blog.z-band.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:84:c2:dd:9c:c3:83:40:7d:b9:02:41:a5:a3:42:19:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.z-band.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:84:c2:dd:9c:c3:83:40:7d:b9:02:41:a5:a3:42:19:86
Serial Number (int): 265936998461119728626671367217112078752134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:9e:13:f7:f9:38:1f:b9:a2:78:56:a7:4c:36:d6:ca:29:19:56:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:33:f6:bf:9c:c1:78:f2:ac:ab:fe:ca:1e:8a:b0:fa:e3:b8:ba:b5
Fingerprint (sha256): 39:6b:a2:91:e7:03:2d:cf:f0:36:89:e2:0d:d6:21:a8:b8:28:ee:2e:0a:fd:3b:00:cb:a8:15:89:f5:2a:21:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.z-band.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.z-band.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.z-band.com

Other certificates including the domain name z-band.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for blog.z-band.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265936998461119728626671367217112078752134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 11:45:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 11:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.z-band.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830695224678598965309625741399990362058393716201247487007545250322517319861179527546397338031762825940177589713613118424922793554314083322731869655286968412094938304659886492411828255067020621758117022761570725243724342092119069733214541761454040641711731596492564735288792030466965646913475608783844805474658552508911821516689088181626237030157780687626015277158723745193388984411755948020003998947408348946674251536742018397714861332296615020938397700315092898543287262664417226361387239205367493519926672895399481630033811951019329458824473646096055986646468286672498860675949207220679538249518235755420537159239907502469590262921237911863893002072666778667449642183808294449117422833309267086487994166711747262935509543742546439467175379782282573882499589109910998827569916452294833959298937693410218472764822894058199763468940135333432806273293384535727260496995128511462030470856962608254209439176445599198098042178991670441962843853451516102753853427175312388426448903313974500745854730380165204864500048738534239626061898658226168919694397910321547975978348282066611919540889305043826687042549482987177284402448667318849145705736733272032380781516752181500343106326724733874891220981575794773505226710713760253843398563241627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da9e13f7f9381fb9a27856a74c36d6ca29195688
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.z-band.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c1eddd4a90000040300483046022100b988e9d8159cc4a599fa96b0bd304f0ab230c988b715b2cb5fbda1cba162e2a1022100f0448dc1fb69439c4495ee761d63c790672168a57fd19841ecbee7acd841c5a800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c1eddd2d7000004030047304502201e9f5a38180d9938546d5194a68a4f746187024bc1030ce6bc6d076ffd2ec65f022100f1823010be5ad78b9b2dbda0115e84acc7d073b0359db45ab37a36f0ad647369
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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