zatero.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c4:3f:cc:e6:c6:da:52:47:fc:12:4b:1b:66:04:6d:90:5a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zatero.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c4:3f:cc:e6:c6:da:52:47:fc:12:4b:1b:66:04:6d:90:5aSerial Number (int): 328117006984787221805226997573997732663386
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f2:df:62:f0:d7:a0:c1:27:b8:0c:fa:e4:27:70:9e:a5:b0:5f:57:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): dc:3a:11:30:5e:38:28:f1:62:5b:e6:4c:5c:ac:7d:78:28:cd:9d:5f
Fingerprint (sha256): c7:56:26:1b:d7:63:44:09:33:23:33:33:ce:e3:c8:5d:93:80:d5:13:91:83:86:7f:0d:4a:84:e7:9d:c8:b8:7e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zatero.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zatero.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zatero.com
Other certificates including the domain name zatero.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for zatero.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISA8Q/zObG2lJH/BJLG2YEbZBaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTUxMzM5MzlaFw0y MDA0MTQxMzM5MzlaMBUxEzARBgNVBAMTCnphdGVyby5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCx6RRKqicAY7UTUILzik5Xjaq6zRD6L+3pKxyd X2bN9IRp+6wrHiT+AEaQ78weTAQjHoes4k1KvzLDNQwxeMIio+KUOnMVXzLlksRd yWkm2gKSVeLf3+urX4M72zbzI8NoyaHMBwVSLe/GmRzm8/QiV7iutmR2u0Mtr10w DdUQS4Qj/qEu+J3VcqRpoQoFcd1oOu7FBaHUjAQx49183Bkj/qTfANFuP8xNOjxO sJfyOgx+pjP421ThshPQ5mxK7c0UoCLt+w1qgBgnRS8YZbVBwHm6P/x/V3Uz8icJ nFvgB8ZZexzO6iDcepfggbQVaD8rGUTvNNvSQfysz6B/4D6D8NPC5DQojgfj2M7w kG3r75yr5kvc1q1hwLEJomfTISRWIKWNgAJps/cSCfQRVQ1axostiG++0TBcIJxh KIWVzp7BxsWHxFcbccCjsnHtpvY4cID/KpkTQTlIAcGEGqELR8RRSOh8y2gd+JKJ 8j3NbsJiTVHBOlIJkG10GcsXqqusdjJ03Ucd4rUgDMM8/bbr00ouCEsrW/WhtfdR 8Q5GkDICALJd55oWh2L85cGooyIczZN8B+VCLXIB8u2gRHl7jVYgLvnzrbNwgAJI 2H6+M6I/b5dAQDtX50S4OY7+E34CEOQ3BcccHlJ/8czU6/1iSK7/HLHYD0od1NRp MqNyGwIDAQABo4ICXzCCAlswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTy32Lw16DB J7gM+uQncJ6lsF9XPTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnphdGVyby5jb20wTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQCy HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW+ppUuZAAAEAwBGMEQC IHBHLofVyA/TREE4/TeBpoIlEfo+N7iCoKBi13XbZC0oAiBidPjVxtXr1feqFu79 u9Lh3Tqy45Mks2AuE46LGWfeCAB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN sgiaN9kTAAABb6mlS9EAAAQDAEgwRgIhAK7HZ3bFkK9/34rIE1g+nwNuwUH39+8r RW0s/vUujxaeAiEAtvmFU6XoXEU5nlvmtfRh54AoAjBAQLY+TNOiK2M5a4gwDQYJ KoZIhvcNAQELBQADggEBADRtvNQzmpL+aJ2Xl/+RSImR9h+vs0mhKGG6rEZVoErz N9Rt3Bf9wnr8ypakW5/sK8GYKbHy16tnouNs0VelWrSaJ1Rhm+8xEv8hRevzqQZP UGu0Q6aNy7P1xO4qt+TLKPy7BjV7fbujS9YrfnjryRWHBbFSMLxztJ0zeyyP+rLa +ajCQ2LCUfERo5i68iAUaPSVOUdPf5hGNu8Qn5x3z/+pvnFNZuYeaSZ5YaClBbmK cNx6WsZtE8RU1/zH6xKvQLyccFV9XjjuwcciUcPwfk4DNSu7Fzabvi5MZinI2kZN OC7qv6c+YxTt/Z6+SVMBJ7jafPma2b8qrXTFP+XPsxs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsekUSqonAGO1E1CC84pO