Certificate Chain Deep Dive

Comprehensive certificate chain validation and CRL revocation analysis.

HTTPS://

Try these examples:

✅ Valid Chain ❌ Revoked Certificate ⚠️ Incomplete Chain

revoked-isrgrootx1.letsencrypt.org

8/13/2025, 10:36:35 pm UTC

Certificate Chain Validation

❌ Certificate chain has issues that may prevent browsers from trusting it.

Issues:

  • Certificate 'revoked-isrgrootx1.letsencrypt.org' is REVOKED

Certificate Details

End Entity

Leaf Certificate
Download PEM
Subject: revoked-isrgrootx1.letsencrypt.org
Issuer: R10
Serial (Decimal): 0x06B924E596A5A3A36A05A1812B48A50DB57E
Serial (Hex): 06B924E596A5A3A36A05A1812B48A50DB57E

Valid From: 2025-08-06 15:01:47

Valid Until: 2025-11-04 15:01:46

Signature: RSA-SHA256

Version: 3

CRL Revocation Status:

❌ Certificate is REVOKED (found in CRL)

CRL size: 136790 bytes

CRL URL

http://r10.c.lencr.org/127.crl

Root CA

Download PEM
Subject: R10
Issuer: ISRG Root X1
Serial (Decimal): 100566080436859127493189557861323994576
Serial (Hex): 4BA85293F79A2FA273064BA8048D75D0

Valid From: 2024-03-13 00:00:00

Valid Until: 2027-03-12 23:59:59

Signature: RSA-SHA256

Version: 3