zhifu.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:14:1d:85:b1:a9:80:cb:97:f6:f5:8f:24:eb:00:a3:92:c7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zhifu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:1d:85:b1:a9:80:cb:97:f6:f5:8f:24:eb:00:a3:92:c7
Serial Number (int): 268181746924475376423615780004986595021511
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:c7:26:3a:36:20:e2:86:a6:28:9e:9d:ea:b8:55:3e:ce:ec:f8:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:5d:9b:54:c2:dd:96:6e:0d:69:75:d1:5c:d5:49:7e:73:28:51:d8
Fingerprint (sha256): ac:88:64:3a:56:49:1d:90:5f:59:8a:b1:ed:73:13:0b:d4:f6:1c:33:18:84:a3:45:b8:5f:63:ff:4a:61:cb:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zhifu.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zhifu.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zhifu.ca
zhifu.ca

Other certificates including the domain name zhifu.ca

(limited to 100 certificates)
technifyinc.com
www.thetriumphfoundations.org
www.shanzid.com
unila.com.br
scd.agencianacionaldigital.gov.co
www.chronobook.app
www.startyesterday.app
velosity.in
www.art2nite.com
paragon-atlas.org
www.zhifu.ca
xn--agnciajourney-qhb.com
www.inlightech.com.au
zhifu.ca
soniandsoni.legal
pc-developers.com
probellapp.mx
billy.academy
dashboard.grubity.com
researchcruncher.com
matthewdmurphy.com
orikassaodontologia.ga
zhifu.ca
www.openflet.com.ar
potobo.in
optimusgrow.com
zhifu.ca
www.techvillage.co.za
lantrn.co
orikassaodontologia.ga
zhifu.ca
zhifu.ca
zhifu.ca
optimoboard.com

Certificate

The complete raw certificate details for zhifu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAxQdhbGpgMuX9vWPJOsAo5LHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMDEwNDAyNThaFw0yNDA1MzAwNDAyNTdaMBMxETAPBgNVBAMT
CHpoaWZ1LmNhMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsQHYbS9B
+mCwhEqwHn3SfXXZcGoW5eosAgDl030GjjSypcSA51cheJjzIkFrk5c1qhxwGyw/
+q6EVPjGXuxH1Yeh62zleMi+YTunU4W2kXUHnvriS6rGEhsH8KCIcNcT4NvZ5dDn
bB7C0MAdRb+pd1wefrqnlekw4QHg8LGK/GVo5M470iu/WR8FpYtrU6HdhayZR4VX
H3LJ/SSN1CjzFnz0LgGTl1zWEJ6tFNQ1nZoH+3tmJ6SEdOe5oW/0W+05UvGABevR
YIAW0V5dGbdzb+P3bELyiwkFK/uA9VE+X3TRANWNVqh1PhfFamiwmav2uN+9+72J
JgHn0uJajjQUvO2j5GTES0Ca+Oe0GPEUKBW01wHYYPR39mkcQFJqkWm4aA5TjCyA
lhXbuI+1FLJtwjr4VH5kF5NF+wQjQynoMnVeUqADWVisYdbf5UeqeaAdDXEvqYDc
X0bthsy6tlyp8AYDN1FxYlfzqi6/SfhByJGYb5IL6ybImTPMClvBjo3Yq1QqzICf
eONyaEIG8p41Ja/FwAwZG432PyhtYGOSvuBIB4gc9XVXto70gULRsPP221VpbhAG
IUEOzlur0SfmK4VenZNnQFJsF1P/4R8Clp0V2udwMcZZjaOGmmmw/OvqLPj5LYw0
2iPOLpo5KsFV5a7cv2VS+LFlTALswSznNk0CAwEAAaOCAhgwggIUMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUTMcmOjYg4oamKJ6d6rhVPs7s+PwwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wIQYDVR0RBBowGIIMd3d3LnpoaWZ1LmNhggh6aGlmdS5jYTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjfhk5isAAAQDAEYwRAIg
DIU+3PALJw5aYxsDr57awl51pWQfmx/4GR8HEfDPXKcCIBrPvhfUNmkOYjJ9nwYe
6Hq+bKARtNMx40IJuHpjtDoxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGN+GTniQAABAMASDBGAiEA+7awjprP+a17hblN9Vdw2gD4WdGcWL/3
3gx2tl/BKloCIQC8wHmBjDvnAKoZlaj2rL8ackiwo1qPH9X3TJQesOPCeDANBgkq
hkiG9w0BAQsFAAOCAQEAXVNQyj903p2FDJsXHRU24Lo4WFaoydPI5GmfFDp+nZzb
uefXdz34mXLgg1jJoZ0usOZHjpUcvq2CC7IuzbfrTcX43UIuqxfyqeyRTSGfqtiM
3FjN2IKhh9W/v421OzBYFxWHFBEAZmlKMSKd+O5PKThU2SuzVXCtrenYmbtaDtIS
EiCGLAtXw+pINF5kZwG8h219yxS+7cY4IZuWSbnONvsK/iNCeTEVr/YgmYt30Hj2
4dib17hDBfDdIRvoMiAhnMPyj0Jh+HNXlsFNvHxTOdVUj+M0hqFPlb7PSnSLAbo8
dUxu06uWg9F8FKgEu7/6skWT1jA0f/EG0H8chbyCVg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268181746924475376423615780004986595021511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 04:02:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 04:02:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zhifu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722126408791666205555676014993971797055604558534273890374009086054173734606694936513205829801435781448839338834901573655792363058118542888117828442923073103490354713983611047553276582222402408006920928533290493637389959957942885201373821544917864050742482171672865902397880095941966578605530218380882060690898310789819798357707777059317792324242214939308044478295749707858559968858478833616086675505083595684983536267998834955122302322728792425340199182074165766400188555229827886104895851979098682817551898103625766983563305491649218096206180543863110568620015501461625109164655917563380349498871200670007169347972390756805324377700622534714276365860835884143974005946668760542853903594248143232401137648352613650149152592765156501686518087951062353148735127546700190245176250800695508128817946987626692234932630751914742340972443695261838791222738300666908489371142838520684283890880960720187857176684865731147844828137366311580490569851501923498439690646531275927817346373963095331671817428598932620191828014791542831459548556314460544383568699711304588988999148158513569762311766953400374156765758243383843235915087794933487217362011670343494635374681739328667468795725132028605776629768464049791851230130243338446403571588478541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cc7263a3620e286a6289e9deab8553eceecf8fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zhifu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhifu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018df864e62b000004030046304402200c853edcf00b270e5a631b03af9edac25e75a5641f9b1ff8191f0711f0cf5ca702201acfbe17d436690e62327d9f061ee87abe6ca011b4d331e34209b87a63b43a3100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df864e7890000040300483046022100fbb6b08e9acff9ad7b85b94df55770da00f859d19c58bff7de0c76b65fc12a5a022100bcc079818c3be700aa1995a8f6acbf1a7248b0a35a8f1fd5f74c941eb0e3c278
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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