DV SSL/TLS Certificate for 622050ea8da2d56ace586d01.keenetic.io

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the 622050ea8da2d56ace586d01.keenetic.io DV SSL/TLS Certificate

This certificate with serial number 05:11:19:43:43:cc:cd:a4:59:aa:85:cd:25:7d:f3:95:c3:15 for 622050ea8da2d56ace586d01.keenetic.io was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for 622050ea8da2d56ace586d01.keenetic.io provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:11:19:43:43:cc:cd:a4:59:aa:85:cd:25:7d:f3:95:c3:15
Serial Number (int): 441379809855388963554126413242115676291861
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 3d:1a:9b:3f:a2:5e:4c:92:89:f4:9c:54:18:15:a5:1b:32:05:5e:89
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): df:ff:8c:a4:96:41:fd:da:31:f5:32:fd:e9:ca:1a:ec:c7:74:4c:77
Fingerprint (SHA-256): 0f:6b:3a:1c:4e:fe:6d:8f:28:33:15:05:3d:ca:2a:e1:55:db:75:66:f5:b5:b6:07:48:9d:b4:4c:09:d4:9b:4c

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/22.crl

Check the revocation status for certificate 622050ea8da2d56ace586d01.keenetic.io
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for 622050ea8da2d56ace586d01.keenetic.io

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for 622050ea8da2d56ace586d01.keenetic.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPGPT7MW88IJQ8a9Q99a
5PeC6iGuMLSoJTPfwZU+P9Hj6jFWHBI17sXcYwHxVJZNzcXGWP276hwJbORkvLlW
pf6OP9L3LR3s4QPUhOawadZSHpYpJqOpSmJxuEoLEIBzeMWc4+90y3UBiuoTbMN2
+MjZzUKmRpCR/DfUmBNqWSgFUYCpa5KyH5d7y90GG+pt7YhC6EsSl8uHf+wU3/la
G/06VjqaW5Iz6iwwaD7Ny/q6aTeFFLETJVMpMWKqDf904E/pHx6obmC7C+z5tJia
Oc+khr2uP37jToyptCuIyGw+wZQiZb+/9kF/F8z3EJ05+89SUkhVVXBsyNfClMpo
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 441379809855388963554126413242115676291861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-08 16:44:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-06 16:44:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '622050ea8da2d56ace586d01.keenetic.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19812293156524577749116034537876224878565783007906305060739708941260599498890790791631405681266744157986492568411555951069674632332614303809469836447866610498162102345929182057635351230964596823858849169911112398477592542998019543494607883570699599020605436396261112258079109208568801510023510283569380788514560335582901583107400086242805006187260138854413473750037272463525957608574272888502497982513418008909284853802202910673615067137944096302201055853152045390122899402575699504399890411706270873363330675241307652337713586151527769631113262889254343178659378602940815134627511299626516938506994772208691012331713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d1a9b3fa25e4c9289f49c541815a51b32055e89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.622050ea8da2d56ace586d01.keenetic.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '622050ea8da2d56ace586d01.keenetic.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/22.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a84540000019750a3e8010000040300483046022100ff480c081f094b9eb94e2f225f65cb4cb81a01071cbaf2541a8ef8ddc9dfb9a002210081ef79407a5f9e53514ebc8fe90c50b1e02ab0dfd5b8fbdfbc11873216aa8ec8007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019750a3efd2000004030047304502210082bc7cb018e9b379d95bc9f35dac293e95f286d8f5b9d55a02c58fde6dd768cf022014c96942dc28779090362a17e0fcec929aa7b1e269d4dc6a573fb7b0b14eb184
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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