www.zodiacarchive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:58:df:cf:68:11:65:89:d7:46:18:cf:cd:66:16:4d:00:8c was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.zodiacarchive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:58:df:cf:68:11:65:89:d7:46:18:cf:cd:66:16:4d:00:8c
Serial Number (int): 291579200843581979841572633410067596378252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:f3:c9:c9:37:97:43:5b:d0:a6:72:9d:e1:c5:8e:42:3a:cb:86:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:9f:c0:eb:68:44:5c:15:30:81:7f:c3:01:0c:fd:33:89:8a:d4:0b
Fingerprint (sha256): 16:8a:51:dd:ac:6d:4a:09:de:e0:1f:42:4f:d5:15:51:df:15:c3:dc:30:4f:a2:75:f0:3a:c2:bd:ec:f1:6c:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.zodiacarchive.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zodiacarchive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ausrising.com
basedafmagazine.com
bestfishinghole.com
bikinijeans.org
dotcomdeath.com
fitnessthroughfaith.com
improveyourofficetech.com
luxuryislandliving.com
magentaliving.com
myjourneythroughgrief.com
purposepassionvalue.com
qmhc.one
safeharborseniorhomesusa.com
wichitasportsmed.com
www.ausrising.com
www.basedafmagazine.com
www.bestfishinghole.com
www.bikinijeans.org
www.dotcomdeath.com
www.fitnessthroughfaith.com
www.improveyourofficetech.com
www.luxuryislandliving.com
www.magentaliving.com
www.myjourneythroughgrief.com
www.purposepassionvalue.com
www.qmhc.one
www.safeharborseniorhomesusa.com
www.wichitasportsmed.com
www.zodiacarchive.com
zodiacarchive.com

Other certificates including the domain name zodiacarchive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.zodiacarchive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+cWfmw3rAWgxu/rhQoC
581OKZYcMS34gwsP3E0tYCzAnlwtuUvyvQQlu0BjY/j8X/uYOok+nfHyuYucSWcW
p5ZLX6M2NSgBg/WWQ/BnqCUZnwpDBzzV07sVUoaXfhHsYGPTGvnR9OYDRdfI3FzM
asVjM87dfqRUx/rOCtH7hXeo7fN8pBuDtKp53qfJe272MwHyMk2Wzr4WZmd7DUfw
KlmoTowJKfV/TuTZP7JDwLv+ZPEW/iwjCA77JC3jPGpNirGogeb0wqSJavZBo2RU
/El/18WrJg+q6avWea989EFFTbzJNSEptbFmycL6qEDNId/FsDuLlDr8orom4tfZ
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291579200843581979841572633410067596378252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 06:05:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 06:05:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zodiacarchive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24730423142492622672471009330515388108438262747612835823999179359965039630013686301799576830543169930075209235707326126339062733624218632205145327298938059346211261833372933937113614449124619543970433380471558305754474694461300719277859401765031881348202278808140127620417689630729633704121175309763079955036143202971153764912775124716295950035974251122912341471370110883072145357566704777128758755244655581161270883634042256911079896419036704802778829182137147422863942126802827347820189438822418611886607040028951958718618901114451887810199076631593860507097850787567073313241039114316704686282651949311220736580057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ef3c9c93797435bd0a6729de1c58e423acb8611
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (702 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ausrising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basedafmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfishinghole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikinijeans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotcomdeath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnessthroughfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improveyourofficetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxuryislandliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentaliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjourneythroughgrief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposepassionvalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmhc.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeharborseniorhomesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wichitasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ausrising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basedafmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestfishinghole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bikinijeans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotcomdeath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitnessthroughfaith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.improveyourofficetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxuryislandliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magentaliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myjourneythroughgrief.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purposepassionvalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qmhc.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeharborseniorhomesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wichitasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zodiacarchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zodiacarchive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f5705af27000004030047304502207b6e7403c9165297b0a1466b673cf08b672a05434d1835db33d035b0b8237801022100bcca2102e88ac72cba9eabc4a932d419650bb8058d8998eb9bbeee8caf262c6800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5705af50000004030046304402202141acbf9a95a6cbf4216457929e9a7722d8ae9c46dbb7f1a248d8634cb80f69022040973a9a2b5a900958a0f417baa95d4e14e619cc45a2e8fb73484b320558da53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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