www.zocca.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:76:a5:5f:3d:d1:17:73:d7:b0:a1:bf:0f:62:9e:39:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.zocca.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:76:a5:5f:3d:d1:17:73:d7:b0:a1:bf:0f:62:9e:39:50
Serial Number (int): 288376872346245697852715899553696106559824
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:18:13:d9:34:f6:e3:9e:92:6d:90:08:1d:e0:ff:a2:53:0f:28:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:d8:ab:dd:c0:de:d6:d9:43:00:6f:6a:99:d8:96:52:82:9a:01:97
Fingerprint (sha256): 7e:3c:2f:88:11:99:4c:35:81:59:25:70:7b:ed:50:40:11:98:ef:3a:e8:da:fe:84:fc:c3:08:7e:56:d4:7c:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.zocca.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zocca.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zocca.net

Other certificates including the domain name zocca.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.zocca.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288376872346245697852715899553696106559824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 03:22:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 03:22:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zocca.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909828693537253424875335293762836453857795495315931157976955829448834691053823850741462351893598799166342455839940166697906154930585808291251052496840805174490207029940063664001702993731810098248097027311555049059470097335158887459670264981856444281872531407767612141883112373979061829804237602838170400792557176833429360917623234244335419903293590119219245462974916234653771471653104016704413870227972964154608081661987371306838652670321511040729169504242779447052355561995473571058197055405313491852057508453792668282131510962842618430016624270567714433606975441576677267134987200856411248656353825902079233581070021640605872086013615419877619229657455237967344640854027878666455071732797299178169655286266255461736636837539197432315289330642637825020209397831531400756859401883665559197243701188397140754763520779468017161909848102943911334410337787884848112786654376164333446946474901933579348725412437862819285570012273858884926875049872767519065534636411270473883469233266379300362592251238044411007729662034330776403114886311622463157567277627418207511274190690868809383112343451526587210947602689477601848174482928842275701304020752694115039754940164222285820826988768545199282957474443187045962003174991319277870701052022313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a1813d934f6e39e926d90081de0ffa2530f283e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zocca.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d806823a10000040300473045022100e9c2e96cac8cade6e1ce4c671b1dde63613c5cdc4e7b997570caa3e9f73987350220769bc931a26949d34ae72e975ecaee4bc6421450228727e34ef943651bd3cf17007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d806823970000040300463044022027d2e21638ec10db4b754cce5a64d4c35d63723332a407c2518c76a9a5bbe79002201a122a87fae038c69c3dc673c0c7654bd4affb1cf9896c470cfb94a458bc5ff8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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