zsico.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:22:91:de:3a:cc:1c:8c:26:a3:c1:10:21:cb:fc:ad:9a:31 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zsico.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:22:91:de:3a:cc:1c:8c:26:a3:c1:10:21:cb:fc:ad:9a:31Serial Number (int): 273100350212435192407998231411706259413553
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 14:97:a8:a0:a8:aa:cd:1b:f2:fe:0a:3b:b2:52:7d:9a:1f:54:c1:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b6:6c:94:2c:47:2d:9a:8a:d3:19:a8:c7:08:2f:22:2e:7f:61:1a:1c
Fingerprint (sha256): b6:95:d3:60:b0:0e:69:75:c2:26:6f:c4:74:5a:d7:94:23:d8:b9:7c:52:b8:a9:e6:68:af:f0:1b:aa:11:a0:85
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zsico.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zsico.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zsico.com
Other certificates including the domain name zsico.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for zsico.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAyKR3jrMHIwmo8EQIcv8rZoxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYxNDA2MjlaFw0y MDA1MTYxNDA2MjlaMBQxEjAQBgNVBAMTCXpzaWNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAKvhjJfofTal+Iv1U7/egldZKhNx3WleoyAbNyFQ OWqQovHjvDcoJ9Go9/WMSItqzWHIVnV8Y7O4ByXEVQaC/sBYIoQtZ4OVDsHdUIEn 6POr5lFKDWSzpcRtjRZGoAOtJOQMPFDA1VD+ZLbC2U0+49QNVMIq3FnnvK4LixkR qtvM2K8luQZgPx8Dd0sJzAI2NyfDbWywco8pBIKmZz1SJGEcrFLJLxc3kkD62BBO lV1gf1W1L71YL/xBYrA9+MH/BT17CAgaGCuHlLvZ/T8W2I9uKOtZHdMylyhbXg0v hbQXEH0/NWQZW2Z0U05PYftt/ZESB1gCsoLoO2rd/X8aWG/Kxb0FpXJYpljdUaJl 2vvA/1h72/jImhrDYfjQz7s9LL6JiuqvBxNrHCPH0bDZTruqiFicP9rnMLrRfijR 38DbkD7J8Udu787R2Xc7OVe6zFRzxqoFPaXEzrIrG34kgLTHxZ5TZ+IoHQNga1JC VJWKz7U0P5dg10pmhqaIZ/2BvN6AVsxuzNzfpguRxuOq/JX+5RldA1vJi6+kVQtw UBOnXrQs4Sbtrafptwok7g/1uAXvus/IpCEAaHPnuDTMWRqlINQfiLr5bI4pVE/7 PSM9nJILJxBJymdh+BjOlAh70HmRok7E43WJY4xnlvaZ4LD8+DJv6zPXqqNZbJdb T42ZAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBSXqKCoqs0b 8v4KO7JSfZofVMEMMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJenNpY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwTolb/QAABAMARzBFAiBC QYtkbyM5DDWokQff0fBl36D9Wqq2djQD8LDc+mhgmwIhAKTyX/8/qBZix7V+XWj/ VBqnMvgS0G9r+V0MBB91Lp66AHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6 GmnTohwAAAFwTolcJQAABAMASDBGAiEAgA5c733z9YPzwzXrwPeQ0wV5MJgi55Mb JF5eXzh7aLQCIQC7EC+DZbS1A2ruEXtm251GQTF0tefOsmbolelgN94UXDANBgkq hkiG9w0BAQsFAAOCAQEAFmaJb1K2nXlECoHxsHaNngSgn+8qmBi1C1bIe3ZoUxGB RClXK2OmKYd781lSij62nZBBtwDfCS9qR61E4SwfjqUMt13++GcjClK+aljk/jHL rq83jRxqwo7R3QweFfwJVxBaRTvcmcSjY1fKjh59QUdy6TXnJzvJGc3uHC/O8M0b u2AvRhsi7pKqtB77uuJFC0ODwkd+fX4ri94I7hv5kIRkgBrMsvOUv8GUE2GiwiPj fZipgn08eaYRuaeJCU/3jKXhA4eoIBwxBcBLcYuro4dAxxO4JnEh27wPf82mGcVe aRMX0JIg+rz9ji43se25mW+/XChWGYvM6fmbsND7hg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq+GMl+h9NqX4i/VTv96C V1kqE3HdaV6jIBs3IVA5apCi8eO8Nygn0aj39YxIi2rNYchWdXxjs7gHJcRVBoL+ wFgihC1ng5UOwd1QgSfo86vmUUoNZLOlxG2NFkagA60k5Aw8UMDVUP5ktsLZTT7j 1A1UwircWee8rguLGRGq28zYryW5BmA/HwN3SwnMAjY3J8NtbLByjykEgqZnPVIk YRysUskvFzeSQPrYEE6VXWB/VbUvvVgv/EFisD34wf8FPXsICBoYK4eUu9n9PxbY j24o61kd0zKXKFteDS+FtBcQfT81ZBlbZnRTTk9h+239kRIHWAKygug7at39fxpY b8rFvQWlclimWN1RomXa+8D/WHvb+MiaGsNh+NDPuz0svomK6q8HE2scI8fRsNlO u6qIWJw/2ucwutF+KNHfwNuQPsnxR27vztHZdzs5V7rMVHPGqgU9pcTOsisbfiSA tMfFnlNn4igdA2BrUkJUlYrPtTQ/l2DXSmaGpohn/YG83oBWzG7M3N+mC5HG46r8 lf7lGV0DW8mLr6RVC3BQE6detCzhJu2tp+m3CiTuD/W4Be+6z8ikIQBoc+e4NMxZ GqUg1B+IuvlsjilUT/s9Iz2ckgsnEEnKZ2H4GM6UCHvQeZGiTsTjdYljjGeW9png sPz4Mm/rM9eqo1lsl1tPjZkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273100350212435192407998231411706259413553 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 14:06:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 14:06:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zsico.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701213512299419387792724919139132468757318804554280642819480500300087588869747675420532199309430640615505653208497221365533336660265056172187784907999641124007181295828509647095900661126585543052747032571356819632363116632948318249509218002933183309976870604757556484036061318445154717759525525970676318233621780459813945587715602117415445071796101465085850505182989367532631092108040842226405426738248155581436430035014533773797698423672105247032931510895597376314800743425139953896017675614676609617992175523314295608187793543219380512877453405056624989192174918254907297897749114277654584831449464260279365361896480169260615162352273740717938362852409119315462497572463437673292894513987683112231576549626769269394557675635025316831882510958618710976443144083870353273327012106691418986376377361261426644107998158019789664021139983108404185466738061979644243041411643766492925711257273593117265020149525463190529572429706392035023841678145485544312110234994860426064226167487707210504838074427979916814445583030059592042619616599235597684001051163547544236343165671124281676246391632867245610894064475180793531681865088951685908087674692192127563201045331794662490483965179511237218735758713420127693895922926003954415842502872473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1497a8a0a8aacd1bf2fe0a3bb2527d9a1f54c10c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsico.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704e895bfd0000040300473045022042418b646f23390c35a89107dfd1f065dfa0fd5aaab6763403f0b0dcfa68609b022100a4f25fff3fa81662c7b57e5d68ff541aa732f812d06f6bf95d0c041f752e9eba00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704e895c250000040300483046022100800e5cef7df3f583f3c335ebc0f790d30579309822e7931b245e5e5f387b68b4022100bb102f8365b4b5036aee117b66db9d46413174b5e7ceb266e895e96037de145c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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