zinnia.holdings

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:81:75:7e:3b:a7:2c:f9:dc:75:c0:b5:28:3d:ce:b8:18 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zinnia.holdings

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:81:75:7e:3b:a7:2c:f9:dc:75:c0:b5:28:3d:ce:b8:18
Serial Number (int): 276821644777221483535925004938047885588504
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:30:96:16:f9:d9:ba:38:64:3b:eb:2b:9a:fd:0b:0a:d3:cc:09:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:0f:50:b9:14:db:12:b8:15:f8:46:ee:0b:59:ee:84:59:1e:80:66
Fingerprint (sha256): 5e:ce:db:48:35:cf:98:c6:55:24:d4:ca:36:b0:ca:87:6c:b5:03:c3:82:6e:04:1f:07:3d:1e:9b:ba:b0:8c:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zinnia.holdings

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zinnia.holdings

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.sculpit.org
cpanel.zinnia.holdings
mail.sculpit.org
mail.zinnia.holdings
sculpit-org.sculpit.fitness
sculpit.org
webdisk.sculpit.org
webdisk.zinnia.holdings
webmail.sculpit.org
webmail.zinnia.holdings
www.sculpit-org.sculpit.fitness
www.sculpit.org
www.zinnia.holdings
www.zinnia.sculpit.fitness
zinnia.holdings
zinnia.sculpit.fitness

Other certificates including the domain name zinnia.holdings

(limited to 100 certificates)
zinnia.holdings
zinnia.holdings
*.sculpit.xyz
zinnia.holdings
zinnia.holdings
zinnia.holdings
zinnia.holdings
zinnia.holdings
zinnia.holdings
zinnia.holdings
sculpit.org
zinnia.holdings
sculpit.org
zinnia.holdings
zinnia.sculpit.fitness
zinnia.holdings
zinnia.holdings
sculpit.org
www.sculpit.sculpit.xyz
zinnia.sculpit.fitness
sculpit.org

Certificate

The complete raw certificate details for zinnia.holdings in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Xpizl37amtGNPjf5koL
hY+47qBXCaoRm/TC6Ww6MUkSBILBtMAEly9nM4QVCk+/Qud0ELmaut7lvVJ27gPU
JO3BoLhlpfiUVJ5LD6Z4d46xJh2hW53WclQRW9WyMtt4utgvY1kwfZibcrWsVg2p
s8Y7r1ZpBftog5mGRvKEdPNu+Mhxfb+MnfDechI/Qh17MUJy8q3VqBDvZKJnvW/s
woKqKaPVa5qrTA5AEiNxcDRxhsTnHguSKjpXOOn/r1VwezBg4ek8JpyjjoIihVb7
thdmKxaUrwuvg8QVhKrMHKpmcq5GYuH+QQoRzv9Eaw6EW+9EIkngc82eKQpRdc/o
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276821644777221483535925004938047885588504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 03:41:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 03:41:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.holdings'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28968922604103722330495439345256602305947636036542317665143063909945981675336865227848703700650996240839413817934055459226826121992649912419492820260991505950745388971818358234467656400156671821917087765696498384613997300702801162550402637501225616480744083638228307090046344934755216162362760599823602981899903354169425884749328200056327206845574554880778220385084557543582363255923359579832815027054774047276140907032228367717688119217420179854638894205218687713551855542798537296974153262213173622985787832322396709167097767186035930162652290272727518506241000165988717366652348590804102346625097679157601405757551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9309616f9d9ba38643beb2b9afd0b0ad3cc09a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit-org.sculpit.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sculpit-org.sculpit.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sculpit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zinnia.sculpit.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.holdings'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.sculpit.fitness'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007400e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016be47cd7630000040300453043022001184c67ad115c4d44b7862b842a385bb9552cc9eed792165a571eb0054a4617021f091a8c5882a8210e248755bc737d4feb069b522e22c39dfe7e29b0c5aa4f3e00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016be47cd7570000040300483046022100fd60a0b37da6df7bb6f80b123b9f23ed364c12ebbe33b85114433b79e732e19a022100bac8338786e689bd195f2490bf7e8c60cfe8ec631bf7599c4c694d05a80b62e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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