cdn.jicki.zwei.biz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:13:9a:b0:0f:bf:25:2f:4e:fa:ca:b1:5a:19:e7:aa:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.jicki.zwei.biz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:13:9a:b0:0f:bf:25:2f:4e:fa:ca:b1:5a:19:e7:aa:ab
Serial Number (int): 262383763412631352366249092872576587770539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7a:ff:51:ed:eb:44:b2:34:04:ea:e4:2b:70:73:f4:61:d2:ed:9b:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:ad:6d:a6:5d:41:a4:09:b1:3e:e8:97:27:ea:b1:0e:87:60:08:da
Fingerprint (sha256): af:9c:f8:50:0d:4b:da:39:59:b3:6f:f5:87:86:70:93:35:95:05:f0:1c:68:3a:02:be:fd:ab:bb:90:8a:cb:04

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cdn.jicki.zwei.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.jicki.zwei.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.jicki.zwei.biz

Other certificates including the domain name zwei.biz

(limited to 100 certificates)
kvrg1.app
bikeshed.xyz
app.warningtemperature.health
jicki.zwei.biz
cdn.jicki.zwei.biz
bikeshed.xyz
panibus.eu
smogy.eu
www.rokakid.ro
donate.gofundra.com
mykori.ca
bikeshed.xyz
cdn.jicki.zwei.biz
emoco.com
bikeshed.xyz
www.preedah.com
proos.byggkollen.se
apk.intodevapps.com
dev.smarttif.dataauchan.fr
dev.unkegged.com
cdn.jicki.zwei.biz
dev.macroandmarkets.com
cdn.jicki.zwei.biz
fire.bigbears.io
bikeshed.xyz
romel.theflavare.com
admin.certesa.app
www.theworldisweird.app
zwei.biz
techturtles.co
sound-walker.app
emoco.com
dev.dershare.kr
sound-walker.app
www.erinnawoo.com
cosmos.gofloaters.com
inmobil.mx
connect-ng-carrier-tenders.rxoconnectperf.rxo.com
app.openseat.io
staging-ops.washdoctors.co.uk
www.thewshopclub.com
fire.bigbears.io
oforosho.com
dev-admin.fitscovery.com
fmt.zwei.biz
skydax.com
panibus.eu
qualify.firsthomeboost.com.au
stagetl.com
moneyo.pro
bikeshed.xyz
proos.byggkollen.se
bikeshed.xyz
cdn.jicki.zwei.biz
oluevents.com
cdn.jicki.zwei.biz
www.qecamp.com
www.fyodorovandrei.com
vs.zwei.biz
subscribe.pawmeal.com
bikeshed.xyz
bikeshed.xyz
bikeshed.xyz
bikeshed.xyz
www.cbkids.com.br
inceptialsolutions.com
bikeshed.xyz
app.openseat.io
fmt.zwei.biz
live.glowing.com
cdn.jicki.zwei.biz
dev-admin.fitscovery.com
bikeshed.xyz
andymina.com
bikeshed.xyz
my.bidandfix.com
zwei.biz
cdn.jicki.zwei.biz
wa.maskios.com
cfood.com.br
tennisbuddies.app
www.918.com.au
dltjewel.com
express.kiba-fashion.nl
prakhar.me
devfest.gdgaddis.dev
cdn.jicki.zwei.biz
bytrain.app
www.preedah.com
www.eliteconstructionsolutions.net
www.casaquinze.com.br
www.harirampublicschool.com
cdn.jicki.zwei.biz
andymina.com
live.glowing.com
easyinvoices.avnirexhepi.com
dena.ai
dashboard.aps.freshpop.app
fmt.zwei.biz
tnydwrds.me

Certificate

The complete raw certificate details for cdn.jicki.zwei.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN+pWjAqHbt5dA0dohlt
9d3z3VMW+tkNVEOh6XF70/H0gSmZtITO8rRjIMb+F7B8eQBgpTM6EI6OMWcMBL92
d6VMZK8X2eJ89YbMMHBOwTj+VXxoxpHiHXZ2BVHKucn6hjqK51lJDiB7JDH3CpGr
AByNZi0QWjWXvTDxiQI+ZlZnyQ80uYYDjBdxSPDSIie/pXW866E60Q/w8su6P2RL
gYQG+W/epg6jR9Iua1e7+P2krBT04tOciZCVUIO5FkISZVMEaUBuyO339xQMka53
RwDKX0m++DeELvLXWdQDcxpBcFLKsgrY8HXFvb3Jcp3EU3mZQ2w9v7sOhrqN/t0b
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262383763412631352366249092872576587770539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 17:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 17:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.jicki.zwei.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24852999385604452587193496149558500169790613777351003875839111162507321071236374342162053783759655257766106043323639569235753873052096711134942681302309615743041923600480955103709609340141690214194011276504911013812933024144555973623410129845548824236493397234696336635852061035240365732758054295658331732512984205095778907162869240898210508398501120811505548945549195090178446201271006838918387398581695820281207236364258534929284100413734192305532837211953176419750030691050357778153689055444448105864684670507516047450879102372303554321475285122214997940437221150806867699387998382501594064783047902736878759910211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7aff51edeb44b23404eae42b7073f461d2ed9bd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.jicki.zwei.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001669cef47f50000040300473045022100bc1b4364d803bd1655fc2487c950f63ac2af32d972fdfdbd1ddc11e1ffb5059a02205efe65e3dc81419f7911227ce6de7d67f592cbb7e98710f793304ac76d8d3e35007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001669cef49ff000004030046304402205a3ce64ab9ff34a3e008574721dfcc5195fef8a422299bb737925016c01b206902202f3fa144bcb805f35346c44890c549ec98a0e8e9a7356da26b15b06b61b3097b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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