zv.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2b:22:66:a9:5e:7d:25:20:2b:60:3b:b6:06:b0:02:6d:43 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zv.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2b:22:66:a9:5e:7d:25:20:2b:60:3b:b6:06:b0:02:6d:43
Serial Number (int): 363127012305990999009389560719309717794115
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:46:bc:38:9f:43:8e:12:63:53:c4:e7:79:20:8c:58:2d:ca:0a:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:0f:f2:cd:c4:8e:19:3d:cf:6b:ce:be:81:68:29:4c:18:0d:55:87
Fingerprint (sha256): 58:fa:be:a8:90:a2:79:68:d9:42:89:d5:0d:4c:52:2c:02:8d:05:a0:a9:76:42:2b:ba:9e:6c:5c:b0:ef:5f:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zv.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zv.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zv.org

Other certificates including the domain name zv.org

(limited to 100 certificates)
zv.org
zv.org
www.zv.org
zv.org
www.zv.org
zv.org
lamediterranee.com
zv.org
www.zv.org
zv.org
zv.org
zv.org
www.zv.org
zv.org
www.zv.org
www.zv.org
zv.org
zv.org

Certificate

The complete raw certificate details for zv.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363127012305990999009389560719309717794115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 08:37:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 08:37:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zv.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744394266969359917815522129826398321380401290074430906087726206164903750993568772337246714559696332163458174453773169167832486891641247022402732811011114783444463403327418180606576811941710920558751326601141330978926628020594623692848817392749066162727518718424950160699724935700146248027105544546705162239193490368142098365140379074311027440957201573846468462610404546220718455977476896093292863666635145308418099792705971181719300817487004553309654702571536409851271450823306799026754081338838789380032581786855351139468352867231793935244852873330961852262698813741241992269371903515011186099059483236793523010224895655971811526198722218322881382301288850151914661942660931080796815487561814696355371618080075323774499684374019266590313222926455926813787400608990556426451420379980250887810755796783632641136531824720358488027989892500851003174097741454253125286194551723656773812155533003964906873948310919678956100457714107505595229056533508419091110607077096449431708045396005702326239281160121094204767899940246421088017392843211318778734942024643339910374239643003746389581980426261320723579513517093683199895336912825737125676825989670297542894048714079867183114086502564429219829786792789670250275245394446943941514366741771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e46bc389f438e126353c4e779208c582dca0ac2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zv.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170e2b48bff00000403004830460221008b459ffc9a80c823a46f2d2b209d3d50b68c19d3f8aaf291ad5923fc855f50ea0221008d1df8b7bfc8d7b92861c86b91f46be0f5a02790c8ddf8446aaafdedada9cd09007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e2b48bf300000403004730450220146d9e5ccf965989c39ee5fc6dedd91f7c802a5a7ebf977dcb4a8ecfaa16de19022100e0167150a73b2f6bc26c4eb68ac07b45945168343e4ab67db535c307e87068c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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