V42qus0Q+i/t6SscnV9mzfSEafusKx4k/gBGkO/MHkwEIx6HrOJNSr8ywzUMMXjC IqPilDpzFV8y5ZLEXclpJtoCklXi39/rq1+DO9s28yPDaMmhzAcFUi3vxpkc5vP0 Ile4rrZkdrtDLa9dMA3VEEuEI/6hLvid1XKkaaEKBXHdaDruxQWh1IwEMePdfNwZ I/6k3wDRbj/MTTo8TrCX8joMfqYz+NtU4bIT0OZsSu3NFKAi7fsNaoAYJ0UvGGW1 QcB5uj/8f1d1M/InCZxb4AfGWXsczuog3HqX4IG0FWg/KxlE7zTb0kH8rM+gf+A+ g/DTwuQ0KI4H49jO8JBt6++cq+ZL3NatYcCxCaJn0yEkViCljYACabP3Egn0EVUN WsaLLYhvvtEwXCCcYSiFlc6ewcbFh8RXG3HAo7Jx7ab2OHCA/yqZE0E5SAHBhBqh C0fEUUjofMtoHfiSifI9zW7CYk1RwTpSCZBtdBnLF6qrrHYydN1HHeK1IAzDPP22 69NKLghLK1v1obX3UfEORpAyAgCyXeeaFodi/OXBqKMiHM2TfAflQi1yAfLtoER5 e41WIC75862zcIACSNh+vjOiP2+XQEA7V+dEuDmO/hN+AhDkNwXHHB5Sf/HM1Ov9 Ykiu/xyx2A9KHdTUaTKjchsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328117006984787221805226997573997732663386 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 13:39:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 13:39:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zatero.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725811376750298482876626291575869870170402405420612124225467849192856543558532249213414557283828090961682094727984640841535175595655068896933397596180440969219875586779937003989502065787489957879770900707315771130226393811605485967979108908088068099808066882293911733828508765517255795024318655496223984834055127673848611400474606252316117122627353224549855233135664358340077849185361732227954224682990149944150839651202991038731133077254897896630624999655221818498809582640027082901708474072916660139342699626796066436201595382381409651190915506437048334280312106904846075174027033099535724210227431370975263238347782367210901839899568156288889759987018164408904523931494437763185964492607000476510614873752071544629724226145261119719645801955598691934193381131439762987618456691478873672062448058626115009042897710060355757277271094532608391777337668445108037315594111948463649353973534749427916468010998865497374135203447418159712318047738943467889895930874981089070457303011955246068951994615866342558708769877027937324442311452296416025022707195700564478447114176917117141249851659247238099868861962150284929488711570495068914259105659662127808937346297126867371435377813395659367961099093227121131477304798634798639876365578779 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f2df62f0d7a0c127b80cfae427709ea5b05f573d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zatero.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fa9a54b990000040300463044022070472e87d5c80fd3444138fd3781a6822511fa3e37b882a0a062d775db642d2802206274f8d5c6d5ebd5f7aa16eefdbbd2e1dd3ab2e39324b3602e138e8b1967de080077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa9a54bd10000040300483046022100aec76776c590af7fdf8ac813583e9f036ec141f7f7ef2b456d2cfef52e8f169e022100b6f98553a5e85c45399e5be6b5f461e7802802304040b63e4cd3a22b63396b88 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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