DV SSL/TLS Certificate for xn--72-6kc9cfen.xn--p1ai

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the xn--72-6kc9cfen.xn--p1ai DV SSL/TLS Certificate

This certificate with serial number 05:15:0a:35:d3:8b:79:ed:22:fa:bc:3b:69:42:83:50:0b:fd for xn--72-6kc9cfen.xn--p1ai was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for xn--72-6kc9cfen.xn--p1ai provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:15:0a:35:d3:8b:79:ed:22:fa:bc:3b:69:42:83:50:0b:fd
Serial Number (int): 442720931126471167797222258240873902902269
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: af:22:06:ae:33:e4:76:df:86:27:85:33:90:6e:e0:03:09:75:de:24
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e1:6f:86:11:51:75:f5:c6:5a:a1:1c:4b:e0:9e:3a:8c:26:02:c6:f4
Fingerprint (SHA-256): 3e:6e:41:46:f4:4a:18:ac:09:11:4c:0d:ae:92:11:70:e6:0b:72:c8:36:e1:47:41:22:c6:03:2d:23:48:f5:3f

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/126.crl

Check the revocation status for certificate xn--72-6kc9cfen.xn--p1ai
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for xn--72-6kc9cfen.xn--p1ai

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

xn--72-6kc9cfen.xn--p1ai

X.509 Certificate

The complete raw X.509 certificate details for xn--72-6kc9cfen.xn--p1ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAny6lvRL0ya1UYtfSwy+G
0jNYLmDsoHYuh+2b1ksDy3rWjAe3mpmysQzcQPz0DYcHUKLIE2d0ydK0bgbvsBjj
baspZQL6MKWHzwgC8P+3WfwXCiLnc7t4uemb64tl4J11zQtkbTz9UbGLdJvqimUX
HET08YmDHEuMwIDNgijnQeB9N4uQBI4GUE+xfIr/ET+AIJeLWA8/N8DwAf1Qrglx
P7/RLjHYzcj5xMcio4KAScJ0Jup2P4CSTuJfx6IYUaejYROThD8X+jp53Sofdnc0
zBypuUmV/qH1/eDQEasjFBCm8CksItz2gCO5n8/WsuKVs3F7rcvN8b8Mcut1eRhk
STv7RdSET9c12UZ4fetfSP1IfS/EGQBGrqmlRzTxY194F6I1OSMGGzvyg7S/PNVQ
hpk7mi1u8x0MtYm8Z7Eoi7ZM4EDx1HEgZ/L+f+Dq5iE9UDgijHsY6z0d3l5AeTJ0
s3+HQFBAN2IFYkGDEc06S38SmBaufZrAc2j4cCG40TodtX2akxiWzQzmGpD01As/
p0vAI6EwJ758lPtcU1wsy6VqssxNQahlFFbf3rVYukH59mL5nzMbyAGV8jeeO+s2
00LVYCE0UWqMykw/jl0z/SQePVZ6srywxGiuuUr4mBxvqTZUchNZdpM8lbA3Ir1z
aZstbFqfyde1DZISZqozzs0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 442720931126471167797222258240873902902269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-24 20:16:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-22 20:16:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--72-6kc9cfen.xn--p1ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649406785155669277594251203569639863837957415816368248681813692150813282897908863215729887272813134727342911065473382818873107133375483043725137506900866635244670579474759473872918932624195750907242829385047965309743466425566051786510721936008744742013210374553845663002281689803807897915192839442255854433550467889837794120487648570842016382666070370769712218424606354226426363937546903232520973658994680259941961988211041850844187350007532875678334279083441651488498346696767126534517843229489458854728974309294436305025007486791699276981095881031647807201835300288568053695686174536738954070518446028514803399577362883548216878908760801964551021564625482605466579177148747714688151464874346789113034061204555339165620192163165833737729320351351167824467274684278395577504381406683115030077820073462926792382142301213217051376596949483253061117031502675941947935109800073531599199425941140249366848736255989684805788516363965945669824907072086614718311181701187768928120876277910434981933691815546293131043216549044118664441437120088916481985858642663265705278975048848266913847483062885054851613409736545007539049074850991798503814993155984933171388496024182499427812378611179211488262146484289042832357302554035821458724429745869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af2206ae33e476df86278533906ee0030975de24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--72-6kc9cfen.xn--p1ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/126.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197a3cb970d0000040300483046022100e8b68c351a42f5d976357460375dcf1d7abc4274f57597c3b4b8821263b9dce3022100ab8bd3c3cb30e1744ee8aceed0b6fd81157b3f1826c68f85533e358ef5aba03f007500af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d00000197a3cb981b0000040300463044022015a5596c18d80fceec9b7cbb3b85c09ee57e93173f9d7ee962a918123e37259d022059bdfbd22e0b99a4e068abd83d7ced808460d69bc5936305511fb361b79ab1b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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