zatero.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:3f:cc:e6:c6:da:52:47:fc:12:4b:1b:66:04:6d:90:5a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zatero.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:3f:cc:e6:c6:da:52:47:fc:12:4b:1b:66:04:6d:90:5a
Serial Number (int): 328117006984787221805226997573997732663386
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:df:62:f0:d7:a0:c1:27:b8:0c:fa:e4:27:70:9e:a5:b0:5f:57:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:3a:11:30:5e:38:28:f1:62:5b:e6:4c:5c:ac:7d:78:28:cd:9d:5f
Fingerprint (sha256): c7:56:26:1b:d7:63:44:09:33:23:33:33:ce:e3:c8:5d:93:80:d5:13:91:83:86:7f:0d:4a:84:e7:9d:c8:b8:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zatero.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zatero.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zatero.com

Other certificates including the domain name zatero.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for zatero.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328117006984787221805226997573997732663386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 13:39:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 13:39:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zatero.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725811376750298482876626291575869870170402405420612124225467849192856543558532249213414557283828090961682094727984640841535175595655068896933397596180440969219875586779937003989502065787489957879770900707315771130226393811605485967979108908088068099808066882293911733828508765517255795024318655496223984834055127673848611400474606252316117122627353224549855233135664358340077849185361732227954224682990149944150839651202991038731133077254897896630624999655221818498809582640027082901708474072916660139342699626796066436201595382381409651190915506437048334280312106904846075174027033099535724210227431370975263238347782367210901839899568156288889759987018164408904523931494437763185964492607000476510614873752071544629724226145261119719645801955598691934193381131439762987618456691478873672062448058626115009042897710060355757277271094532608391777337668445108037315594111948463649353973534749427916468010998865497374135203447418159712318047738943467889895930874981089070457303011955246068951994615866342558708769877027937324442311452296416025022707195700564478447114176917117141249851659247238099868861962150284929488711570495068914259105659662127808937346297126867371435377813395659367961099093227121131477304798634798639876365578779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2df62f0d7a0c127b80cfae427709ea5b05f573d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zatero.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fa9a54b990000040300463044022070472e87d5c80fd3444138fd3781a6822511fa3e37b882a0a062d775db642d2802206274f8d5c6d5ebd5f7aa16eefdbbd2e1dd3ab2e39324b3602e138e8b1967de080077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa9a54bd10000040300483046022100aec76776c590af7fdf8ac813583e9f036ec141f7f7ef2b456d2cfef52e8f169e022100b6f98553a5e85c45399e5be6b5f461e7802802304040b63e4cd3a22b63396b88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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