DV SSL/TLS Certificate for thinleid.is

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the thinleid.is DV SSL/TLS Certificate

This certificate with serial number 05:48:a8:1b:bf:9d:2e:f9:4e:5d:b7:96:58:48:d1:37:47:21 for thinleid.is was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for thinleid.is provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:48:a8:1b:bf:9d:2e:f9:4e:5d:b7:96:58:48:d1:37:47:21
Serial Number (int): 460285214458809442424739058769928379647777
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 5b:a2:90:ad:08:56:6a:1c:1a:56:38:c3:51:dd:2a:90:44:dc:d0:62
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 79:6c:6a:ba:ea:a5:e3:5d:cf:f1:a6:46:79:ed:de:44:5a:dc:c3:ff
Fingerprint (SHA-256): 57:67:d7:ab:ba:f6:7f:4c:ee:ca:6e:05:74:d9:ef:60:62:a7:cf:e4:b1:f4:6b:21:c6:92:12:89:ed:f9:ed:6a

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/34.crl

Check the revocation status for certificate thinleid.is
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for thinleid.is

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

thinleid.is

X.509 Certificate

The complete raw X.509 certificate details for thinleid.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgISBUioG7+dLvlOXbeWWEjRN0chMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNTI5MTA1MjA5WhcNMjUwODI3MTA1MjA4WjAWMRQwEgYDVQQD
Ewt0aGlubGVpZC5pczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIJ4
2vHLZUzV93jMYRdoOpL+qOdIz8A+bJKXz0qrELfd5DPzHKaOBkq1sXcMv8O9Eelo
uRLsfZV6objDrjT+/MhLcU5aGZnUt7wehvNWPg86C9ZErjZykVbYuhzVG/SIgpcB
Cqkc0VnieBewcThs9uW9q2c9SyC5aPGsK0aut7MnTwW5Mk6BdjTDeAOlQuWsQrXX
ovKOozat5Oqzov5QDuEOf6GFl2Hm66nyGjO49mKwRKYcxsi7ECB4aGNqWh0Y0V7Q
McU8n36JMCZuYzdOx3tXeAzXiDC9ZLIDrZyHGcqgG9oWw+UoiwRSWI/mG9i7+dmW
3cKdaPBM6Zzag85MWTECAwEAAaOCAhwwggIYMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUW6KQrQhWahwaVjjDUd0qkETc0GIwHwYDVR0jBBgwFoAUxc9GpOr0w8B6bJXE
LbBeki8m47kwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEx
LmkubGVuY3Iub3JnLzAWBgNVHREEDzANggt0aGlubGVpZC5pczATBgNVHSAEDDAK
MAgGBmeBDAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjExLmMubGVuY3Iu
b3JnLzM0LmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AO08S9boBsKkogBX
28sk4jgB31Ev7cSGxXAPIN23Pj/gAAABlxvhTrcAAAQDAEcwRQIhAPXtkUAhoueq
sWQM79rmcek7ijfURG9eRVArZ1We991vAiAj2Mm2O5FyITdP+ArzQmAcQYOooYKw
kBQC5ejjZTxjswB3ABLxTjS9U3JMhAYZw48/ehP457Vih4icbTAFhOvlhiY6AAAB
lxvhVoAAAAQDAEgwRgIhANvGELD2xUM9J3mxPt0vvCdZcdTWlgSFuCv1Wxxhujf2
AiEAjKv6WcBtvydOwI/pexs68bedW39NNmLqk7EW3VCLTH8wDQYJKoZIhvcNAQEL
BQADggEBALoBfWMJcKO1rJQXxV961wszqeYVuqpfrbJ5zOkdZi2y8bD5nmKgpWK/
TVUAfv1jya4yZWXpr59AZP/cSsIcNqv3KqgR0Oiviy9KKVpaoW38cmWLSd/0PURi
+6npvWqzBbPACP3albjQaSSQVebLVR3DEkoumyR37AR9/EoHWUIpqMRU6b27vKBE
jx1diEA0kYgnhSS7l7p1gd4HuZkoVnKtOfZv+ZDdfPTKhZo695ug0L3TV8/hUQfd
FbzImF1qeb9EUOldZNb6nrqV/0EsVppNljjzRc92s2U8geS11bUg8iG0LLuWlmra
QapWW743fZgyH71/lUVzdI6B7Lab3bY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnja8ctlTNX3eMxhF2g6
kv6o50jPwD5skpfPSqsQt93kM/Mcpo4GSrWxdwy/w70R6Wi5Eux9lXqhuMOuNP78
yEtxTloZmdS3vB6G81Y+DzoL1kSuNnKRVti6HNUb9IiClwEKqRzRWeJ4F7BxOGz2
5b2rZz1LILlo8awrRq63sydPBbkyToF2NMN4A6VC5axCtdei8o6jNq3k6rOi/lAO
4Q5/oYWXYebrqfIaM7j2YrBEphzGyLsQIHhoY2paHRjRXtAxxTyffokwJm5jN07H
e1d4DNeIML1ksgOtnIcZyqAb2hbD5SiLBFJYj+Yb2Lv52Zbdwp1o8EzpnNqDzkxZ
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 460285214458809442424739058769928379647777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-29 10:52:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-27 10:52:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinleid.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16470575591515948718053732884041274569197929830510432469287505250800605932837207464226515011063090498594495560791304556962960192281925157474225597569761045904143619963163790354504701850493153753630562513847466025536062571507967517439916354597314912496472107992518652977160427640618675415478615234034463450216307587176871448255926268487481913838315180172149369209614774102480189404640023029342835840522547094297722057032049973572337198287306635342065671019552124995178185239257851781679968843858791212338556278620484091690329463236462712252789009450150397106940373982244701080243557774367069373063071442865668852832561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ba290ad08566a1c1a5638c351dd2a9044dcd062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinleid.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/34.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001971be14eb70000040300473045022100f5ed914021a2e7aab1640cefdae671e93b8a37d4446f5e45502b67559ef7dd6f022023d8c9b63b917221374ff80af342601c4183a8a182b0901402e5e8e3653c63b300770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001971be156800000040300483046022100dbc610b0f6c5433d2779b13edd2fbc275971d4d6960485b82bf55b1c61ba37f60221008cabfa59c06dbf274ec08fe97b1b3af1b79d5b7f4d3662ea93b116dd508b4c7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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