DV SSL/TLS Certificate for v-l.ch

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the v-l.ch DV SSL/TLS Certificate

This certificate with serial number 06:7b:27:48:93:15:95:3a:9f:7c:33:49:05:1b:ec:48:7d:8c for v-l.ch was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for v-l.ch provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:7b:27:48:93:15:95:3a:9f:7c:33:49:05:1b:ec:48:7d:8c
Serial Number (int): 564580663442270524399274360405832881438092
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 79:21:83:3f:67:98:86:4a:1c:7f:b4:ce:ea:31:fa:c4:bb:09:a2:b6
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 5b:61:fb:69:bb:a6:d2:ed:fb:9b:14:24:85:6e:12:dd:9b:ca:e8:86
Fingerprint (SHA-256): 2d:24:0f:71:25:a9:aa:1f:29:43:35:0b:24:59:f9:a3:1b:fa:11:0f:86:b9:3e:db:89:cc:d5:84:2d:5f:5e:72

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/13.crl

Check the revocation status for certificate v-l.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for v-l.ch

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for v-l.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK44KwCAWUvjan5lXXHL
B4G8fOhWok10a4GznRk38J127MbmwPjYOoAxyzHMcZpNAjFtU64C4silS3RjDu4W
XI1XHAzvLyzSiceAhwkUHYVwAPf8DfFUQaulsMKnXp1v/UcPBfz2jZl2+C4bUgri
KKitFaWoXhz48uSdv99wIgmBO+p2uqe8/0VwoGncyXsnqJ13coi4aq7rzrdANjLN
HXtHC5mW83M5Fqr7znitskvQTlaboTPD489S10e2jscCBO7G9WO6loo9NHg2RcKh
LPtXkd79qOO5GbdlNXqnrORmwQ+Fs/2DU61Tblmg3GaHcS/ASzvLhYu0Fi54YQRn
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 564580663442270524399274360405832881438092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-10 20:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-08 20:08:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'v-l.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23313758904870238283709660250336070491177540518664862392896367161370607385838561921233467553785164442400423427492814550232550477619308177477048793789561640106337993721069130970910102178051158987387827601425288211120632610461858604749085444394846287793374183007368134990270542616482151733400601010801290367959307028046014785961723850799050231952086714015683307373192542723626074297342776119484789898169633845012019013953899687154125245512506385530363642615956455356822370726515791184302621360572484647678738054085243875947029572471898902477219579114475531162279611298822104356701421503504209144294584701176556133050329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7921833f6798864a1c7fb4ceea31fac4bb09a2b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v-l.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.v-l.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/13.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000196bc05b6c3000004030047304502200f8f9c3e79d1e68eb3061a7bd29cd48ed28fcf9793861c386eaebb1e73078f71022100cfbbd356a1d11c79792cca8a2c7ab09333776682f307726d97a26f650ccc4f98007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000196bc05b738000004030047304502206baf725fe291c20ce2603d2294a027d7096cc6b13b99ea0ba2dca64379bd7eda022100b1578b2e3eb58b3c720f911f009e03d3510056dbbc81560f8ee8eeb35557d522
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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