zapmedia.org
Issued by R3
About this certificate
This digital certificate with serial number 03:9d:61:00:73:93:d1:97:3c:bb:6c:90:bb:8a:be:90:77:dd was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=zapmedia.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:9d:61:00:73:93:d1:97:3c:bb:6c:90:bb:8a:be:90:77:ddSerial Number (int): 314890126861647725054482913540506226030557
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b3:8e:b9:d3:a4:52:b4:03:c1:72:cf:9f:6d:b6:e1:d0:85:07:0d:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b8:b1:47:e1:13:ab:0b:50:94:6a:a5:12:01:76:16:a6:cd:fc:50:1e
Fingerprint (sha256): 1a:7b:31:40:cd:7b:00:25:cb:72:81:2f:39:f4:24:99:ca:8d:30:54:b7:e3:9c:df:8b:6f:8f:32:c6:de:c8:7e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate zapmedia.org
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zapmedia.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alaggia.com
bambooremovallongisland.net
carboncreditarbitrage.com
child-foundation.net
getiton.fr
keyapahacounty.com
kidsdentistry.in
zapmedia.org
bambooremovallongisland.net
carboncreditarbitrage.com
child-foundation.net
getiton.fr
keyapahacounty.com
kidsdentistry.in
zapmedia.org
Other certificates including the domain name zapmedia.org
(limited to 100 certificates)
sculpit.world
5272653.ca
themodelhouse.live
zapmedia.org
zapmedia.org.zapmedia.org
zapmedia.org
dumptruck.ca
tvone.co.za
vertera.ca
tokenrenting.com.anja.boutique
domain.limited
why.bible
ebaytes.ca
recover.vc
real.world
lng.world
5272653.ca
zapmedia.org
zapmedia.org.zapmedia.org
vertera.ca
gemalings.ca
zapmedia.org
zapmedia.org
5272653.ca
5272653.ca
jimmy.cc
zapmedia.org.zapmedia.org
5272653.ca
us.world
ebaytes.ca
zapmedia.org.zapmedia.org
ebaytes.ca
1081.org
5272653.ca
zapmedia.org
zapmedia.org.zapmedia.org
proassislife.ec
sculpit.coffee
mack.ac
zapmedia.org.zapmedia.org
5272653.ca
5272653.ca
ebaytes.ca
vertera.ca
5272653.ca
hudson.bible
zapmedia.org
relevanceventures.vc
5272653.ca
www.zapmedia.org
ebaytes.ca
relief.vc
ebaytes.ca
5272653.ca
ssl-24qde.epik.to
ebaytes.ca
ebaytes.ca
sculpit.world
5272653.ca
themodelhouse.live
zapmedia.org
zapmedia.org.zapmedia.org
zapmedia.org
dumptruck.ca
tvone.co.za
vertera.ca
tokenrenting.com.anja.boutique
domain.limited
why.bible
ebaytes.ca
recover.vc
real.world
lng.world
5272653.ca
zapmedia.org
zapmedia.org.zapmedia.org
vertera.ca
gemalings.ca
zapmedia.org
zapmedia.org
5272653.ca
5272653.ca
jimmy.cc
zapmedia.org.zapmedia.org
5272653.ca
us.world
ebaytes.ca
zapmedia.org.zapmedia.org
ebaytes.ca
1081.org
5272653.ca
zapmedia.org
zapmedia.org.zapmedia.org
proassislife.ec
sculpit.coffee
mack.ac
zapmedia.org.zapmedia.org
5272653.ca
5272653.ca
ebaytes.ca
vertera.ca
5272653.ca
hudson.bible
zapmedia.org
relevanceventures.vc
5272653.ca
www.zapmedia.org
ebaytes.ca
relief.vc
ebaytes.ca
5272653.ca
ssl-24qde.epik.to
ebaytes.ca
ebaytes.ca
sculpit.world
Certificate
The complete raw certificate details for zapmedia.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISA51hAHOT0Zc8u2yQu4q+kHfdMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MjIwNjU3NDVaFw0yNDA4MjAwNjU3NDRaMBcxFTATBgNVBAMT DHphcG1lZGlhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrg qK74wbRd0VcWQPeUuiwZqYkwm0McNVT0WIT0W1mZCkPeUbBf1nSCv/18KmWr6+Yd dsSYA8LO3+8w5RKY1EmmRTzpIYb8qB/OHGLPV7xVjZbsD6wwSI4TOZAgd0EbzRxJ pnmYJ3AKEVkYtIwDYKpLRNsW7oW9TMTWD9eXoiJEclDf7JTzW0M5cuCseX6LuhFO PkIZ1Jz7yANurvHGL8lYRYvIteSb4DXzhJtjtG27J3fqBQ1A/xZ1TiIshLefGxO4 AEnIE/0tMEpaVY5LkxDnq2TMqnqyDyLtD2n+PIgofNBOart0dFCh7L3xeC6Mo4yu y4YfUCt9StCLmFKzlTkCAwEAAaOCAqAwggKcMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUs46506RStAPBcs+fbbbh0IUHDTYwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w