:b5:51:49:89:03:bc:21:fe:35:1c:83
Fingerprint (SHA-256): ed:34:77:ce:9f:5f:bc:0c:dc:1c:73:a2:9b:9d:9a:5c:3e:25:31:c1:5f:63:24:bd:13:09:83:78:a4:ac:62:1d

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/14.crl

Check the revocation status for certificate jonnybbg.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for jonnybbg.de

Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for jonnybbg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 519756419332757697472487384311972061419789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-02 11:07:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-31 11:07:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jonnybbg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4574323775826076115201052206744030959776690441151921129424383714110002653490214322402536965875606277894536758673805854664968943306833355201451164221177568583982430873579550275716329869287510363871984006817752331955809376453623625841028610061357596752180770866719820693012824913921344666883964819355825781808531961759704620938278794878728989717410641032852010134999026113379935112609296819672380932693972155807930829036270265453268319862866798230794300828827819825407744590127184227469773635319941184847824500735091921337336045531749066930836776067758939396883093952918975458240951098497443577649640013497444031068165308691236181249772059305045912150297598135863053705188570596083735998385141984071973798263637407440650320396855955104754220532146566197316400906146867951778431778554453091752422240051487131653403973802405232219454222038160350725013339627019600436655358113206202892032880491854595978952531789255162036962961557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f47e611d8b8c9dbfe43cb3493f0a8d33d91c76b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonnybbg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonnybbg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/14.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197308902110000040300473045022100a62850e7d4667b4f85b39bd697e2db82b3d3141e7fc51e280f9a9abb5fe5f28302206e53938958e333c94b94618ba19a7da0f6177ec7b9d34dbf43f7f8127557f81d007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019730890a200000040300473045022100e707fc8e6ee7cb42fbf05db2a21e6b080ae4f22904c8f562e53613183a0e273c022002e4a633f294b0829af884a9393652466f774edafdb30fb5385bbb6abad0a5da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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