blog.findawayvoices.com

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number a3:10:0d:3e:f5:4b:48:fa:be:47:0f:e6:09:14:83:f6 was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blog.findawayvoices.com

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): a3:10:0d:3e:f5:4b:48:fa:be:47:0f:e6:09:14:83:f6
Serial Number (int): 216747508722063609359965850019694937078
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: da:ae:60:45:75:cc:70:44:3e:b8:c4:fb:50:22:f8:72:d4:8c:85:5a
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 80:08:00:02:86:33:f0:3c:ef:8a:2d:3a:f9:b7:45:3b:48:b0:63:14
Fingerprint (sha256): 32:4c:8b:ce:4f:9f:1e:58:0f:76:18:d6:b8:a6:31:17:8d:3c:54:45:e5:ef:f2:a5:ea:fb:da:fb:0a:fe:56:bc

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate blog.findawayvoices.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.findawayvoices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.findawayvoices.com

Other certificates including the domain name findawayvoices.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for blog.findawayvoices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDuC1dlMQfFGqgBoan2e
w/UhTv+Y61qyR9Olih2nhiKhTyPUZiHxyw4rW24ndGHd4akGIRXrqkQ3eP0as7MU
bNfJZrVhuo4AIrVfr3dGgaojDFBhvXpvwY7MXaEsN3/7X1MC1IPtt+TAP18NdDU1
W+zY1VxzNNGK3TlQV7PmTC1MHHAg62rtWrF4r0sxh42S2jnb3npP63KxKNv+liEM
SoS6qxiUnKiNkCmU1CFp8L7rpU652APftSMTZzsowvtyreumrC3usBVGzdGXW0mb
iyvjvzCUS4lx+pFqNXK18BxW82ydc+rpy7Ram+nWA4+4rQgOT1pSm/zoKeAnIc4c
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216747508722063609359965850019694937078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.findawayvoices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21237381239403993001844722833673487425296380081760915570214781487275398108693173716381658377518943647064903065895095851383259560258412885451864555856378285427853153397422786148751489771854356396870005323456984749478128303398772856705468597982311484638864985549960757692428332049675117792203403859489210201367725606318461436284896205584668028440003304274031557196025630003457260404435890382368250201848466513389316604462632057986713465304700610868457389940958126592804040776752233430099896961692602540511606643402309841202527876031212312608316761660659100492363003675669778767691250519678021169813754703193719350107249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daae604575cc70443eb8c4fb5022f872d48c855a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018da17ec300000004030047304502206367a393bbaa820fa58e4b3d067e2e8fe6ba830df38dc87cf9c0273d4e412db902210097f75671bda494718684ce49912d33de7f115c8263282356f47e8fba7a3d7c660075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018da17ec3760000040300463044022006a649387ae17a1a1c38bb232f4c96153e841a3cc1eaa0de27b042fc8361f0c802202de722cd5dadd77de82a6c6f78f2ed769417f8effd474e3263b7cd525b576563
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.findawayvoices.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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