DV SSL/TLS Certificate for redirect.subdomain.com

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the redirect.subdomain.com DV SSL/TLS Certificate

This certificate with serial number 05:5f:f5:d1:c1:f1:58:c6:ff:e1:23:4a:4f:f9:89:4a:af:55 for redirect.subdomain.com was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for redirect.subdomain.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:5f:f5:d1:c1:f1:58:c6:ff:e1:23:4a:4f:f9:89:4a:af:55
Serial Number (int): 468215004498927641357219053547887696457557
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 9a:91:31:de:ee:df:71:6a:9b:19:3e:07:16:6b:5b:94:07:e2:2c:a7
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 6b:5f:da:3f:1f:4c:5a:de:c9:ac:47:9e:09:48:12:3c:4a:28:0d:6b
Fingerprint (SHA-256): 72:47:c3:ed:61:59:85:20:b1:2a:3e:f9:74:a5:3c:42:ff:42:cb:de:67:9b:5f:a0:8e:f1:c0:19:93:f2:6a:37

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org
CRL Distribution Point: http://r10.c.lencr.org/86.crl

Check the revocation status for certificate redirect.subdomain.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for redirect.subdomain.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

redirect.subdomain.com

X.509 Certificate

The complete raw X.509 certificate details for redirect.subdomain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISBV/10cHxWMb/4SNKT/mJSq9VMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTA1MTQzMjI3WhcNMjUwODAzMTQzMjI2WjAhMR8wHQYDVQQD
ExZyZWRpcmVjdC5zdWJkb21haW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvuJbMxLGS2F65kTBkH0cyuJr3RZZT5xGF1OW+q5BC1CQvskPoYt4
3kLkUWE44MiU3YtjmglBtLR7JbjUmq3YiePdm4zEKg+jaOeTaZlJT73XOsi4tC0x
Lhzpmk8/oi32sPGKL4H7gh6Wnt4Oe869vFpd5V9L+yXPbnnRNL47+HwZc5L7bjYB
vemottgzUH/yfH1k18sY3bREydKpt8D1+w1UM5FzqsyNlBkMfojCycgkvHZGw73O
H+xX160+DpZPzbAaed5t7zGgSR9hpDqnn0GWw2RrLH+WiaeTj5cKWZR2d/40m829
mZ8T0XqlSysbQJxMsE2zITxeTJDzJ9CZ8wIDAQABo4ICSTCCAkUwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBSakTHe7t9xapsZPgcWa1uUB+IspzAfBgNVHSMEGDAWgBS7
vMNHpeS8qcbDpHIMEI2iNeHI6DBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGG
Fmh0dHA6Ly9yMTAuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTAu
aS5sZW5jci5vcmcvMCEGA1UdEQQaMBiCFnJlZGlyZWN0LnN1YmRvbWFpbi5jb20w
EwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3Ix
MC5jLmxlbmNyLm9yZy84Ni5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCk
QsUGSWBhVI8P1Oqc+3otJkVNh6l/L99FWfYnTzqEVAAAAZahElv/AAAEAwBGMEQC
IGHHr+aL2a8AKcQvN6sGnZkt4dZA+x3s+fsip/gaOLvAAiBDLr3VRB0sYpMHHluX
zkuxKXQI2Rc8hmJJ8NP9stmaYQB2ABoE/0nQVB1Ar/agw7/x2MRnL07s7iNAaJhr
F0Au3Il9AAABlqESXlMAAAQDAEcwRQIgWTrWpc/DhmwYo9e7wlF/MBrdlqqOU3Mk
MEdF/zQoeRsCIQDL/h1AgupDL2zDqEz8BGP0OV0IiDYMdtRMtZKaO4FAVTANBgkq
hkiG9w0BAQsFAAOCAQEAbWYzfMOzUpmZhIEoHeK1BQW8rgwKWCWpCP5OxiXoDm3O
HzF1zJb0BPOxv2rLMVwWuIGa6pjHL+yNczq3Xhz2Mpx+FuGBG6ImFf/ij6hvhyhZ
42zwOBrr1EcDROr7PTV5l7OORFHXNvBGLGt3M1xnsgjoj4lmJfukjPunQ6YvNDDY
BA+08redRKTdhlgRUY96QBTLJPmhC0RLACdyB3/X7C/tyzGV6fbKuh91lO8vy4K/
ohJwRgMZO0zU3j8E48n+4YHfAHMZTPQF0wnvpY5sg203x6pcooZwPZCEDHRZuDv9
nmCa7MNcxiX+uWIyXmNekLZgtSHMisAfPhlS7I3YOA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuJbMxLGS2F65kTBkH0c
yuJr3RZZT5xGF1OW+q5BC1CQvskPoYt43kLkUWE44MiU3YtjmglBtLR7JbjUmq3Y
iePdm4zEKg+jaOeTaZlJT73XOsi4tC0xLhzpmk8/oi32sPGKL4H7gh6Wnt4Oe869
vFpd5V9L+yXPbnnRNL47+HwZc5L7bjYBvemottgzUH/yfH1k18sY3bREydKpt8D1
+w1UM5FzqsyNlBkMfojCycgkvHZGw73OH+xX160+DpZPzbAaed5t7zGgSR9hpDqn
n0GWw2RrLH+WiaeTj5cKWZR2d/40m829mZ8T0XqlSysbQJxMsE2zITxeTJDzJ9CZ
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 468215004498927641357219053547887696457557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-05 14:32:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-03 14:32:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect.subdomain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24096898369623372531815439245876648304121824676833383421892741673265884734786339362586917988955908855673370928560435796168472986191423607607685772882396372769269047630074125318550492130453045703782014044121766973055048279522061727849544286385664751403405947404307357815137530066796695889039903947288997042504225687293084105673122239120841293208984975373489988401005960188603139907816316200598775940457743694055281526201176978042006181933610829373924038366226503304255322412530950169869918645866024473445588789110550609735363942537094063284070019612392618283945004422505060973182312002707580456831648324330772981914099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a9131deeedf716a9b193e07166b5b9407e22ca7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.subdomain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/86.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196a1125bff0000040300463044022061c7afe68bd9af0029c42f37ab069d992de1d640fb1decf9fb22a7f81a38bbc00220432ebdd5441d2c6293071e5b97ce4bb1297408d9173c866249f0d3fdb2d99a610076001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d00000196a1125e5300000403004730450220593ad6a5cfc3866c18a3d7bbc2517f301add96aa8e537324304745ff3428791b022100cbfe1d4082ea432f6cc3a84cfc0463f4395d0888360c76d44cb5929a3b814055
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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