helyx.net
Issued by R3
About this certificate
This digital certificate with serial number 04:80:fb:29:d4:0b:81:21:6d:03:d0:bf:6d:7e:a3:fa:0c:7b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=helyx.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:80:fb:29:d4:0b:81:21:6d:03:d0:bf:6d:7e:a3:fa:0c:7bSerial Number (int): 392339140104816633459277540197534944332923
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 04:d3:a9:e9:5e:5e:4b:e0:84:ae:5c:6b:ef:66:95:d0:46:07:bf:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f2:7c:19:c2:7f:54:90:1f:33:80:35:b8:48:4b:d4:27:a3:cf:b1:60
Fingerprint (sha256): fe:61:db:01:1b:81:67:cb:1a:26:61:52:c5:43:7a:6f:70:12:11:06:ce:6f:b9:69:d9:e2:28:a9:da:f6:18:07
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate helyx.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for helyx.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
helyx.net
www.helyx.net
www.helyx.net
Other certificates including the domain name helyx.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for helyx.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISBID7KdQLgSFtA9C/bX6j+gx7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTcxNDAzNTZaFw0yNDA2MTUxNDAzNTVaMBQxEjAQBgNVBAMT CWhlbHl4Lm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKwNZwEg xMn1XjbymjrfdB0/onQC4jA70N9znTw0Fe5O1kf70CSD1I1xmFfxjo0eiY2bSBNF UZSUu/mvLEy5Rc/ZiVyVgc9kGtMk1c9Jl3jiyNmfQqTkIDLuWpXUTXI78qTZZQgg oKwBeXvpQTDsBeGR7wTlcGYWxYdFhB0sBFnk/1dBrtl27y+wcOQYLemscDf1ptfd Fwn5KBm/fLELxR6PIqWqXDFl/N77zXQGM1G6mxpluQrYl8OQyImcoN4SP+idMTR4 NMPXbnuJF2fJnBJngKssSosdrIcc+p4LQCfwdvCAEz+vSFbale0HkPTA56RGe0aC B4KfA68oa5TuXjz+EaCZ6OA5DjJ4qIvpVnebNzJYQFz7JpS+9a4CygJ/eA08Xsl/ bTmEOJUeKZl3M5uACy9/hGJST6YX+G3j2O+dL1MnrJCULkYWx1OUrgzAj486OQuB 0ueE44OZvbz94K8rk5Hv+rvrcS0uZC3/8dxFVEEQgXc9r356P7q6D2qKy+jGVR9P YRz+MTBx8xdNFkQCWQYhm5lB6UYvDf1WTNLTfv1lHslKSfzAZ9zsMvg3QAB76crJ P+yQ9cZCqB18HP+9kOUpmYFenBOu2tUfImLsBBIjndKK0LJPYAiPFlpKjJsZW/YW zDqxqxNl79Aa2a4kBKNd7ou4KAd5tsIpv3D3AgMBAAGjggIZMIICFTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFATTqeleXkvghK5ca+9mldBGB79MMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMCMGA1UdEQQcMBqCCWhlbHl4Lm5ldIINd3d3LmhlbHl4Lm5l dDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1 AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjkzw2b4AAAQDAEYw RAIgE0C2+9hBUoXlGVfPLjwGtT2/PQI5f5FNqZExl2yhceECIA6MWZ5+UHEhR8AF p9Wx3XnD79V5o32YKpVVoDN6lt/JAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC Cp/mZ0xaOnQAAAGOTPDZ+wAABAMARzBFAiAuHKT6rLALE6LwLvwmZuXgsVnoUoTO JubxSwB79S5aRgIhAO7pnZk32JbwytugQxuFbH4JLgIATK1XvQCfpUFloofnMA0G CSqGSIb3DQEBCwUAA4IBAQC4s8ruAI+/bDyNZk906kReSzI6SZguxEEW/mtNyIqo EFhaI9FbCtEMq3iVjsb9utI/R5PeHGfP/Sf5ecYaHjAIQUkgnF1K1J08/LkXNjbZ WZ7MevEQZiAYMWS7MqDpxH6C2TdBJEOZRvqvLgaxhE+UHc6FP/AmiGA0RGxM8Eix btoNQi0lfZklaSAyt31lECBQweDZtzuGoVOHpA78HoUCqd4e5xc0NaCOyVJRjLOi P3oyVOSC4oR1CPgnf7qgXYrMPNcaUZLQ7QGR9qfKAQGa2w1yg2Fo79ftSYHvLV7q kbNwvs8T1UA7uQZsMyFKXx8bp8G5jBnfzZB8dIyG81LM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArA1nASDEyfVeNvKaOt90 HT+idALiMDvQ33OdPDQV7k7WR/vQJIPUjXGYV/GOjR6JjZtIE0VRlJS7+a8sTLlF z9mJXJWBz2Qa0yTVz0mXeOLI2Z9CpOQgMu5aldRNcjvypNllCCCgrAF5e+lBMOwF 4ZHvBOVwZhbFh0WEHSwEWeT/V0Gu2XbvL7Bw5Bgt6axwN/Wm190XCfkoGb98sQvF