4z.ro
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e3:ef:a4:12:4a:31:ed:4a:6b:13:05:46:ab:e5:62:15:38 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=4z.ro
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e3:ef:a4:12:4a:31:ed:4a:6b:13:05:46:ab:e5:62:15:38Serial Number (int): 338899492484972874275529238399475433739576
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bb:0c:94:32:cd:0a:1a:7a:b1:c6:1f:cc:c5:4e:70:84:48:2f:02:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c8:f8:c5:8d:c7:fc:86:90:83:b9:90:c3:cc:94:f9:fd:2a:bd:06:12
Fingerprint (sha256): 23:35:02:ae:cf:ae:a4:50:21:5f:48:a3:8c:8d:7a:3b:18:57:07:8b:f4:59:dd:c9:8a:65:92:f0:f6:93:af:e9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate 4z.ro
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 4z.ro
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
4z.ro
client.4z.ro
ftp.4z.ro
mail.4z.ro
www.4z.ro
client.4z.ro
ftp.4z.ro
mail.4z.ro
www.4z.ro
Other certificates including the domain name 4z.ro
(limited to 100 certificates)
Certificate
The complete raw certificate details for 4z.ro in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISA+PvpBJKMe1KaxMFRqvlYhU4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MzAyMDEwNTRaFw0x OTA4MjgyMDEwNTRaMBAxDjAMBgNVBAMTBTR6LnJvMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAwJgxOxdUYBBKbGeyrUypDyMix+wQL64xvjGnt9ocTP2x VXYZ/mpxarwdqOl1NWsQtm/QD7bW6OPiIjqQJWrKraLBX6mboSzvMmiHfRq3cC3c mWWArt5+FCBmy4tf0gA6Ik75Nb4nJCETyc/nsx5QPzCo6WHID4q3J6I3i54knkGa BPHLYcJSJ5qk4jRQ8M4TxnLMQjAYVSoItnhyEseAnRIDESg9VpvDGlTRkCDuPmfb c2uJZgkQ5AXiu4yGbj7Ka0pTN6xnaZwgSlkhau1YCUoIcmlsE08DVDKuAfOxyXHd sT1Hxztn4j5PNnAxQTpwlOg4UucM9Pv1Tr0w81lFw+alwO7iUITvcuKozezb+cNx GHqXieqz0x7UXugOccczuXxMzRAvWBz1KJvsOTMlaT4hWDOgXo2zBz6OVJNIbKDl WMoSpDHkSdRhbWev6fyjWWKqgBcpbFO6YuWL5tHLgCAY0IzO7111s6Bqe4frtMus uuYRsj8aoE29hNGirsUAHYV3gOZHKrUbDPXW34scO5r9Fy14GmJJOOlRnsoqcjCY C0l3BPmnE3uKUWcy9P9dLkUwh0HjqnWEIKZOuHnyOg4CzwbusMLswmyT4GSETPAs le/WYqGkKhLbD0djhkR+uE7sPBNjwGeXq4BKeBQcXtT9bXtBRVrtPry35iYcZXEC AwEAAaOCAogwggKEMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUuwyUMs0KGnqxxh/M xU5whEgvAjswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzBABgNVHREEOTA3ggU0ei5yb4IMY2xpZW50LjR6LnJvgglmdHAu NHoucm+CCm1haWwuNHoucm+CCXd3dy40ei5ybzBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AGPy283oO8wszwty hCdXazOkjWF3j711pjixx2hUS9iNAAABawqU1NwAAAQDAEYwRAIgSDD2FIP3TqRs or7Ye7LVNrkhnpUWVnOaVL1U1VZrb08CICN08egGjipY9iDhWBFQiEtVgxK6F+GW nnZHfCEtl++OAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFr CpTW3gAABAMARjBEAiAnOhEI+0bKue7bxMm5f9PXKBRIDOVAdWBdOKGZ1c6q3QIg XRZP9ZAm5GfzVpvyRxU3ZmYgrvk/RryKu6eMzBZYCrgwDQYJKoZIhvcNAQELBQAD ggEBADuWHrHfArELh8Wq8JU1iIUFGUekyx0qDJVLUwPg4avFJFR7FjfVEaiacxZk aNqhz4OUzMGA7Ah5fGMv3UcA1kAXr3ke5SbzWaxKvSZqQ+TF2K9nZWvfsD4yHS7l yjSjXgCPwIkDIyRMIKTRVbwBa4k1G+SNWxsiq6GjdXoUtn4CzdtKMSAyaY6qI2df K9Ho8bXW1brRUGbC8+XzP9CuMzbm3QOKLPO8pT2xmuIPzVxJn6pWpcQB8XcUabKk ArQNpDoKvszwjxvpMlFRVU39eDyKZTZOo2zLxZ9QigwE18vDNd0zcmUAn4/JflMT BjOAt/7WCREioRju3AGmqagk/WQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwJgxOxdUYBBKbGeyrUyp