zonatre.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d9:99:16:e7:89:85:23:79:8a:ba:03:b5:6c:41:19:66:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zonatre.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:99:16:e7:89:85:23:79:8a:ba:03:b5:6c:41:19:66:94
Serial Number (int): 335381622227142447506851504925517429696148
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:32:a2:a0:2a:f0:95:2c:e5:39:1f:59:6f:6c:a4:22:22:5d:d9:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:0a:73:74:69:f2:75:02:7c:54:2e:c0:a2:03:28:09:43:e0:85:f7
Fingerprint (sha256): 84:8e:b1:de:93:60:84:8e:36:68:46:59:f4:73:cf:63:f0:90:fe:d2:29:52:20:08:8b:86:d1:62:34:f7:c9:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zonatre.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zonatre.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zonatre.com

Other certificates including the domain name zonatre.com

(limited to 100 certificates)
www.zonatre.com
www.kmztvhcv.xyz
bambooremediation.org
www.dazoncole.com
www.neoknife.com
poisonivybeware.com
nailapron.com
caivano.org
www.miraclefoam.com
www.worthyprices.com
www.zonatre.com
fireproofcases.com
gemhospital.com
www.ieskok.com
zonatre.com
doublerack.com
www.ezcostarica.com
www.harajukufashionfestival.com
stemcellssacramento.com
smileyswab.com
www.totalreminders.com
deandrea.com
intermoc.com
zonatre.com
paththroughgrief.com
travelforachange.com
greenbaymoving.com

Certificate

The complete raw certificate details for zonatre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335381622227142447506851504925517429696148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 05:23:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 05:23:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zonatre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 676221930360577094778234836814580016580428887697257565371748985535093558645598742992972971116759040999672918737046278411806972870936407375153196042452422084509394742220862282458551048736874097621469343232777112782424192057654695087994479784256214908382566813123147491413120475010788879964020501525244180676938451055599270548517559862481623243155159638692406012125387276355156612638556031670823336838549604534792926559338384770552634805229357166293958680026879796884874101865183934213763299278314993689823081125106745942458906348906606039641308113772409028201176989968290524574139919145361744584888140713715104241459321083290939772784011248107496110110932393817303110594078886211510613927723636464326963227844071839177784379694828656210531869634636552956146410413919843634117636799447555064994847475185682292946297405115376734937897454983012821735892782817696293220674944890395924708344827252645101969648106281212759544574716260035817840178219377096716944077460228363199578654828878504769661678806224671607829511516833086457884851427660226080344190484588040896403031936228456030575397676488543660337771877314585313346229706570641781194628720944184923174600462050287403012810651431038148472956511170168386212475647927604359765542852819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b32a2a02af0952ce5391f596f6ca422225dd94b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonatre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7e943e6700000403004730450220531d1e64d761b8a98ae0754fc085fb142c71110805944ecd4dc25f927b0d1c54022100d799bbf4bc03902c65838be8e50c64b49af1f2bdf54e33abda141c7079c6ea70007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7e943e710000040300483046022100815b8eb250c89804cb1d4f8232a6c0befb9ee0c4504b0efbb8503f01c1817ff0022100e1d83615a6f0fa18c6f173f708935b5f87fd95c27017b0a0123c021d9dc4e191
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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