zencfashion.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:90:d4:98:0a:b4:40:4a:f2:89:fe:33:c9:de:19:95:6a:32 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zencfashion.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:90:d4:98:0a:b4:40:4a:f2:89:fe:33:c9:de:19:95:6a:32Serial Number (int): 310620104413229841073034498281879366887986
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 07:2e:2a:2f:17:09:21:f0:2c:6e:91:9a:ee:66:16:61:72:81:75:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): db:24:43:3d:85:c3:2c:97:eb:a2:3d:03:b6:2c:37:03:d5:27:11:be
Fingerprint (sha256): 7b:5a:29:26:16:52:67:d4:b9:04:f9:b4:9d:d2:26:56:3d:28:1c:6d:f8:35:82:c6:6d:73:7e:70:57:cf:4e:05
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zencfashion.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zencfashion.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.zencfashion.com
mail.zencfashion.com
webdisk.zencfashion.com
webmail.zencfashion.com
www.zencfashion.com
www.zencfashion.multistore3.sitegiant.info
zencfashion.com
zencfashion.multistore3.sitegiant.info
mail.zencfashion.com
webdisk.zencfashion.com
webmail.zencfashion.com
www.zencfashion.com
www.zencfashion.multistore3.sitegiant.info
zencfashion.com
zencfashion.multistore3.sitegiant.info
Other certificates including the domain name zencfashion.com
(limited to 100 certificates)
besteam.com.my
skytechprocctv.com
myshangdian.com
zencfashion.com
uaonline2u.com
zencfashion.com
vcartstat.com
zencfashion.com
my.sqlasset.com
zencfashion.com
zencfashion.com
aliaomar.com
advancemedicare.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
myshangdian.com
riffaa.com.my
skytechprocctv.com
myshangdian.com
zencfashion.com
uaonline2u.com
zencfashion.com
vcartstat.com
zencfashion.com
my.sqlasset.com
zencfashion.com
zencfashion.com
aliaomar.com
advancemedicare.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
zencfashion.com
myshangdian.com
riffaa.com.my
Certificate
The complete raw certificate details for zencfashion.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgISA5DUmAq0QEryif4zyd4ZlWoyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDcyMDU3MDJaFw0y MDAxMDUyMDU3MDJaMBoxGDAWBgNVBAMTD3plbmNmYXNoaW9uLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANXOJ2V75NJUSN57Nzazc6yhLQAZst44 JtQmH1zMHQA5B2sQS88kxRR2t9uUOmwBdJU050D6Glj+krnHbbtPqPhsxklgLQBW uRCvf/dZK0x2Rs3R6EJgHTbzn5qte3Ex2K70nbp4iFBnBJvLpZnBIRrX0ZZf22Qu Bvyao5WTMEiix+Zp/nRHkF1SYDnq+z0MH6f5VH1+YVrd845YYUcBpatnKsqihohq FzZA9OZbuX4UyK9KNOvtxqGr4zdJsQJDkIIZVRGhbtSOUlFX6PbGCo1VvqhjY+I2 iaePJgM9lny5qUSCkredI7PGQ8vWIgx9KgEsv+Flx4npzhAFEvW0LoECAwEAAaOC AzEwggMtMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBy4qLxcJIfAsbpGa7mYWYXKB dYowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCB5QYDVR0RBIHdMIHaghZjcGFuZWwuemVuY2Zhc2hpb24uY29tghRtYWls LnplbmNmYXNoaW9uLmNvbYIXd2ViZGlzay56ZW5jZmFzaGlvbi5jb22CF3dlYm1h aWwuemVuY2Zhc2hpb24uY29tghN3d3cuemVuY2Zhc2hpb24uY29tgip3d3cuemVu Y2Zhc2hpb24ubXVsdGlzdG9yZTMuc2l0ZWdpYW50LmluZm+CD3plbmNmYXNoaW9u LmNvbYImemVuY2Zhc2hpb24ubXVsdGlzdG9yZTMuc2l0ZWdpYW50LmluZm8wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW2oOckuAAAE AwBHMEUCIEl9g44sCrjVyYuOQfrW4SWf9m3LN25KrGxZbK+4PEVTAiEA5GJMzFoz Het0vQhuHEuwoxHQW+U9+1kOC3Q2oVSLBOYAdwApPFGWVMg5ZbqqUPxYB9S3b79Y eily3KTDDPTlRUf0eAAAAW2oOckvAAAEAwBIMEYCIQDoCU5zRrtMqi+GYX72u7P7 gaXY1IXc+VkoMFG2BcolEQIhAIo2eKEYFk7kTTlS/qga3enIlqap3YzbqI4Uuf42 Bko4MA0GCSqGSIb3DQEBCwUAA4IBAQBHtWDySHOV5ArksWiwxFJCl/TE3ookZc3w NsMNuP/9JKXWuGmYHpVuLxjdZXbsHqYd7BjssU9KDfPhVAIF4KyNtJCspHxwHSNK I8AyThFoOI8kdDBfTUYmJLAalx0vfENxraQYyZw3BoQpNkz4dD+aiVF3zLbhTYLm eBKETDlqizB3t9JOR7p6DS29qaWcJ534RLjO487RHXnUlQau6gEWA55VxxhxYBwS wCj3tQUWCcEEFtSgv8K1pePFWuVziIto1SkOC84iFO/K4odYRQW2sMGY+89Pg23R nGfYRSMCXFzGiVLFPrqwYG3Pv6BTbjTENP7H1dV/qD20CPLAM7lq -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c4nZXvk0lRI3ns3NrNz rKEtABmy3jgm1CYfXMwdADkHaxBLzyTFFHa325Q6bAF0lTTnQPoaWP6Sucdtu0+o +GzGSWAtAFa5EK9/91krTHZGzdHoQmAdNvOfmq17cTHYrvSduniIUGcEm8ulmcEh GtfRll/bZC4G/JqjlZMwSKLH5mn+dEeQXVJgOer7PQwfp/lUfX5hWt3zjlhhRwGl q2cqyqKGiGoXNkD05lu5fhTIr0o06+3GoavjN0mxAkOQghlVEaFu1I5SUVfo9sYK jVW+qGNj4jaJp48mAz2WfLmpRIKSt50js8ZDy9YiDH0qASy/4WXHienOEAUS9bQu gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 310620104413229841073034498281879366887986 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 20:57:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 20:57:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zencfashion.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26990417230905705564406070692651595409103700062541969097374076355428137279713582775120166923629188246633669686287268264061960455993255966495103833158531915106050605089903942189065657788657659577333409567501198146200001730667239728316904929757900279318847113295452421112367859848699562939084173312213687824671642180405600447372954256291455243570687301420649696216938559535388607556485219930158168132285911884786010018150052462168474397845696630468942151368423002504805211466153404470033038658077332654419727331801510838428212576005744781783986537718790786377372789897082915982008379857676242125913242977733266780728961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 072e2a2f170921f02c6e919aee6616617281758a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.zencfashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zencfashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.zencfashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.zencfashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zencfashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zencfashion.multistore3.sitegiant.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zencfashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zencfashion.multistore3.sitegiant.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016da839c92e00000403004730450220497d838e2c0ab8d5c98b8e41fad6e1259ff66dcb376e4aac6c596cafb83c4553022100e4624ccc5a331deb74bd086e1c4bb0a311d05be53dfb590e0b7436a1548b04e6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016da839c92f0000040300483046022100e8094e7346bb4caa2f86617ef6bbb3fb81a5d8d485dcf959283051b605ca25110221008a3678a118164ee44d3952fea81adde9c896a6a9dd8cdba88e14b9fe36064a38 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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