zivost.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:11:cd:8b:ab:d3:86:f4:28:18:30:78:d6:96:fc:f9:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zivost.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:11:cd:8b:ab:d3:86:f4:28:18:30:78:d6:96:fc:f9:70
Serial Number (int): 414487587039355806891544042759700879309168
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:e8:92:34:38:8d:c4:80:eb:22:cd:3c:da:af:11:11:3e:c0:b4:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:bf:ca:fc:c1:6e:fd:2d:b5:60:7b:96:81:ad:63:b3:06:ab:2f:ff
Fingerprint (sha256): 82:fe:2c:48:c0:d2:74:5b:ad:03:4d:9a:00:45:f6:7a:8d:35:49:35:e3:b8:da:59:2c:f7:2d:64:2b:a6:02:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zivost.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zivost.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zivost.com

Other certificates including the domain name zivost.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for zivost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyuJfypSq2A81d6ShfDpq
t9ytANaB2ddSMkJfvn/RjCwTpnBEt3M6U6h5PHTMy1AJBOcEM9wn2JQb6pdeIO2b
4dZQGfRpUZk9Tb5zccTgwwuJidksxKzfnCrrOERMmPy0NlQRLxt1b46aDiyqnFOs
O5eDmTsKBf4CBe+eChJt3DMXEC42IyWOL8EpIrpWnzUNXbUnSJlbIld+nbDkPwwW
hUwBR8c2zfYimDV/SlpUXU4syA39gsCBHwmDbcuFgrp4DO7FcWgt2OvG4PkWJpKE
v2wgNrsFCbMINXW6QsmHrCtDXlEnQnbsyAH8tpgMRxu9pgvE0T9b7wINnJFhTgTm
sW20YcxdAfqFeLLWznIENVfsJSV/F1v/7CwismvRphg1tQJ3nHR8lkMuzdRm4xha
DbPGZZbAFdhXTCKIe5E/R7PoAFrJJp92mXMtk7SN63yQFgsotAXWIUDy69UdjBet
B/4XQrStUCFXMIzN/KM70l9I+4cwK6zw7/CNbx81fgyTmxuyvLIomVjrLkRZBd+P
58iNERvtb75BfclkcaP/K876IGL0QfS7gtSIHEFz5+5v/SOwBRwzYfIzY54iz9Bs
0UWmAAHOtt6DFpQTno3iwVEdP+wq4Eux4Qh2hFlhrZHe33hF30gbQs2jTkFa7lrj
kH44QCikuiHw99KbyZk64ekCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414487587039355806891544042759700879309168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 10:46:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 10:46:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zivost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827695625570244308705678270496622946824092052259808084516664844659731612879845620324877615987086286718429593459946724615572125312227159577928424035149171986410351518575660692127055643815840635631551108199857028818308659380015367238533330006238335273407294614282136615504002934088603025121926979096620611376867937840611522018263839242221694997379948553953340081781293298996209191800910405842926122279878541609824873117080113130166973724500946940290912965102585366908110816316669358123251562261405627341347324669420910305024780935045823140921871300179308744980252076792892206039047059874769907490257856676983796640242215999547986069980964962578049300084438433575416615086563208905303722199354600979779519823471166149765742662749285903339457968022308822570809720741631637955421404503085964526219479081985839988859443104923654170125400549538082846696505753495187847987645445210646736024452205939709024604486350053827418338810384099935462619849647681177284704899999215010500680100085515757580941617724267947269146184346086819754249115397745281722071264228841869811016509637890013689524916831111544276351561490629858245393774407948167887729071916171560595296447107277583962879108851883754422965450939161891668365908116683940363394029904361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32e89234388dc480eb22cd3cdaaf11113ec0b400
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zivost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d8db088400000040300483046022100e37cecf6c51dc0cac5f18dc278a2733c5b82491b50158065115f078176bc1def022100f63c63154cb8120e1850b2e0dea27186fed0e09bba3153bde8672638c746c42500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d8db088ac0000040300483046022100933fd3696e3b30c6fade1f484030295b78818dd45614056290f23fd8a8a5a844022100e3cd1b44f52d931b87c2edd2fe7562d8a1546cab76f4b5425fa9d276eb6ae24a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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