zv.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:21:9d:29:93:21:a4:9d:bd:12:2f:19:ac:47:97:9d:71 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zv.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:21:9d:29:93:21:a4:9d:bd:12:2f:19:ac:47:97:9d:71
Serial Number (int): 341347894579404716698881385104227006127473
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:46:33:a4:71:f8:0f:c6:37:0a:99:8e:5e:08:49:b4:83:29:8e:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:27:e8:99:b6:67:e6:39:7f:a3:05:42:09:3e:46:21:f9:ba:45:b1
Fingerprint (sha256): 7b:15:04:c6:2c:d3:c7:57:9f:09:5c:4a:ce:c1:dc:5b:0d:3a:55:38:cb:46:01:17:c1:a0:2b:70:3e:9d:e8:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zv.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zv.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zv.org

Other certificates including the domain name zv.org

(limited to 100 certificates)
zv.org
zv.org
www.zv.org
zv.org
www.zv.org
zv.org
lamediterranee.com
zv.org
www.zv.org
zv.org
zv.org
zv.org
www.zv.org
zv.org
www.zv.org
www.zv.org
zv.org
zv.org

Certificate

The complete raw certificate details for zv.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341347894579404716698881385104227006127473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 13:12:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 13:12:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zv.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803850215861290428296740515997766467314652006116468231121197257087478776948662855206900580504652724583387419943454840093921418842624625305397213357414432341782823487135348515122028899531659221837126723771129532589975441803449595811856757545841986593196736213774853137546692368300035793979901057568500595055571791528127682306378639389981992090082259562426867653813300838819924047816191883204976105836534280396515727877814880059654360445302558238028669358855941195741512664934308812852824053226643027508268106062131034242019536105551942051462962456541573348890908396388928868243157648379032261252577277847959052482904096063460525176435002542263771549350757597495275017400067458270725336101590054667579181721864770449494580098329278763382031049594255345593691045130281629063095000321850116952876219538527801717552869456864746211220818301952548182187749146238204452465840623212663575964818370489605409871957526392835441713088822572109982805718952460075389876679064583241719833993746191566699178702181743207425998215582730287725980037059582906614966378055903305551813861589838052457352413612846470028966797203146036036955853061941209612008789802000024179519607087858072478680487521064999301779556867861934160374884457739245567057267210597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc4633a471f80fc6370a998e5e0849b483298e53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zv.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169aae536e90000040300473045022100f1baf9421a4d4c8b4c592ce345150675174eba5a6e1faa5decbb52f1b528c55d0220756b5bc1275c5e2239a2561d5940f87680057dd67f2225f9ede7b6c4c3b7399c00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169aae536fb0000040300483046022100e7b69ea958dc192213462be1bd7689ef78053eb5c524799a15db2314feff0bdd022100c246ed479bc872f4d2eb74c4f5cb74eab01d751f0d5bf1c258d1fd0f8cf5d448
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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