www.zsico.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:25:29:7a:45:dc:1d:8e:9a:ca:36:33:44:c5:1f:f7:14:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.zsico.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:29:7a:45:dc:1d:8e:9a:ca:36:33:44:c5:1f:f7:14:73
Serial Number (int): 361094724528085238403229399308135554290803
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:b3:b9:c3:ac:66:df:73:25:92:1c:9e:ca:b8:ed:5a:78:39:7c:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:ee:44:dc:8c:19:20:73:2e:21:af:21:44:f7:23:83:40:02:3a:b4
Fingerprint (sha256): b9:9a:91:f4:2e:d7:14:98:3f:04:ac:3b:d9:32:50:f8:d0:1f:be:7f:0d:45:9c:5a:7d:41:47:28:5c:54:29:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.zsico.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zsico.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zsico.com

Other certificates including the domain name zsico.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.zsico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqEf6fdzDU31IGo/32cfm
rbBW750iq6HhLrm/vvC44E1/yQkWRPm/PwOYgEH5WeCI2x0yewE7XmRZ+1oH/zyp
HhzGTIk2BeJYUrQeQr51ruY3FjuaApzH1shvbP2j73zAii58HBRnxLgNWuWZOber
SI4MFgz9CE6JHO3WiTjd3AI3odT4FWnHgLiSG5hMdS7o9X4kqwj+4lKlQPYe6/3L
kMZGkHvvAP8gtMk8telGvhKfEO5QHQOxLiMWJzvkPM1ZnJkQ762xr1/Kzbz+UAGr
B2HcPd3vNSoAEslVEwGZcjWbPVDFMln59BqFiIWTQytUtj9768y2yafs50QTOstB
jYIvG1+NtQppNvCbbcp9aBldCbg941UWzYph0Rfk1o3+6lXYqxbqRe4sKFQ+tw+w
OQgcn2TGZ8K1khXawOL1kCvxbOWRLHq58mAK344TwYhP6AOwEp3AA0aNaEMiJlow
yoYM25nfrJGZo/r+a0d3qj6XjsQ+gYGzwiVvaEP4ICQZ0Ngihg0qQk0iprk8O8/W
4hP3WH6KUSKiPIM7Ysovh4nw8389a0Y0NEbLHNLkRBEaI12hrfQpoosGAQce4Se3
MWSGwB7e+tciuc9NDht+GgzKm5XzVS/oTCq0B+wdodzEuHSipwFxMvQ0L6r7i1fU
Pnxj6diWs9ctSkdjTkrMtUECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361094724528085238403229399308135554290803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 16:24:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 16:24:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zsico.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686527260424354519654972484989690523425135518279569177386732493773622311994805938714197126263426345391068286210324214996279322316533072452276159459851613519852930999845886959704425243339917940012961093892063045268878900981471972426404977472328742690070533082473349501725013887255509073052884332146465665000219661921356120628203643583013167717730365749305780003365980494731574050651240749321177196080412255758663688140641023123144206720538374168980183743472294044376768651201091519746698233101234536189016547781376228384097818050508148325365168441755815070107328587389158115740902091132945589496750265901262632794312277975252574913163089905062346391020940118670792979712468022976709687305767996405731838077037094658355204267450169936224617542208998000104853259139976924672368855209470696334090713651854450564990849707664734661914234120922948213437087044778388106084481251925670001862734934187658017913012293708755741142881690105319041084423341879174266155430502500862220848553067089969545094190791642041921672941120865174541688859109660799385942204942975472007813315262718229783209520607180801925096958848728754639982483564939950258984973841023462067499170179389053655837274724562467752206898869349113980760519789317382089051208463681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83b3b9c3ac66df7325921c9ecab8ed5a78397c7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zsico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc1008455000004030047304502201a32b961b671938ad4b4ec6a2f49c508152d6751ff596d0ed29cf30520c6d011022100e474a7aa230a069d4ffee50331a66378def244919bf5073a938907a27c5c899d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc10084450000040300473045022100bf32379c9e006ccd141f92ca2c1c9be368b0fefcb9547ecb24c360fd5bec622f0220218d8eed3ffacc7e8213a49d9ebfe300abad5ce09d46ca68d273d2753bfdb4ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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