Ho8ipapcMWX83vvNdAYzUbqbGmW5CtiXw5DIiZyg3hI/6J0xNHg0w9due4kXZ8mc EmeAqyxKix2shxz6ngtAJ/B28IATP69IVtqV7QeQ9MDnpEZ7RoIHgp8DryhrlO5e PP4RoJno4DkOMnioi+lWd5s3MlhAXPsmlL71rgLKAn94DTxeyX9tOYQ4lR4pmXcz m4ALL3+EYlJPphf4bePY750vUyeskJQuRhbHU5SuDMCPjzo5C4HS54Tjg5m9vP3g ryuTke/6u+txLS5kLf/x3EVUQRCBdz2vfno/uroPaorL6MZVH09hHP4xMHHzF00W RAJZBiGbmUHpRi8N/VZM0tN+/WUeyUpJ/MBn3Owy+DdAAHvpysk/7JD1xkKoHXwc /72Q5SmZgV6cE67a1R8iYuwEEiOd0orQsk9gCI8WWkqMmxlb9hbMOrGrE2Xv0BrZ riQEo13ui7goB3m2wim/cPcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 392339140104816633459277540197534944332923 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 14:03:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 14:03:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helyx.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701912361193195860195583275685039526054526130687142169945488474402132369029980873977583451728178118699989540364679329312335124357320214986611517699038830593275562938146097400922151726308322157235329903304244261560359456535018135013410251682364537015466869193560440467364026667982124180691573988520892686945400897394947363920128803993893795715491322661128468309728957660291008968815605725249867704754013205169160199047717289404270035128433179288100666908446586018659792155058685098038080057713436771548403588074851244609145035016454176803867413757014505957659061145382270738208723042872716189143790668226542565084121872039445425285588291735937747913902490925068430059632423229985308380243033309291318577889140671453718017738891743793792420741126875284839327122531628116123751766493515565878831489177410440837364767950740547620406794167900084888591356659211311272154249833813879093575883611724248524821687512428693342618759431994130275703636940481735745729758606888891018930845910066993074798579132372691440862451722184923767001185707726297088165223183436486660150861367255792167203307245445756868918289394317514152414397082831076085607950616649484817887117532953491762153417005155059989933499585221962729653351863425179405491244069111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 04d3a9e95e5e4be084ae5c6bef6695d04607bf4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helyx.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helyx.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4cf0d9be000004030046304402201340b6fbd8415285e51957cf2e3c06b53dbf3d02397f914da99131976ca171e102200e8c599e7e50712147c005a7d5b1dd79c3efd579a37d982a9555a0337a96dfc900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e4cf0d9fb000004030047304502202e1ca4faacb00b13a2f02efc2666e5e0b159e85284ce26e6f14b007bf52e5a46022100eee99d9937d896f0cadba0431b856c7e092e02004cad57bd009fa54165a287e7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b8b3caee008fbf6c3c8d664f74ea445e4b323a49982ec44116fe6b4dc88aa810585a23d15b0ad10cab78958ec6fdbad23f4793de1c67cffd27f979c61a1e30084149209c5d4ad49d3cfcb9173636d9599ecc7af1106620183164bb32a0e9c47e82d9374124439946faaf2e06b1844f941dce853ff026886034446c4cf048b16eda0d422d257d9925692032b77d65102050c1e0d9b73b86a15387a40efc1e8502a9de1ee7173435a08ec952518cb3a23f7a3254e482e2847508f8277fbaa05d8acc3cd71a5192d0ed0191f6a7ca01019adb0d72836168efd7ed4981ef2d5eea91b370becf13d5403bb9066c33214a5f1f1ba7c1b98c19dfcd907c748c86f352cc