zavion.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:06:63:4e:4d:c3:3a:0d:da:10:12:24:0d:1e:ff:67:8d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zavion.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:06:63:4e:4d:c3:3a:0d:da:10:12:24:0d:1e:ff:67:8d
Serial Number (int): 281081726070247812622374732612687798167437
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:88:98:0c:e4:53:c0:2c:0c:da:78:cc:a1:00:3d:b5:a8:7a:4e:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:9b:c1:ae:fc:ba:8e:21:f6:56:a0:b3:1c:bc:c8:49:5d:ac:4a:75
Fingerprint (sha256): 4c:6a:c6:25:bc:af:e6:f7:a9:77:69:e9:07:fe:99:54:d2:0e:21:c2:12:b1:65:f2:cb:21:ce:58:58:6a:92:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zavion.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zavion.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zavion.org

Other certificates including the domain name zavion.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for zavion.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281081726070247812622374732612687798167437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 13:52:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 13:52:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zavion.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924256542392256955606020377037586076091322861873192255977338300065979135706556010921479482760484185469315608783310818129222341589002849668195358948476881283764986239930167233426988227756276801866502357695795171444376589617184033122360984628358100557065068357519967178419887885405327933552977596305455637759050703637258499035068287862482161436622496101139785606591187879996729738546118430996020215824361369035389002613135275284218456306666971876157070149022718802088401658221570172906700231373232685559687014739241309268154134279269861237937884795289830160030517031978832194572857701413436117430693881784911288654092700253566112495800433252045577411315702735265760918544185858613275923911006971616329590888974894135610267961461030001974672118269973592771335397866427080256570061739304280136411878341086254264660544059074777083070036651893585520113153780069613016328121380966296990906931891879215822939854934836045569664510518347379233688360887282397983849715879800633472013691781354594959016194555019204236082264592188381853301462845458494668041498524769455551939281249494522004730331527586617512161926408784213005259493614294049162433334594528341049446952289862422928358949347553775715548049460355408576668486408064389047936841894693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7888980ce453c02c0cda78cca1003db5a87a4ef8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zavion.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f3d8ba91a0000040300483046022100fc6fd89d3c0c4e4ad6ab47e709abbe12d0f4eb282147b1d7ceed2e1cf050353c022100f8b55ef9c4a370037042dfe196546a6cd5da6e787179281cdcc8abb22305f97a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f3d8ba9130000040300473045022100c6ba8de48f80aaaa915d925ecc03965c383743f4bcb338282caff52a3d027786022058e97a6e0b5fe2808a51dbc8e321d00e99365f84cad4ee32665003343acb7b74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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