tk.zstbio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:c8:c2:1b:aa:8c:86:b9:25:f7:b7:25:5e:85:db:5a:af was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tk.zstbio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:c8:c2:1b:aa:8c:86:b9:25:f7:b7:25:5e:85:db:5a:af
Serial Number (int): 282360935643342862840071280035036548258479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:41:47:9f:8b:f5:f8:a7:63:9f:46:ab:b0:35:8e:fc:61:4e:30:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:35:76:44:10:0b:23:69:5e:18:2a:ec:fd:c4:fc:e9:87:59:f2:73
Fingerprint (sha256): d2:28:f8:ee:f6:43:f9:c0:d8:d7:88:c8:ea:0b:0d:e1:de:19:9e:7e:79:be:b0:3e:d5:aa:02:d8:27:7e:62:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tk.zstbio.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tk.zstbio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.kinten.net
binoitari.jp
kinten.net
ssdbio.com
tk.zstbio.com

Other certificates including the domain name zstbio.com

(limited to 100 certificates)
h.zstbio.com
sz.zstbio.com
h.zstbio.com
saiseido.cn
zstbio.com
zstbio.com
saiseido.cn
zstbio.com
zstbio.com
nbc.zstbio.com
zstbio.com
zstbio.com
saiseido.cn
zstbio.com
tk.zstbio.com
zstbio.com
tk.zstbio.com
zstbio.com
nbc.zstbio.com
tk.zstbio.com
saiseido.cn
nbc.zstbio.com
saiseido.cn
zstbio.com
nbc.zstbio.com
saiseido.cn
nbc.zstbio.com
nbc.zstbio.com
tk.zstbio.com
nbc.zstbio.com
nbc.zstbio.com
nbc.zstbio.com
tk.zstbio.com
zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
nbc.zstbio.com
zstbio.com
nbc.zstbio.com
tk.zstbio.com
zstbio.com
www.sumire-corp.com
zstbio.com
zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
zstbio.com
h.zstbio.com
tk.zstbio.com
zstbio.com
zstbio.com
tk.zstbio.com
h.zstbio.com
zstbio.com
tk.zstbio.com
tk.zstbio.com
kinten.net
saiseido.cn
zstbio.com

Certificate

The complete raw certificate details for tk.zstbio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAz3IwhuqjIa5Jfe3JV6F21qvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDgwMDM1NDhaFw0x
OTA3MDcwMDM1NDhaMBgxFjAUBgNVBAMTDXRrLnpzdGJpby5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTreK7GHlurRAD367qO8EQJTmH+C7159J6
83uPhY7SK8DJM3VI6KrZo0AANknKcWy//J2f070wZm2PB3zgRRU9FblpCIxP14g5
JN1K0s8y+JoWOegITZrC0O2qL6ZH19p5EeK0zjHhZwrTQAElTXkIaoWFye1rJCJz
mVIdl7hbi0CuLeIAbJgb7iIyCQVhPScoh8asoOVlpZwdOoMtRcK0SP+YVyX5pBeQ
dkWPg+RdNHN072Mwo+SWZxnna8xugC/ql5GqzNH5zKJzDGIUcR7qec2EwgRGUiEU
EW2rEezAt0rjKDoS4jM1cgWC2bNPo9UHryfVy/qkYwuDic6S6OWhAgMBAAGjggKY
MIIClDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMtBR5+L9finY59Gq7A1jvxhTjB5
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wTAYDVR0RBEUwQ4IMYS5raW50ZW4ubmV0ggxiaW5vaXRhcmkuanCCCmtpbnRl
bi5uZXSCCnNzZGJpby5jb22CDXRrLnpzdGJpby5jb20wTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDiaUuuJujp
QAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWn6llEJAAAEAwBIMEYCIQDe+Wyi
pW1RHhvv3K4nDpcIG/gz76DI4WXZfAAFbQnTfQIhAIaxA4No8GPCzTlSc+QNgIte
mErFrssraCrEQZDpGiXhAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL
2I0AAAFp+pZRYgAABAMASDBGAiEA5DDJmPOnz90ofj6IhM7UkG6iLWyY+/j94hKo
t6xw3Z8CIQDvqIAabPRnfb2lqS+kp4MG+qESeZMS6i3eGF6VDqyMozANBgkqhkiG
9w0BAQsFAAOCAQEAPwj2nEd2ZQiq+5Jb5qruI6htqPuDOUOmipSkdiyyoaS4u7He
HkyyIF1EmSm07/+hofEG4juXknuJ+apT7jypTBPQbInnfi5T+Xmpblymgkwrjhcm
VYLcaMPrryV12mpdLWUG5k7a7nKBNOQQ7vBbQ4IrZeU4PgJnPc54blSA4vOoeGDF
DysuUhpvMf0PXvzkRCHPpTb7+3bUbuxPeVMS94Tvs/oy+I4dxV8H1sf14dnF3nTl
2e4rY2ia9UkPZVs6o6pMU94J5o4hG8N5QnRZIBdRNK+/GpzKYrWVPCYSS6pIM4Z1
IMW0ykNzsnEAi5tbdntnfraPyktLTIaFoTlMDA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA063iuxh5bq0QA9+u6jvB
ECU5h/gu9efSevN7j4WO0ivAyTN1SOiq2aNAADZJynFsv/ydn9O9MGZtjwd84EUV
PRW5aQiMT9eIOSTdStLPMviaFjnoCE2awtDtqi+mR9faeRHitM4x4WcK00ABJU15
CGqFhcntayQic5lSHZe4W4tAri3iAGyYG+4iMgkFYT0nKIfGrKDlZaWcHTqDLUXC
tEj/mFcl+aQXkHZFj4PkXTRzdO9jMKPklmcZ52vMboAv6peRqszR+cyicwxiFHEe
6nnNhMIERlIhFBFtqxHswLdK4yg6EuIzNXIFgtmzT6PVB68n1cv6pGMLg4nOkujl
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282360935643342862840071280035036548258479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-08 00:35:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 00:35:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tk.zstbio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26722028566215131937666146543352594106816508087924697199163117430348183241707401915880096100159898956128175883216485018788293789871225746342182129498065304839332517804461717128934633742601545766098426360438884258075075561261572916814403762456709526981892927595193242460458252733383721540167970050925450224069201566362992033687926685870030132889534540273877504165706855222140074676555957619334105396224149950599755267603882156084813244914627997860725294593141250703744315632640347570569563634833914296030902235421403035849047416853640608397109599901233213606270829005619371192836668965110250796105178721135897608775073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb41479f8bf5f8a7639f46abb0358efc614e3079
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.kinten.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binoitari.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinten.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssdbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tk.zstbio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169fa9651090000040300483046022100def96ca2a56d511e1befdcae270e97081bf833efa0c8e165d97c00056d09d37d02210086b1038368f063c2cd395273e40d808b5e984ac5aecb2b682ac44190e91a25e100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169fa9651620000040300483046022100e430c998f3a7cfdd287e3e8884ced4906ea22d6c98fbf8fde212a8b7ac70dd9f022100efa8801a6cf4677dbda5a92fa4a78306faa112799312ea2dde185e950eac8ca3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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