zinnia.capital

Issued by R3

About this certificate

This digital certificate with serial number 04:0c:77:84:80:8b:4a:51:f3:1a:1a:f8:a4:62:85:2d:ff:27 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zinnia.capital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0c:77:84:80:8b:4a:51:f3:1a:1a:f8:a4:62:85:2d:ff:27
Serial Number (int): 352691398251960124552809952043022737604391
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:88:47:4a:8b:70:28:15:3c:27:d5:3a:c5:08:14:df:e3:6a:5c:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:b5:7f:07:50:4f:01:a9:8e:61:8a:08:5c:22:a9:59:3d:54:c5:ea
Fingerprint (sha256): 39:b0:c4:3d:78:0b:40:9d:aa:b6:f7:03:84:fb:bd:2a:71:ae:a8:88:53:b1:6d:62:5f:69:37:03:13:fa:18:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zinnia.capital

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zinnia.capital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anglocatholic.com
babyworld.co.in
baileycounty.com
bridesornamentcollection.com
burncharlotte.com
businessfunding.partners
davidfruss.com
drewliophoto.com
exposethenose.com
frontiersmansports.com
grj.co.in
hillcountrywoman.us
iq.sitedetectives.com
newyorkcityguns.net
openvc.co
palmbeachgardens.net
poisonivyexpert.net
profound-strategy.net
shopmovers.com
skinriot.net
slimit.net
srebroinwestycyjne.com
stxproudboys.com
tb24news.com
thesoftwaresuperstore.com
tntravel.com
vethemp.com
www.loungeyourlife.com
xn--1-1ga.at
zinnia.capital

Other certificates including the domain name zinnia.capital

(limited to 100 certificates)
blood.vc
sexerencontre.be
zinnia.capital
religion.vote
zinnia.capital
societyforcreativemysticism.org
zinnia.capital
dream.movie
baseballntx.com.jackphilips.org
zinnia.capital
creatingforall.org
zinnia.capital
coppermountain.ca
zinnia.capital
eringeemusic.media

Certificate

The complete raw certificate details for zinnia.capital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR1UZKnn/TVHsL0quhLz
BBKJXjBL9TEY2eI4Nxy2IlytkTSI9bhAyofDVmCWTMoIaOdgUZgDwP7kqYLLghDM
deRqGXGlIn7cDkgXS2HMpqJKFtqw+fBuIi64X9TXH7zst5JgzAfm1OwICQyQjB9w
+XNEFxL3dUiQjjdfCRgK3B3RjPf8ys0JkALZem4lvJoafQmm2oC5L8QgMQf4TJdO
Ky6FMKzrPMAdK7dVxSisdrzyMzd3ma3hy/70REmZf9rLTSJZyZRDndq6rxa4gtax
0flccpBD7VLMilvf5WFv/4419DtXj4crFiQ/CpW6pVDJ//CgI11OFeRfV7OcZba3
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352691398251960124552809952043022737604391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 10:38:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 10:38:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.capital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22863596193741922543181937485707750841844260842218475084454876234342486735854446922292066659344745916805560989615992582462836843729626751030357509520738917308545249453440518353513859906399787995462924189446277472879808684001709981905469107388114758322078619841280915761122655058250253227411009075861004591299987812736496667130905776660908282673762827698021414409287127699043113997109591867953925373269774883097307063140774935718401566295447674397410476117637255886995881425838764695094645270707278606998681428911990266330404322409925106889954768641172199098694529917601302379728747607756575549532120372828591481075499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6288474a8b7028153c27d53ac50814dfe36a5cd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglocatholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyworld.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baileycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridesornamentcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burncharlotte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessfunding.partners'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidfruss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drewliophoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exposethenose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiersmansports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcountrywoman.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iq.sitedetectives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcityguns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmbeachgardens.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profound-strategy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinriot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srebroinwestycyjne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stxproudboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tb24news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoftwaresuperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vethemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loungeyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--1-1ga.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.capital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d45905437000004030046304402206a773db9caaea0dbe4df283f81847546c637b4ace662d18a7963d99d9f19e03302201156535626ef291c48897f86defd569efc7ed5929aab32c00574056e41dd6e4300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d4590549c0000040300473045022003f0c7691abf5f5e3c8725da6353c98fbfc7aef1ec678ec7743cb777f1ad4f59022100bfc7fbf526c2b5cda7cadb4a41dd762a00d2016e3f83181a4357b18e8ca31f45
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000eeac266db0e3ca5518691bb63d90a5c56cba102bb4444153b6d95660e0d0679f5d6661150c9506a69e23c41ccdf6bad299e1e9d5a470bd0e6bb26064fdf774fc294cb5ed4dc4005bfcc8ed91faac93b92d862c6e66445adc936cdfb50030a613a2027d1a59f7c2b4403dee13f99a10e40eafaa5cb8ebb52c2d667f899341dcc09e2a63c10cf2cefc2971b895a60bc7d2b2d7aa6e3a388bdf2e24a63dfedde7394472e65f44e93c3b887cd82df654042f0e2b1ef227d19caa4191176fef27204715fb11d7ac6df0349a7c864ee84e8c3b2f282a69ef64e8828757d7a6b707c9a44560baf6c202b1cd371f44cbd593bb9de9e7755ded0b0445ecc9532896747dc