zinnia.fund
Issued by R3
About this certificate
This digital certificate with serial number 04:d2:c7:b3:a2:57:4d:76:89:42:28:3d:9b:e5:7c:6a:cd:67 was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=zinnia.fund
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d2:c7:b3:a2:57:4d:76:89:42:28:3d:9b:e5:7c:6a:cd:67Serial Number (int): 420173889865404119484156787188419405729127
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6c:eb:ef:37:98:1c:6d:d6:cb:5a:90:cd:ee:72:d5:3b:67:8d:29:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 09:48:d9:c6:06:e3:5a:21:c2:2b:a5:7a:3f:c9:62:d8:4f:a8:fa:29
Fingerprint (sha256): 5d:2f:d5:44:9e:0c:a3:93:fb:c3:ae:71:5a:f3:7b:7e:dd:36:81:fe:ab:c0:84:5b:21:9e:de:3a:25:f7:fe:17
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate zinnia.fund
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zinnia.fund
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
corpuschristicommercialappraisal.com.shaaedi.com
dayonerealestate.com
deterrencedispensed.net.reimagineeverything.com
hoardingexperts.com
intelitv.com.scovillesecurity.com
larpcast.com
robsongracie.com.apdentist.in
viralbusinessvideos.com
zinnia.fund
dayonerealestate.com
deterrencedispensed.net.reimagineeverything.com
hoardingexperts.com
intelitv.com.scovillesecurity.com
larpcast.com
robsongracie.com.apdentist.in
viralbusinessvideos.com
zinnia.fund
Other certificates including the domain name zinnia.fund
(limited to 100 certificates)
Certificate
The complete raw certificate details for zinnia.fund in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISBNLHs6JXTXaJQig9m+V8as1nMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDMwODAzNTZaFw0yNDAzMDIwODAzNTVaMBYxFDASBgNVBAMT C3ppbm5pYS5mdW5kMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRDn FxHUsRNf9o64KjwwEFNrlO6siKMhS+gz74P8dfHWNdySln04f90qVG6wGJQNi+7f wxHCKB/5pyLLbjauMfn9bPiVJJCy59PB00Ogqlv6GEPAOx+v2lnTL42hned4o/ng TFMQwN0ss8rRpjjhuHHIAZpUEuuVI/QXB99XRUbzoSVVoiBTEXPa5f7HAFeoCxN7 eTwKdm0S2ZE2JtCSNAjIbWVNPxAXoFPaymyMmIQQ3Z2oGQjHYiSBi7dImGPhpzXm TxLRKCBI1u8uefjaDdr31e79y1iXYvvWTQ7bC8lcTIXT1Yh+1EUqhTU9+Ej5E/MW oq/2m1ZnAPDjYjmfvwIDAQABo4IDCDCCAwQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRs6+83mBxt1stakM3uctU7Z40prTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC AREGA1UdEQSCAQgwggEEgjBjb3JwdXNjaHJpc3RpY29tbWVyY2lhbGFwcHJhaXNh bC5jb20uc2hhYWVkaS5jb22CFGRheW9uZXJlYWxlc3RhdGUuY29tgi9kZXRlcnJl bmNlZGlzcGVuc2VkLm5ldC5yZWltYWdpbmVldmVyeXRoaW5nLmNvbYITaG9hcmRp bmdleHBlcnRzLmNvbYIhaW50ZWxpdHYuY29tLnNjb3ZpbGxlc2VjdXJpdHkuY29t ggxsYXJwY2FzdC5jb22CHXJvYnNvbmdyYWNpZS5jb20uYXBkZW50aXN0Lmlughd2 aXJhbGJ1c2luZXNzdmlkZW9zLmNvbYILemlubmlhLmZ1bmQwEwYDVR0gBAwwCjAI BgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQBIsONr2qZHNA/lagL6 nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYwu64UyAAAEAwBGMEQCIBBOnHyCeIrOOZoH JR2dATxdbSnDRl+gbQ+WdU1vMIHpAiBSitDLwFh1PaR8sCqkQ3IbxFjbcOZaI2Zx 6Rcbg/SqjAB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjC7r hTEAAAQDAEYwRAIgQKW0zfwR4VuEZd4QuRj9xJ8FQ9/mjRjuUmsNf/TN8WQCIDq1 6aqy4sGyGJa8mA2Cm+LZjBi5W+lJRkncPBQ48dWjMA0GCSqGSIb3DQEBCwUAA4IB AQCzi45m0WkcCUvmX8BaFX6s63hlykM/tlo1qvKuAfDr9bz4bpLZX1SViNZXb7N/ pi5fdcZByITAbFEOhc/2G/mAsU+Ho3+V1Vuzu6IGHpuwNcLWJybhbQhD2mS7Eaxp dPf44EFoIcxNudEzYOtnWm6TrQRTv8uxa9PBZGN9iQiHpV+H6naDhPQQtEvwtKIz OBnvUdEdgBfLw10UEYrKVO/Hr8o4MoUgmaANC5dL3yk4dWL6O4dXI+3aCQOPZm0R pGbCHVfJfKdSj4HbxN8t+kDITbCvCJfZys4WNZpxqG2JYr8Ly3cAtTlYVWx13sw7 9HSCdjGnVYTAP2YwY4u7crN2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRDnFxHUsRNf9o64Kjww EFNrlO6siKMhS+gz74P8dfHWNdySln04f90qVG6wGJQNi+7fwxHCKB/5pyLLbjau Mfn9bPiVJJCy59PB00Ogqlv6GEPAOx+v2lnTL42hned4o/ngTFMQwN0ss8rRpjjh uHHIAZpUEuuVI/QXB99XRUbzoSVVoiBTEXPa5f7HAFeoCxN7eTwKdm0S2ZE2JtCS NAjIbWVNPxAXoFPaymyMmIQQ3Z2oGQjHYiSBi7dImGPhpzXmTxLRKCBI1u8uefja Ddr31e79y1iXYvvWTQ7bC8lcTIXT1Yh+1EUqhTU9+Ej5E/MWoq/2m1ZnAPDjYjmf vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 420173889865404119484156787188419405729127 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 08:03:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 08:03:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.fund' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25382234328110299020843594999593946067665574314533838942752917428234557703718493142427800251052498532127306618181337307659245857584038154057016013323970216277011268625012134832629256175762969390333422738618348612341407359683932903085583066426401528930097438223288577154369811817870614532257784163633736209230716479365691615753320740489227157876317612878766763537632399561694347169790004481535127421962341108907088775197250279596871487513148840392771755208299080568165671685754305305433661952095516210571408688400008678158652692542372029290282046476891233278099740226801587486911893418139445967358556394882657534189503 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6cebef37981c6dd6cb5a90cdee72d53b678d29ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristicommercialappraisal.com.shaaedi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayonerealestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deterrencedispensed.net.reimagineeverything.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoardingexperts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelitv.com.scovillesecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larpcast.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robsongracie.com.apdentist.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viralbusinessvideos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.fund' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c2eeb853200000403004630440220104e9c7c82788ace399a07251d9d013c5d6d29c3465fa06d0f96754d6f3081e90220528ad0cbc058753da47cb02aa443721bc458db70e65a236671e9171b83f4aa8c0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2eeb85310000040300463044022040a5b4cdfc11e15b8465de10b918fdc49f0543dfe68d18ee526b0d7ff4cdf16402203ab5e9aab2e2c1b21896bc980d829be2d98c18b95be9494649dc3c1438f1d5a3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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