DV SSL/TLS Certificate for rt-forum.de

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the rt-forum.de DV SSL/TLS Certificate

This certificate with serial number 05:e6:38:1b:45:d8:d2:42:bb:70:c9:1f:a5:db:9b:01:ba:ed for rt-forum.de was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for rt-forum.de provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:e6:38:1b:45:d8:d2:42:bb:70:c9:1f:a5:db:9b:01:ba:ed
Serial Number (int): 513900952427060833840300234060637797464813
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 48:d1:19:e9:78:69:a0:96:ea:b5:27:18:cf:f6:81:20:fd:e0:64:46
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 55:8b:4d:4b:04:6b:4c:5a:bc:9b:1d:a0:d1:4e:a1:54:aa:dc:d0:d6
Fingerprint (SHA-256): 40:5a:e7:52:0b:6e:2e:53:e2:e5:88:7e:60:41:25:0a:33:c1:56:9f:9d:7e:41:44:2c:41:d7:a2:3e:41:93:33

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/110.crl

Check the revocation status for certificate rt-forum.de
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for rt-forum.de

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for rt-forum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 513900952427060833840300234060637797464813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 10:51:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-12 10:51:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rt-forum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810620573941964271501422240742108892922006851310475426732908377768505591430674369991705571288932015198561043934003115314286460012894316902682323791937239395804838874076729278743214015776148956734579363105265196206094952795865920522936548538304677482627740495496338725859898049052209247431973433569964996013684957025353456171851917156187889120063117866285906412540454870892830785616051060215784211650626875658147691624761529114189133401396009808756170367524036365525724822838498172925055850136822693336089158982596081386386314061027297269803605474269359375698862688397223810483668042225980802772542995512958763381598935387039009015478863691567673832690566270751615627120739617601892563239248937978224489152920806619115674103881823467489793340275145705757463627841103327516044496757708564111808149529758829740475849021962368345765610047322739370743862932459821798839242067886175416673475420850898151194196178654031030995244844122621859851344991833234198224009078043185547466249834848120585103241289288002262407574580590521708084352976038218032474972393769773599088106306745698252487213391288132877387705676604085543869438752484516541426734156240370936498781932975443839205686973577703311148327990547882776035862277415693812844008403947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48d119e97869a096eab52718cff68120fde06446
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt-forum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rt-forum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/110.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001976e465e0c000004030047304502201facaa410da4a6a3f91545246528c05acb58880177b46e563091611cf2200b5e022100d06f13407c2cb7b80ac77c9c04f19c9bbbf7f94ad863f725a7a76cb5acc9c5f700750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001976e465e03000004030046304402203f1242cce65cbf75b339357169b62c458a84990d80d1c0f793f263e9e1a1e8b702200608c40e5c54b3541fb493917f2fd685aa6989c4dd2dc52500d3726d1eb931a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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