zavion.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:34:7f:cc:21:a2:50:66:d6:fb:a8:a6:f8:b9:ff:e0:b4:71 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zavion.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:34:7f:cc:21:a2:50:66:d6:fb:a8:a6:f8:b9:ff:e0:b4:71Serial Number (int): 279201412741372727834926149560771337565297
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ce:dc:9b:7e:50:7d:f8:11:38:13:a5:55:24:14:16:d8:fe:12:28:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bf:4e:cc:50:fc:ba:88:cb:6e:f1:66:c8:e1:7a:82:54:c5:c9:f9:70
Fingerprint (sha256): 28:df:b9:62:8a:99:93:b2:89:dc:de:fe:f3:ba:85:d9:7c:fb:18:dd:4f:dc:7a:a9:47:9d:38:09:9e:87:31:15
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zavion.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zavion.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zavion.org
Other certificates including the domain name zavion.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for zavion.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISAzR/zCGiUGbW+6im+Ln/4LRxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTcxMzQ0MjdaFw0x OTExMTUxMzQ0MjdaMBUxEzARBgNVBAMTCnphdmlvbi5vcmcwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDE2sWCKMT0W+qo9ULNcH7BM8sEj6pO5NIFbpiY g9ZPm9CRs6CEB4y53UceJf/dHIU6SdJJTTtNDSpQGZT0MFejV/wLUhIZI4eXDk/V A1GN7nySh7dz1ahbov9peKnD8H17rbtC/obn0tbH8g7QLPM7YpAovFemh/iV3zLj ttOziHB/vFHJycNO8fo4q9SsKrhZgOYOmHkke/4qfY4VNxV5pD9jMbODYJETuDZ3 Of21aNSQsD4XWGsyBT8aNof8vsLO1Xqep2Ih2JLnVJO1wVL4ekB3Uopdr3zyryfu LE1ND9D1h4P36UfkyB8IXgPTBXc2CcgrfAxMSNVqM98WnQ2ruSWBxwfVf0X1w0fA N6t79ChGYt6DicUKVwWetPKFP3XCMheb93D3JDIaBnRCFmQ3Vv3lulB3eV4iKiSY 0vS28fXDk7ySTsH05odUpnwJVn73KSR8OZD3uoQD47KSO/oTsxrQlJRItXeWYlSJ RpB4do0vJN/tcomuI3FiBw3WlRZlNZFkpVqCwUlvydYvzm/r+X+2O0VmeDqeo3UO OVtlLi66G4yjJTypOBdERYk77hqg7A5vLm78NG6bfCIuCC5ong6Pz9dmHe8zghqO ZmSLz+n0/NVeFcJIHLKCP7mU2b6Ph4KUcmUzc/xrdS0M3MCZGg9d4yJtxRFL6Qwj CspZQwIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTO3Jt+UH34 ETgTpVUkFBbY/hIobjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnphdmlvbi5vcmcwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDi aUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWygCWqvAAAEAwBIMEYC IQD3WwT9fknu2/uCd/z0u6RG9vsWBUNzZvrhDaSmRx+H6gIhAPYJ1X+OtuuOiRA8 Ks6Jy/KeC6TQXC9ADeLke3E1iOUBAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFsoAlqngAABAMARzBFAiBt6LxhyBEj9UZ8eEv5o5s57j3H7GKA D47xx4iehdVXBAIhALOxw55lQi3ryNqFEMpb8CVac4srBKyKJEvcN22/c95bMA0G CSqGSIb3DQEBCwUAA4IBAQBZw+t/X8Wqz/PliLU8erJHGO2W73IRBxYm/arvI6ai RNZN7RkWAbWvz+lYpnWeTfP6EoRktvCWzSa6s2TL15zm0aRdaN4NYPKAx1knyHZq vFTl+iMFsHAEXHAoX+eB9jgrqtxV7ITeWoecH4dTXwrMBFg8BOO8QXiXBxd2QBxg HmPHiI46isfuMm0bUMuAAT7AzquYmn9y0DExU+oZnH48muGetBtEufYJX/Suhmt6 6xQJpJZzN0Bp9pM0et2cTfGH/AWYY3MqSU8diSiAt7gPOWSQZOcp4HYcVRO3ZlQ7 K6c6NYgrJ0FiF3c8Ckg32c7LqykKhocAElMT9PMRySJW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxNrFgijE9FvqqPVCzXB+ wTPLBI+qTuTSBW6YmIPWT5vQkbOghAeMud1HHiX/3RyFOknSSU07TQ0qUBmU9DBX o1f8C1ISGSOHlw5P1QNRje58koe3c9WoW6L/aXipw/B9e627Qv6G59LWx/IO0Czz O2KQKLxXpof4ld8y47bTs4hwf7xRycnDTvH6OKvUrCq4WYDmDph5JHv+Kn2OFTcV eaQ/YzGzg2CRE7g2dzn9tWjUkLA+F1hrMgU/GjaH/L7CztV6nqdiIdiS51STtcFS +HpAd1KKXa988q8n7ixNTQ/Q9YeD9+lH5MgfCF4D0wV3NgnIK3wMTEjVajPfFp0N q7klgccH1X9F9cNHwDere/QoRmLeg4nFClcFnrTyhT91wjIXm/dw9yQyGgZ0QhZk N1b95bpQd3leIiokmNL0tvH1w5O8kk7B9OaHVKZ8CVZ+9ykkfDmQ97qEA+Oykjv6 E7Ma0JSUSLV3lmJUiUaQeHaNLyTf7XKJriNxYgcN1pUWZTWRZKVagsFJb8nWL85v 6/l/tjtFZng6nqN1DjlbZS4uuhuMoyU8qTgXREWJO+4aoOwOby5u/DRum3wiLggu aJ4Oj8/XZh3vM4IajmZki8/p9PzVXhXCSByygj+5lNm+j4eClHJlM3P8a3UtDNzA mRoPXeMibcURS+kMIwrKWUMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279201412741372727834926149560771337565297 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 13:44:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 13:44:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zavion.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803096604218261267129748455953777711422850541981622105993193584859162909365682625552527883336176570006166420581732741525585740217595143520446203744647581783552221717513913886883786134711948535542409149485606389873224580736005300692196635433934266104605878271071182365678282387280624496204150238165680170891832202605836441293597916346399417625195070946825330964370317911440428757230102083089812021610913564889630013372407061810739097199551570496828930609770739435690590595980369522364660125377570982362863250877153353220922587020926876255575276840715238984382171052390320400477622961787757538535730174784069743472152062651287343835554526338663607955576561484437595531601909425043428190608150266255153827664300202048120610109299022864675056515120726256795337489611371899928215886225342956733268442358733468582257789954570066668436881104346989806508119611047178570286875213356143329992686372732926430497779967765642587212029652988912714830263041722146866867287498377388975330904603071490484139184501125890184503273432546533848205760900903744895104727143534319027762593752252860417811418319742159038961630495088241789829010929716818499585979027260491297730182084123193756131968523591956611594989365069840675854563301152144806519472019779 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cedc9b7e507df8113813a555241416d8fe12286e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zavion.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ca0096aaf0000040300483046022100f75b04fd7e49eedbfb8277fcf4bba446f6fb1605437366fae10da4a6471f87ea022100f609d57f8eb6eb8e89103c2ace89cbf29e0ba4d05c2f400de2e47b713588e501007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca0096a9e000004030047304502206de8bc61c81123f5467c784bf9a39b39ee3dc7ec62800f8ef1c7889e85d55704022100b3b1c39e65422debc8da8510ca5bf0255a738b2b04ac8a244bdc376dbf73de5b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0059c3eb7f5fc5aacff3e588b53c7ab24718ed96ef7211071626fdaaef23a6a244d64ded191601b5afcfe958a6759e4df3fa128464b6f096cd26bab364cbd79ce6d1a45d68de0d60f280c75927c8766abc54e5fa2305b070045c70285fe781f6382baadc55ec84de5a879c1f87535f0acc04583c04e3bc417897071776401c601e63c7888e3a8ac7ee326d1b50cb80013ec0ceab989a7f72d0313153ea199c7e3c9ae19eb41b44b9f6095ff4ae866b7aeb1409a49673374069f693347add9c4df187fc059863732a494f1d892880b7b80f39649064e729e0761c5513b766543b2ba73a35882b27416217773c0a4837d9cecbab290a868700125313f4f311c92256