zag.ai

Issued by R3

About this certificate

This digital certificate with serial number 04:46:d6:68:10:f7:3d:4b:67:0a:c0:54:0e:32:cc:b0:36:52 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zag.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:d6:68:10:f7:3d:4b:67:0a:c0:54:0e:32:cc:b0:36:52
Serial Number (int): 372553904545584818188894267621889570518610
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:04:e5:fd:6a:e2:b0:2b:b9:ef:92:12:c8:56:78:4b:6e:d2:6e:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:2c:b3:c7:17:ad:90:7c:bc:d2:8b:85:31:d3:0a:c6:41:e4:92:78
Fingerprint (sha256): a8:3a:39:5e:21:f8:05:78:e7:59:33:f6:6e:4d:0a:23:04:49:56:10:19:ef:f6:47:d1:9c:06:de:53:9f:f9:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zag.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zag.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zag.ai
zag.ai

Other certificates including the domain name zag.ai

(limited to 100 certificates)
pub.zag.ai
m-chemical.deepscholar.app
www.thunderiot.io
pub.zag.ai
fdemo.vivia.me
to.gdg.kr
zag.ai
zag.ai
zag.ai
dev.zag.ai
zag.ai
pub.zag.ai
zag.ai
coohl.com
pub.zag.ai
necesitounamano.com
pub.zag.ai
www.cyberneticfitness.app
zag.ai
m2d2challenge2020.com
dev.zag.ai
dev.zag.ai
zag.ai
mjmata.com
location-base-service.dallaebang.com
link.vvvip.app
zag.ai
zag.ai
zag.ai
jayanthchennamangalam.com
pub.zag.ai
quillapp.io
pub.zag.ai
zag.ai
*.zag.ai
www.melibela.com
www.blockbuilder.co
abramovslava.com
pub.zag.ai
zag.ai
app.blacopal.com
zag.ai
pub.zag.ai
zag.ai
dev.zag.ai
zag.ai
u2t.pmuc.or.th
dev.zag.ai
pub.zag.ai
azygadlo.com
zag.ai
dev.zag.ai
zag.ai
theworkit.com
dev.zag.ai
zag.ai
isabellangen.com
zag.ai
atritripathi.com
zag.ai
zag.ai
zag.ai

Certificate

The complete raw certificate details for zag.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372553904545584818188894267621889570518610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 06:04:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 06:04:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zag.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891608938429285798002476562670095351892330423582097809271234092003680114547767886337532902244657682995212762114224791902430431089616376008981221868939301475196277804121155187341396732649377016498752469859342379197329412494266055736024151079050437371184099480358708457490644298615521768170716742429559553144940235621756098988950430943416722941745564004579591843080981813021622960235527810892177018464809265961807773248576196809317571611861801483313491957667112763935980693828119351104342480863795899426307363953467929206989784329675042627214694464842921721592242749907493643464827722492840134440278600380709385305408313135182799840413960937234291992033729931448993700906714673204970674391558766921731394567542085346996746000577725655715800840775660100194467479199396707489913438108443306297412825633873785418088471920818594083553353362983615798698335337996151841559174482957212044088438344337679276832840586770276735925303119022517832524016986212261546126172820672638267301851391993651665464192722657809253348216435127562670096827874083583346226940929986119658860404676562066293700103664276454493303246482313545112382259719385550437419747137176327094952990689219951147443944627282918940862341694414441518394246215583676310146446182979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f604e5fd6ae2b02bb9ef9212c856784b6ed26e8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zag.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zag.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882dac3e28000004030046304402200bcb53958c92a4d6987673b18eea3a26c3f41515a86eb6102029025870b4e85c0220422596e140ee98433dc45d715f5f519102465bd72ff8cdf35da551dc7c6bb056007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001882dac3e310000040300473045022075b061e88cdef900eb51add9bfe860410d6390627a6bade7ed534fb2adb5d6f1022100e2882a01fb2091b7d6d5ff8bd6412df83d352692464892623dcdf07b9c58d707
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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