www.ziamediagroup.com

Issued by R3

About this certificate

This digital certificate with serial number 03:88:c4:3f:b7:07:60:38:71:00:0c:72:b2:07:9a:9c:92:50 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ziamediagroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:c4:3f:b7:07:60:38:71:00:0c:72:b2:07:9a:9c:92:50
Serial Number (int): 307876119210669635576392983754026744844880
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:12:03:4a:5b:31:7a:a0:80:88:a4:71:38:c9:98:14:07:78:65:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:45:7f:39:8b:d4:1a:59:1c:74:11:ae:5e:a0:5c:50:cb:d9:c0:e3
Fingerprint (sha256): 5e:1c:98:49:46:54:e8:77:06:d5:fd:dd:db:73:a0:59:2d:90:00:f3:28:e9:ab:1d:fa:87:a9:c0:bb:d3:63:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ziamediagroup.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ziamediagroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ziamediagroup.com
ziamediagroup.com

Other certificates including the domain name ziamediagroup.com

(limited to 100 certificates)
ziamediagroup.com
forms.tacotruck.ca
www.zia.media
skole.fsl.dk
connect.fiduro.nl
assist.smargasy.com
connect.sbadirectaccess.com
www.cispro.us
forms.bemorefree.com
www.zia.media
assist.lightningip.com.au
ziamediagroup.com
www.ziamediagroup.com
network.huntrex.com
www.zia.media
www.zia.media
www.ziamediagroup.com
www.zia.media
ziamediagroup.com
gla.goodluckassets.com
ziamedia.group
assist.amptelecom.com
connect.saansinternational.com
ziamediagroup.com
connect.sbadirectaccess.com
forms.ziamediagroup.com
private.royalstays.support
connect.biomimicry.net
forms.fleissig.co.in
ziamediagroup.com
form.farsight24.com
assist.ordino.at
ziamediagroup.com
ziamediagroup.com
form.intellishift.ai
connect.ziamediagroup.com
connect.sbadirectaccess.com
www.zia.media
ziamediagroup.com
connect.forthecollective.com
connect.ampliusworkplace.com
ziamediagroup.com
connect.sbadirectaccess.com
ziamediagroup.com
www.zia.media
forms.indigozest.co.uk
support.lightswing.nl
ziamediagroup.com
forms.indigozest.co.uk
www.ziamediagroup.com
connect.sbadirectaccess.com
www.zia.media
forms.fleissig.co.in
www.ziamediagroup.com
connect.sbadirectaccess.com
connect.sbadirectaccess.com
ziamediagroup.com
www.zia.media
www.ziamediagroup.com
www.ziamediagroup.com
ziamediagroup.com
www.zia.media
remote.propelcloud.net
assist.lightningip.com.au
connect.madsciencemaine.com
www.zia.media
inkindtrack.claridigm.com
toolmasters.izzyswan.com
www.zia.media
*.100menwhocare.ziamediagroup.com
www.zia.media
assist.logicalpros.com
www.zia.media
connect.clahvay.com
ziamediagroup.com
ziamediagroup.com
ziamediagroup.com
forms.brightbythree.org
virtualoffice.theeventzteam.com
assist.starmaninc.com
connect.sbadirectaccess.com
forms.insurancespecialists.com.au
assist.lightningip.com.au
www.zia.media
assist.lightningip.com.au
ziamediagroup.com
survey.neurohydrate.com
www.zia.media
connect.sbadirectaccess.com
connect.getmeofficial.com
forms.fleissig.co.in
toolmasters.izzyswan.com
connect.sbadirectaccess.com
cssi.leanjourney.com
skole.fsl.dk
connect.sbadirectaccess.com
www.zia.media
forms.spudsmackenzie.com
ziamedia.group
connect.sbadirectaccess.com

Certificate

The complete raw certificate details for www.ziamediagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307876119210669635576392983754026744844880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 17:03:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 17:03:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ziamediagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726626979145308111813189382317560912852771002836508888841191659667600727792548883046500918243020430458387986509351301766699945776611031948094314171916207729156119771375293037640940620409498380914436094256189195406737496400939768290459501076270911519704149388048535997874081905429566505792130887373983166715266182623649376476568099902367169608358008738476028049078247098455777087990316363198679477578470250539572110992066863093571656645847266505391142687971379670226989970759785179518376540205074338775147467562236841462128235777988209663955618618724150830934348388283930990265244177444496856250280139464573594403425214797671487879202485197317922002470723123868078603016423091785027701543253317223416263211951255379230982475746025810700123556136678354318239320875837619171360615980972881269298478270548525804094391545617733268821233826862149421496852067536410053414749038623541392988526293133698456632314603443853552954103204753296717401720827321997326544204450261849222418269024911065348948809782779066235754125835722952369799388365426137275630667649702525899649052974059321616690280698343649454357170099410661088577706716064950923668318987668205861847262478902536849059269073595154123815523103241521500371110005066106046141748252037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a12034a5b317aa08088a47138c9981407786538
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziamediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziamediagroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b86e74b340000040300483046022100d93738a0ba1589bb3d2574a0d62038e186560621493287bb369e62e6330036a9022100cd71ac4f6ea94fbbe7b6bf1bc0602eac59e05c9b1b16e838d1ee6b1f4e2fdc5c0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b86e74b37000004030048304602210080bed13dd7d75aa2de03d94c601b1543e7d2bd17e0cfb90cd449ec28d1a7d659022100c32175ec10f9dfa9b1805f16a365fc9d2564d722165670c52503d4c7c00c1af0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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