zinnia.fund
Issued by R3
About this certificate
This digital certificate with serial number 04:1d:3d:24:21:7c:0f:eb:0a:7e:47:4f:5c:97:45:c7:ca:85 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=zinnia.fund
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1d:3d:24:21:7c:0f:eb:0a:7e:47:4f:5c:97:45:c7:ca:85Serial Number (int): 358398602877326724643517145429431038757509
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 35:9f:98:c7:00:f1:ba:59:40:bd:96:9d:ae:ad:ee:bd:d1:5d:2d:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 3a:2e:5e:0b:b9:5f:a6:31:2e:e9:3a:dd:c0:a5:81:0d:df:99:5f:d2
Fingerprint (sha256): 65:14:99:04:06:88:59:76:a4:45:85:a7:13:dd:0e:f0:2c:e1:54:67:10:3e:3b:64:84:43:74:2d:10:a3:32:2f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate zinnia.fund
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zinnia.fund
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
birminghamlawns.com.dyehardcustom.com
geteverlasting.life
homeandbuy.com
idumptruck.com
imsosexy.com
massage.xyz
shaado.com.thinkmint.net
simians.io
tgirl.toys
trademarkandcopyrightattorney.com.hepatitisatreatments.com
zinnia.fund
geteverlasting.life
homeandbuy.com
idumptruck.com
imsosexy.com
massage.xyz
shaado.com.thinkmint.net
simians.io
tgirl.toys
trademarkandcopyrightattorney.com.hepatitisatreatments.com
zinnia.fund
Other certificates including the domain name zinnia.fund
(limited to 100 certificates)
Certificate
The complete raw certificate details for zinnia.fund in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISBB09JCF8D+sKfkdPXJdFx8qFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTkyMzEwMDNaFw0yMzEyMTgyMzEwMDJaMBYxFDASBgNVBAMT C3ppbm5pYS5mdW5kMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqel 0S2/9MjrJBRlJM2UyZACQW1FgSUk6g8ctXwsVhlp3a0qww+3QRHZaFXLWZruK1Mt gDRoxQ3xt+FHAfB4i0ABQAJyPegcdf75XJYNiz6ewkH/jBl7MB7Km2ZlPHwa5pug hy6qbfqxzX5Sj4K1K1S2hSd27fXJ3WiOQqvhF7q5EL/1w5waNYoXlvbtVHQvMhpD IgeFwSY/l9yF+V1p4s7TmursPKQ5kqSZQhYQG4CaveADQS0VOd0fT3pRWhg8n8zO pMdygDzh0NJmo3qwIPXqKj0QW576kenJ1IYrdtmX0eb/9F5ChwdCWQ+aQdMSREkR +VucPEZW4DeuIfxmUwIDAQABo4IC9jCCAvIwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQ1n5jHAPG6WUC9lp2ure690V0txDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCB /QYDVR0RBIH1MIHygiViaXJtaW5naGFtbGF3bnMuY29tLmR5ZWhhcmRjdXN0b20u Y29tghNnZXRldmVybGFzdGluZy5saWZlgg5ob21lYW5kYnV5LmNvbYIOaWR1bXB0 cnVjay5jb22CDGltc29zZXh5LmNvbYILbWFzc2FnZS54eXqCGHNoYWFkby5jb20u dGhpbmttaW50Lm5ldIIKc2ltaWFucy5pb4IKdGdpcmwudG95c4I6dHJhZGVtYXJr YW5kY29weXJpZ2h0YXR0b3JuZXkuY29tLmhlcGF0aXRpc2F0cmVhdG1lbnRzLmNv bYILemlubmlhLmZ1bmQwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAA AYqv7CdUAAAEAwBIMEYCIQDASLyv69NM9VRndrgwWH9exs+Cz2qxsxYzIZB4+HZM tgIhAPLpb6WhE28+1F7HI4+XPczWwdPrwU9nIia+04y0IGb0AHYArfe++nz/EMiL nT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGKr+wnkwAABAMARzBFAiEA4DzJE0KQ KxsfouXzMR45Gev0j6ufnE0eYKIym9m6SM0CIEB3TkHnxbH02aJFGbN3tUwjwCGb 1E32OY6spWfhZgmeMA0GCSqGSIb3DQEBCwUAA4IBAQCAm4HMuISyddZok/3EYpZb uWiusgyltByRnNjlLV9uHTvYnlseb7dfn6LLFjjpIlaPhfv+aClUA3zLaJLEGN82 ZAQXzUGpkt068EpMl+UDPuK/kmMAv6Yh+YBQzu1kgbUJielTbilphxf65uuCiiv0 acCBbpuzTp88fZZk0OA0Q2EnjxQKlQXCn+V6NmAMleCKsxO9PqIn7DCROESEj6DU yz4I87hVxazUShPsrY+FPyk6105jnOstSEq2VFxVz0BHDzriERIyTZX3BZ89Ga+5 +XXQjqknBxDJsCPsyHDCc1QlGQVKSeat5ol0vI0+dNWWv624L23eLpOvMLQkimlK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqel0S2/9MjrJBRlJM2U yZACQW1FgSUk6g8ctXwsVhlp3a0qww+3QRHZaFXLWZruK1MtgDRoxQ3xt+FHAfB4 i0ABQAJyPegcdf75XJYNiz6ewkH/jBl7MB7Km2ZlPHwa5pughy6qbfqxzX5Sj4K1 K1S2hSd27fXJ3WiOQqvhF7q5EL/1w5waNYoXlvbtVHQvMhpDIgeFwSY/l9yF+V1p 4s7TmursPKQ5kqSZQhYQG4CaveADQS0VOd0fT3pRWhg8n8zOpMdygDzh0NJmo3qw IPXqKj0QW576kenJ1IYrdtmX0eb/9F5ChwdCWQ+aQdMSREkR+VucPEZW4DeuIfxm UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 358398602877326724643517145429431038757509 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 23:10:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 23:10:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.fund' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20533275577903822547834510809247884643226416269025529797243080230587569269223924896204627382542329643022308772129095070798326502833262258684425322290092025432509984956604146552114890396017789214001069927550744405253715705843835970624862745500222153638385665948022976232209398124562796888085084293232114275292299355382367510725416627470734579233639626676369240766822519818556863107226812749108544818762082459479772988573858254130882111335215926800683223248998522899453107179184057756441548032629496191906312572918922239822310726916814109570747070178777937000863960537854134950280393061309632871152523242760752240289363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 359f98c700f1ba5940bd969daeadeebdd15d2dc4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghamlawns.com.dyehardcustom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geteverlasting.life' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandbuy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idumptruck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsosexy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massage.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaado.com.thinkmint.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simians.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgirl.toys' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarkandcopyrightattorney.com.hepatitisatreatments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.fund' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aafec27540000040300483046022100c048bcafebd34cf5546776b830587f5ec6cf82cf6ab1b31633219078f8764cb6022100f2e96fa5a1136f3ed45ec7238f973dccd6c1d3ebc14f672226bed38cb42066f4007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aafec27930000040300473045022100e03cc91342902b1b1fa2e5f3311e3919ebf48fab9f9c4d1e60a2329bd9ba48cd022040774e41e7c5b1f4d9a24519b377b54c23c0219bd44df6398eaca567e166099e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00809b81ccb884b275d66893fdc462965bb968aeb20ca5b41c919cd8e52d5f6e1d3bd89e5b1e6fb75f9fa2cb1638e922568f85fbfe682954037ccb6892c418df36640417cd41a992dd3af04a4c97e5033ee2bf926300bfa621f98050ceed6481b50989e9536e29698717fae6eb828a2bf469c0816e9bb34e9f3c7d9664d0e0344361278f140a9505c29fe57a36600c95e08ab313bd3ea227ec30913844848fa0d4cb3e08f3b855c5acd44a13ecad8f853f293ad74e639ceb2d484ab6545c55cf40470f3ae21112324d95f7059f3d19afb9f975d08ea9270710c9b023ecc870c273542519054a49e6ade68974bc8d3e74d596bfadb82f6dde2e93af30b4248a694a