Certificate Chain Deep Dive

Comprehensive certificate chain validation and CRL revocation analysis.

HTTPS://

Try these examples:

✅ Valid Chain ❌ Revoked Certificate ⚠️ Incomplete Chain

revoked-isrgrootx1.letsencrypt.org

12/18/2025, 12:44:33 am UTC

Certificate Chain Validation

❌ Certificate chain has issues that may prevent browsers from trusting it.

Issues:

  • Certificate 'revoked-isrgrootx1.letsencrypt.org' is REVOKED

Certificate Details

End Entity

Leaf Certificate
Download PEM
Subject: revoked-isrgrootx1.letsencrypt.org
Issuer: R13
Serial (Decimal): 0x05A5D1449FF8857771C007318E581F96F850
Serial (Hex): 05A5D1449FF8857771C007318E581F96F850

Valid From: 2025-12-17 17:38:45

Valid Until: 2026-03-17 17:38:44

Signature: RSA-SHA256

Version: 3

CRL Revocation Status:

❌ Certificate is REVOKED (found in CRL)

CRL size: 238190 bytes

CRL URL

http://r13.c.lencr.org/81.crl

Root CA

Download PEM
Subject: R13
Issuer: ISRG Root X1
Serial (Decimal): 119635429456979344322213464088047616773
Serial (Hex): 5A00F212D8D4B480F3924157EA298305

Valid From: 2024-03-13 00:00:00

Valid Until: 2027-03-12 23:59:59

Signature: RSA-SHA256

Version: 3