DV SSL/TLS Certificate for df.domonline.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the df.domonline.net DV SSL/TLS Certificate

This certificate with serial number 05:d4:ee:c2:e0:79:56:6d:55:c5:88:27:f6:9d:97:b6:57:1f for df.domonline.net was issued on by Let's Encrypt.

With 8 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for df.domonline.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:d4:ee:c2:e0:79:56:6d:55:c5:88:27:f6:9d:97:b6:57:1f
Serial Number (int): 508018659567500659992670059476236832757535
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 06:a9:cd:f0:be:2d:d4:ee:4f:1d:bf:cb:e4:09:f5:c0:b7:88:06:c0
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 8c:2e:8c:96:60:f9:24:a0:8d:66:e4:f5:ad:83:ee:8a:67:62:84:06
Fingerprint (SHA-256): 95:5b:0b:de:78:e0:c2:ee:6b:0d:66:50:ca:64:f2:6a:00:21:d8:13:a3:a2:03:6f:ab:7d:a6:64:c1:8c:3e:29

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/32.crl

Check the revocation status for certificate df.domonline.net
8
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for df.domonline.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

df.domonline.net
domonline.net
inza-service.domonline.net
loraserver.domonline.net
uvks.domonline.net
www.domonline.net
www.inza-service.domonline.net
www.uvks.domonline.net

X.509 Certificate

The complete raw X.509 certificate details for df.domonline.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y2rrnxB2FTk6iQhXOQS
MSsawpKlJ5wUkJOF51pFYzyghnvlkV68yFNJBvX8JinpnUC+YLV1vO+yhg0LraA4
WnfmfTcmV0XGMbje8CaLh+PtO0QepZ3BN4hFTM/p7VXkqmDFMcJW2soHLV9QTvWs
ZqxVlK3FoBLqGsr94+XDclwSM0XgAzXaHhCT0cKrH4alP7eUW9KGVPuT/k+ixPwS
rg2lSq42BMhdW8hF6s9+zpkdR/Qlt9Wb9jFFzoaJ0tRYvlWxBqLWkAw+9zjlHnga
nQJ4K43J3+LHRf65cRB4KrMiVPCBujN3DF+MzwR1BwZSWnsLZaClKG0fcSQFW7AT
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 508018659567500659992670059476236832757535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-26 06:32:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-24 06:32:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'df.domonline.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26958619349740573413699428475034541894936432752681193178571181446619966445458907070552586004627906211425611740745033626223518537089326205062409543324235301102692241075901528983404658903383917266105374854867097780322413956960249393458874246358569074572346864838159007401238731720166653192226870295916097419715494660315452773312160410809512001182712712098137516171910536378211023235748788208891954207934922985667520247121464616895373766330167532017798045158057869713792793119510589702023955357317421306062642224452062672945937928439629602695632327055375779402530737853225310539965489986239843409235819575328416537252739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06a9cdf0be2dd4ee4f1dbfcbe409f5c0b78806c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'df.domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inza-service.domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loraserver.domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uvks.domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inza-service.domonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uvks.domonline.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/32.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001970b80a7c4000004030046304402201aba61ec1765385410acd9b0fc973abacb063bfe9f25d06984b4feb6973270ab02206e5922040613ce192ecd1fa25ad1bd339033586012f4435006aad58140acc311007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001970b80af8c0000040300483046022100f184c0f5a4d510e41508bb2248158a5dce55a4809a59ec24bd4b7ed2533971c2022100b2c07103a81f2d4c11eb64fab0c74abc7685c203f6611c39fc89febed95d16a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d034c9d86c1dfb8ee40ab3bb12cb44fbcc215ec524d569e89697b568fd9a0fa89463edceed0e0406210759bcd7f9cc16869d057ba3c7ee0f24684ab70d3f2fe1ad46e6c8401b6453e6ef75186254ca93e762e57a7ae2188826834937fb32b674d4ecab8e2f612c97821898efe29de6076f69d22af77835270ab4279b00f130e5285d80ced301cdce4f64361a9495ae5f736ddd22b2cdfee9d822874293b20dc202612b1805ade3aa82ae598b77823448c8742e903eab27ba5a0cb1336edd06607c077200d2889aaa25b9e7e444a57ee59aa2265a5fedef1b32e3271a2e9f5703267d48bb012d4f2e2ee03950ea8c8e01ae60c2307acd9765ea9674045c3bead