DyMix+wQL64xvjGnt9ocTP2xVXYZ/mpxarwdqOl1NWsQtm/QD7bW6OPiIjqQJWrK raLBX6mboSzvMmiHfRq3cC3cmWWArt5+FCBmy4tf0gA6Ik75Nb4nJCETyc/nsx5Q PzCo6WHID4q3J6I3i54knkGaBPHLYcJSJ5qk4jRQ8M4TxnLMQjAYVSoItnhyEseA nRIDESg9VpvDGlTRkCDuPmfbc2uJZgkQ5AXiu4yGbj7Ka0pTN6xnaZwgSlkhau1Y CUoIcmlsE08DVDKuAfOxyXHdsT1Hxztn4j5PNnAxQTpwlOg4UucM9Pv1Tr0w81lF w+alwO7iUITvcuKozezb+cNxGHqXieqz0x7UXugOccczuXxMzRAvWBz1KJvsOTMl aT4hWDOgXo2zBz6OVJNIbKDlWMoSpDHkSdRhbWev6fyjWWKqgBcpbFO6YuWL5tHL gCAY0IzO7111s6Bqe4frtMusuuYRsj8aoE29hNGirsUAHYV3gOZHKrUbDPXW34sc O5r9Fy14GmJJOOlRnsoqcjCYC0l3BPmnE3uKUWcy9P9dLkUwh0HjqnWEIKZOuHny Og4CzwbusMLswmyT4GSETPAsle/WYqGkKhLbD0djhkR+uE7sPBNjwGeXq4BKeBQc XtT9bXtBRVrtPry35iYcZXECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 338899492484972874275529238399475433739576 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 20:10:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 20:10:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4z.ro' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785717014365175628625100293889407857016656722604038989450923008922394131278295041956550326072127629551155650717420242534717301172750934860143333256219937316653105539420637183579213422944337383072446131824909448147185266215760001772557981120132907896175346200850898667304877420017553776706973264851207967492675905465915192957433872018605313757286947526006053849849103335217783093482186992063860222725969468715085248974610469169474039771442511715838099206944467644977196700959870364444080852700258946747761825532319755435877723390700115271490755481438250611493355890172634140782338535188758442934149218725360944098734569182114849754571205015551294880211122570869245444426902472834782045804775123668671491733821513471574735530787224384561416101781786726097690187232415548545400062190903395133303209084506005341039311867722801244975735587793007541188659257979996555639007384563620549386503070810571122919365180212224457661345304793351641763289777969072939402157606464679439952396654804321682903625369453125304171809296080287929492549633811994394081288874912919704405601533236252947050068771639216190691574509487735955255719012289382393201556727732184121340726911377791880629975160480248968937729790101942179222983323869363173337352398193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bb0c9432cd0a1a7ab1c61fccc54e7084482f023b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4z.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.4z.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.4z.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.4z.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4z.ro' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b0a94d4dc000004030046304402204830f61483f74ea46ca2bed87bb2d536b9219e951656739a54bd54d5566b6f4f02202374f1e8068e2a58f620e1581150884b558312ba17e1969e76477c212d97ef8e007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b0a94d6de00000403004630440220273a1108fb46cab9eedbc4c9b97fd3d72814480ce54075605d38a199d5ceaadd02205d164ff59026e467f3569bf2471537666620aef93f46bc8abba78ccc16580ab8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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