zsico.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:91:de:3a:cc:1c:8c:26:a3:c1:10:21:cb:fc:ad:9a:31 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zsico.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:91:de:3a:cc:1c:8c:26:a3:c1:10:21:cb:fc:ad:9a:31
Serial Number (int): 273100350212435192407998231411706259413553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:97:a8:a0:a8:aa:cd:1b:f2:fe:0a:3b:b2:52:7d:9a:1f:54:c1:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:6c:94:2c:47:2d:9a:8a:d3:19:a8:c7:08:2f:22:2e:7f:61:1a:1c
Fingerprint (sha256): b6:95:d3:60:b0:0e:69:75:c2:26:6f:c4:74:5a:d7:94:23:d8:b9:7c:52:b8:a9:e6:68:af:f0:1b:aa:11:a0:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zsico.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zsico.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zsico.com

Other certificates including the domain name zsico.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for zsico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273100350212435192407998231411706259413553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 14:06:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 14:06:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zsico.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701213512299419387792724919139132468757318804554280642819480500300087588869747675420532199309430640615505653208497221365533336660265056172187784907999641124007181295828509647095900661126585543052747032571356819632363116632948318249509218002933183309976870604757556484036061318445154717759525525970676318233621780459813945587715602117415445071796101465085850505182989367532631092108040842226405426738248155581436430035014533773797698423672105247032931510895597376314800743425139953896017675614676609617992175523314295608187793543219380512877453405056624989192174918254907297897749114277654584831449464260279365361896480169260615162352273740717938362852409119315462497572463437673292894513987683112231576549626769269394557675635025316831882510958618710976443144083870353273327012106691418986376377361261426644107998158019789664021139983108404185466738061979644243041411643766492925711257273593117265020149525463190529572429706392035023841678145485544312110234994860426064226167487707210504838074427979916814445583030059592042619616599235597684001051163547544236343165671124281676246391632867245610894064475180793531681865088951685908087674692192127563201045331794662490483965179511237218735758713420127693895922926003954415842502872473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1497a8a0a8aacd1bf2fe0a3bb2527d9a1f54c10c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704e895bfd0000040300473045022042418b646f23390c35a89107dfd1f065dfa0fd5aaab6763403f0b0dcfa68609b022100a4f25fff3fa81662c7b57e5d68ff541aa732f812d06f6bf95d0c041f752e9eba00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704e895c250000040300483046022100800e5cef7df3f583f3c335ebc0f790d30579309822e7931b245e5e5f387b68b4022100bb102f8365b4b5036aee117b66db9d46413174b5e7ceb266e895e96037de145c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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