zinnia.engineering

Issued by R3

About this certificate

This digital certificate with serial number 03:12:dd:7a:d0:31:af:52:14:93:47:d6:36:85:19:95:d0:58 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zinnia.engineering

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:dd:7a:d0:31:af:52:14:93:47:d6:36:85:19:95:d0:58
Serial Number (int): 267756337469820476567641385452970223980632
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:2c:74:93:be:39:7f:e3:8a:4d:68:bf:5b:f9:be:c0:de:ee:59:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:a2:4b:16:bb:49:a9:b6:6b:0e:d7:9e:42:dd:2c:72:00:78:9d:fd
Fingerprint (sha256): 96:9a:18:f0:48:e9:fe:64:7e:bb:02:66:fc:a2:27:a8:ea:66:4b:c0:77:40:94:7b:d7:fd:63:53:cb:f7:53:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zinnia.engineering

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zinnia.engineering

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

99arbitrage.com
affordablesolargeorgia.com
bodytao.com
digitize.co.quratedhosts.com
fabuloushome.net.floridapropertymanagers.com
fullservicemassage.com.famesuck.com
lagreenscreenstages.com
lgbtqtouring.com
moontruth.xyz.capsilocybintesting.com
zinnia.engineering

Other certificates including the domain name zinnia.engineering

(limited to 100 certificates)

Certificate

The complete raw certificate details for zinnia.engineering in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNzwNnejwGi54dIIpp6k
sVqR6IkYXdp7m/mK3CMvq6+O+tjd2JppBYFo/oohJsrMhBIIKbZmUZc+L5sA1KFN
J/ktWT9DgyVyeEUsgdE59g54+wPNwgdx82709JkE9gZ1jsAikx9jYIj6SvlZbACH
FhYGdSGCYjO0k5T7UjR8R7uRfBEvfvPwaapHPKbDEQVXlzZK0dsliwiat4DKbG3a
8Zfwm9pGg+nz1N5ubPPMcwWt7Or0kR/XnTzd5uiewF3k6px0yqZ8QkyNBkS+uoYm
kdgjmv1QDH3Nt4HC6nREGccUU4VPomN1bz/xGUbdCM1KBQOZtq7+amkyQQM+SPoq
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267756337469820476567641385452970223980632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 10:35:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 10:35:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.engineering'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24851656524991286604813441485038417011743756085837161270278929051995922199607446832050181300532123452667655313370154170564828301496943189001028235504394680336375803765845045484075515577554798881268731737770151981430387597588910517823922187597721299362116795828044707893672677991181079130098291498524158205714910072000453509368503707417514211621770331135948395777763052890613486200577460112248718299533999637096589960042486682813332849970566437600589690124849210673672759927786194032656168448653027894606148379888890748956523778846148148210626167106386836790378168916752856657013538440575890852734089049465261366323967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f2c7493be397fe38a4d68bf5bf9bec0deee59fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99arbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablesolargeorgia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodytao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitize.co.quratedhosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabuloushome.net.floridapropertymanagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullservicemassage.com.famesuck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagreenscreenstages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqtouring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moontruth.xyz.capsilocybintesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.engineering'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3ee8f4200000040300473045022100cb405f6e1bd99bcb6681dc90a4fbccb93b856165a7180f11daa4eb3b39f4909c022039842fcda625eb223e0b058cea406796396a44411d2a9ba66bb5a7533ab14fe500770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c3ee8f4700000040300483046022100911b56c0fd2c968c319d4e7af3a1053ab62a5cc53b88697c1e000d0cd636e5e1022100dc6882f45bab808b82b4618a8b84028c3b9f9cb7339161a5d7d103a69ef0698b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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