ziamediagroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f8:c3:0d:14:61:b2:63:ca:43:1d:52:a3:7c:3b:70:6d:98 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ziamediagroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f8:c3:0d:14:61:b2:63:ca:43:1d:52:a3:7c:3b:70:6d:98
Serial Number (int): 433098438095859477880865378745992239672728
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:1f:e8:60:47:d5:2f:38:dd:62:86:c1:d4:1a:26:46:9f:53:ae:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:4a:a2:c5:7c:79:c0:e6:13:9c:b6:58:ae:1e:f0:4a:f9:39:d4:e4
Fingerprint (sha256): c2:70:95:0f:b8:92:df:81:0c:0d:ef:85:43:45:8d:c1:36:6b:15:76:a5:b3:e2:59:51:62:12:82:ff:0c:7e:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ziamediagroup.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ziamediagroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zia.media
www.ziamedia.com
www.ziamedia.group
www.ziamediagroup.com
www.ziamediagroup.net
zia.media
ziamedia.com
ziamedia.group
ziamediagroup.com
ziamediagroup.net

Other certificates including the domain name ziamediagroup.com

(limited to 100 certificates)
ziamediagroup.com
forms.tacotruck.ca
www.zia.media
skole.fsl.dk
connect.fiduro.nl
assist.smargasy.com
connect.sbadirectaccess.com
website.ziamediagroup.com
www.cispro.us
forms.bemorefree.com
www.zia.media
assist.lightningip.com.au
ziamediagroup.com
www.ziamediagroup.com
network.huntrex.com
www.zia.media
www.zia.media
www.ziamediagroup.com
www.zia.media
ziamediagroup.com
gla.goodluckassets.com
ziamedia.group
assist.amptelecom.com
connect.saansinternational.com
ziamediagroup.com
connect.sbadirectaccess.com
forms.ziamediagroup.com
private.royalstays.support
connect.biomimicry.net
forms.fleissig.co.in
ziamediagroup.com
connect.sbadirectaccess.com
form.farsight24.com
assist.ordino.at
ziamediagroup.com
ziamediagroup.com
form.intellishift.ai
connect.ziamediagroup.com
connect.sbadirectaccess.com
www.zia.media
ziamediagroup.com
connect.forthecollective.com
connect.ampliusworkplace.com
ziamediagroup.com
connect.sbadirectaccess.com
ziamediagroup.com
www.zia.media
forms.indigozest.co.uk
support.lightswing.nl
ziamediagroup.com
forms.indigozest.co.uk
www.ziamediagroup.com
connect.sbadirectaccess.com
www.zia.media
forms.fleissig.co.in
www.ziamediagroup.com
connect.sbadirectaccess.com
connect.sbadirectaccess.com
ziamediagroup.com
www.zia.media
www.ziamediagroup.com
www.ziamediagroup.com
ziamediagroup.com
www.zia.media
remote.propelcloud.net
assist.lightningip.com.au
connect.madsciencemaine.com
www.zia.media
inkindtrack.claridigm.com
toolmasters.izzyswan.com
www.zia.media
*.100menwhocare.ziamediagroup.com
www.zia.media
assist.logicalpros.com
www.zia.media
connect.clahvay.com
ziamediagroup.com
ziamediagroup.com
ziamediagroup.com
forms.brightbythree.org
virtualoffice.theeventzteam.com
assist.starmaninc.com
connect.sbadirectaccess.com
forms.insurancespecialists.com.au
assist.lightningip.com.au
www.zia.media
assist.lightningip.com.au
ziamediagroup.com
survey.neurohydrate.com
www.zia.media
connect.sbadirectaccess.com
connect.getmeofficial.com
forms.fleissig.co.in
toolmasters.izzyswan.com
connect.sbadirectaccess.com
cssi.leanjourney.com
skole.fsl.dk
connect.sbadirectaccess.com
www.zia.media
forms.spudsmackenzie.com

Certificate

The complete raw certificate details for ziamediagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4qchgyTMBiiSQg+TQTo
inVQiouuOS4WRjC8F12WgwBf9yXxT5eKU0cBSIti2f/AfZqrt6MdG02LIuTEDwC+
OrMionutL2jVZh47uhZHnzAA5nHx1sP1EAH9MihqQReNu6PeAQmi5iMqOu4Iq09O
o0qx6prCtXyxus2JblDb/CnDl6AxN2cvdG/A0OWPV2cUFf/CwSr/qxlotsrS/z5o
smDhi5K9DrMNIXPYXFJOVsCqYAl81R/v4fWOAZDIBeaLJVI5CscIVuE6+gOjRVX0
vBZlzBOaY3iQ82XvEqKZVB5DJSyccllVyp+g5CGCp95ReLeHJlON4EdyaO7+GIrn
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433098438095859477880865378745992239672728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 02:11:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 02:11:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ziamediagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24684821307302036852456493361782002003238799970441120002790410545628143740431293026734178695843569032896774352190193438680788563664078690560454018744619901559872756274483938943119406085862965574604604123588487294868867675496833876539131433143779648457403883182979268606547280465638324284207625521162526221061400515620411931583021506247326877681027891774610359583406228188495409090795196024558241022238587236923978048595322313705527418415559517855829347965201848387216063200898703222470882123794045899073848202658131544974689612539619127445607919180789948674035252280658056755619206982820734020855722430861441300621127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							181fe86047d52f38dd6286c1d41a26469f53ae71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zia.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziamedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziamedia.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziamediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziamediagroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zia.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziamedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziamedia.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziamediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziamediagroup.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e2f3ed648000004030046304402203d630320c4fda85c87f65413465f73c3e95a1be4133c070920b362d0eeae6fbf02204e833bf2d6a5482bce6e89d0d9d0556fa60a9f8bcfe7bf6cbe2e5dd0a3f6b53a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e2f3ed67c0000040300473045022100e1a10bd887493a5a316fcb7f370c8402fa4bc70c551741292ac5539f005c35c0022021cb4506f12a9f92c6953d6360e92462f8a44fe6cd5969f1e01a0c0a58ba0f2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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