zinnia.fund

Issued by R10

About this certificate

This digital certificate with serial number 04:bb:0f:8e:15:9a:25:8c:f6:72:e9:6b:6c:88:e7:b4:6a:66 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zinnia.fund

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:bb:0f:8e:15:9a:25:8c:f6:72:e9:6b:6c:88:e7:b4:6a:66
Serial Number (int): 412102622505490525000445284011083795032678
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:ca:85:46:de:33:af:ce:30:02:42:7a:0d:72:79:73:8d:f1:90:fe
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 9a:c6:f1:01:6a:6e:e4:52:50:cd:ea:bb:fe:e2:9c:11:42:db:9b:1a
Fingerprint (sha256): 74:93:d4:01:99:e8:9e:cc:77:02:c4:4b:c0:23:70:f7:a1:d5:d4:a1:ea:fd:53:03:69:70:48:97:bc:9d:bf:56

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate zinnia.fund

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zinnia.fund

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenblock.cz
bloomfieldbankruptcyattorney.com
bomberssoftball.org
cashbackconnection.com
churchofthegreatgod.net
co2compression.com
coimbatoredental.in
donnaiolo.com
dtbahoney.com
electrofreedom.com
gibsland.com
greenhillfg.com
nameshakes.com
nyseniorsolutions.com
organizingny.com
phelps-online.com
poisonivycureswebsite.com
professionalblogs.com
profoundstrategies.io
robbfamily.com
sean8.com
zinnia.fund

Other certificates including the domain name zinnia.fund

(limited to 100 certificates)
livelyconnection.club
34725625397.ca
adfradio.net.zinnia.fund
zinnia.fund
zinnia.fund
zinnia.fund
zinnia.fund
zinnia.fund
zinnia.fund
jablessjobs.ca
chrisburns.ca
zinnia.fund
zinnia.fund

Certificate

The complete raw certificate details for zinnia.fund in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV4QPml5c3a5p7One7j8
BsalcJ4Y+cNttJP/IzoDgdC7s/9W1MZGaaWpWV5RyUTFAAF/UFZW8W5tnWah/kAI
b4GOBi+CSTKEn1O5zWl5nZB2INwgX9eE/pGhp7zUn4fepxWThn7HQbUp5SsNPwzN
CHIb6uerq9m1RkIF2Hx/489YMSal+Gw54mwUwO+wXsvotvEgWN1PxDi74wCMUhso
w7ZAdRNAqd05vUriqkU3ooptg7vvg486+x1Slmp0ieDvxxF06G06tMQjrukPM588
gICsA59TtiUfcfGrptvDaslcTW8PBZeuPUONWCjTJTEUp7aOfCnJcsU1K9JEiNVK
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412102622505490525000445284011083795032678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 00:09:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 00:09:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.fund'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23400470835836500720726517109177319146299691770485494948976278689763123162384833435689071113970684381945699615317396419201275830558723471468661647117095633641098746172302091754860125579707697087805070751729281505398410216408330065229806687006764161928277290934926618265468384268776792628044640981022151270167395182474522492366596962948454070869458509370837164793657465910157427291415076110057577312104054306175274575466233277245114085283861632921015606139386899495244149789439914344155588495748354674781011662739102406612882117144993342795598911404898428215576923714246229018244878110070865982306675954670216882244209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dca8546de33afce3002427a0d7279738df190fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenblock.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomfieldbankruptcyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomberssoftball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashbackconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofthegreatgod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co2compression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coimbatoredental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnaiolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtbahoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrofreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gibsland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhillfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameshakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyseniorsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organizingny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phelps-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivycureswebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategies.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sean8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.fund'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff564a2aa00000403004730450221009d916116df1d6ba0698f35fd81ec201b25d6330b5eaa35a87aac116a0723ce1002206ac78bb5139da9827d35052efa5825120f31c63398ecd2e8675c977e1bf604200075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff564a2c4000004030046304402206e46b5881d046169a00c01f7e28967298560ab5e488af9924018ac18bb391480022035dbd5fd170aa33a1462eb07b7ab29fc8aebc3bfb72a0aaedf8e5053258be0c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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