gaYGA1UdEQSBnjCBm4ILYWxhZ2dpYS5jb22CG2JhbWJvb3JlbW92YWxsb25naXNs YW5kLm5ldIIZY2FyYm9uY3JlZGl0YXJiaXRyYWdlLmNvbYIUY2hpbGQtZm91bmRh dGlvbi5uZXSCCmdldGl0b24uZnKCEmtleWFwYWhhY291bnR5LmNvbYIQa2lkc2Rl bnRpc3RyeS5pboIMemFwbWVkaWEub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB BgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA3+FW66oFr7WcD4ZxjajAMk6uVtlup/Wl agHRwTu+UlwAAAGPn05mQwAABAMASDBGAiEAsfVBS6g71JDdSg/wBXpEJvMQ861G cETg4eyr/5LBX4sCIQDkzuEeKIr0OMby1Weov7HdQMZmwBGcLKgZSqDx232K2QB3 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABj59ObU4AAAQDAEgw RgIhAI6Mn+VFqvpLJ80jhsizhimJ97AaKtzQF6X9P+jMCvVbAiEAmc1qPcOFGnWr A5/bI3ThRISEzy68RSbf9ueI/fxaLNUwDQYJKoZIhvcNAQELBQADggEBAJtU4W1m XTSqxTyhtWqbvzcK9DVFiYxD4QXtgX2qoFlmH9D9L+WQwwufHTvAOYvLiIDjStxk NfABI3qSRDy/HJAmCI8NB23Tbs2Gohl3AE3MuMFFPnX9537roeRtzTHYde0tBeOU 2dothmg+bnJUsVeE5NRRKHBfy6wM15Gu31Py+KdaqVb9Cp6NMESt1CQfJn/XlmEL cIVKq1fiCFuznzOj+PmdOruz5JoFEhxC6m5QJiDS9f3KlKQYCuvl5+4NyeNnEB9t XPuCiioJdYMyeZBnkVW+R522QMws+JKQhgnuuIldTkHt69NNEH3Du+YMN3Rr5/32 Z+UCJnxWw/JKjoE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uCorvjBtF3RVxZA95S6 LBmpiTCbQxw1VPRYhPRbWZkKQ95RsF/WdIK//XwqZavr5h12xJgDws7f7zDlEpjU SaZFPOkhhvyoH84cYs9XvFWNluwPrDBIjhM5kCB3QRvNHEmmeZgncAoRWRi0jANg qktE2xbuhb1MxNYP15eiIkRyUN/slPNbQzly4Kx5fou6EU4+QhnUnPvIA26u8cYv yVhFi8i15JvgNfOEm2O0bbsnd+oFDUD/FnVOIiyEt58bE7gAScgT/S0wSlpVjkuT EOerZMyqerIPIu0Paf48iCh80E5qu3R0UKHsvfF4LoyjjK7Lhh9QK31K0IuYUrOV OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314890126861647725054482913540506226030557 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 06:57:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 06:57:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zapmedia.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27630733924937385612099308688901892923383170697255899059438118175945939973571025197023846673019692566809784874060709897123912168176279856520401940339849294049469412817260717132038052938956229838382795307117211059231177622289325018994284994086658639491267212553339406433126935345547427935333652861230797981433204071663245772040657833167247849637035189457727973317658390294540741701577335087173188669607078352682393464233698264229630808552797287540179786320920178352487584280420649909089620734546533146265705562893843306968479692045745447958918301990599882758421514357462096903445096380530753106201152045214896990950713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b38eb9d3a452b403c172cf9f6db6e1d085070d36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaggia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambooremovallongisland.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carboncreditarbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'child-foundation.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getiton.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyapahacounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsdentistry.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapmedia.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f9f4e66430000040300483046022100b1f5414ba83bd490dd4a0ff0057a4426f310f3ad467044e0e1ecabff92c15f8b022100e4cee11e288af438c6f2d567a8bfb1dd40c666c0119c2ca8194aa0f1db7d8ad9007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f9f4e6d4e00000403004830460221008e8c9fe545aafa4b27cd2386c8b3862989f7b01a2adcd017a5fd3fe8cc0af55b02210099cd6a3dc3851a75ab039fdb2374e1448484cf2ebc4526dff6e788fdfc5a2cd5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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