zinnia.fund

Issued by R3

About this certificate

This digital certificate with serial number 03:49:e9:49:24:3b:2a:ae:8a:00:d0:fc:7e:eb:e6:a0:06:4e was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zinnia.fund

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:e9:49:24:3b:2a:ae:8a:00:d0:fc:7e:eb:e6:a0:06:4e
Serial Number (int): 286487560476052222908509988926694109480526
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:06:c9:f7:c3:4d:a8:3d:fb:7b:fc:41:4e:f1:24:c0:ec:ef:c7:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:85:f4:8a:ef:d7:75:5e:b3:98:4a:f2:4e:14:eb:c4:88:97:11:51
Fingerprint (sha256): e0:74:df:21:92:d2:2e:a0:65:af:15:4d:e4:2e:6f:ae:9e:60:f1:9d:cb:aa:2a:35:d5:ba:be:a9:89:57:fc:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zinnia.fund

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zinnia.fund

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

business-logic.com
curacaocompany.com.eringeevoice.net
endthestrike.com
genderequalitylawyer.com
h2visa.com
hoardingfacts.org
ketosweettreat.com.cashwan.com
madewithallulose.com.themodelhouse.live
republicaneditor.net
vdn.co.in
zinnia.fund

Other certificates including the domain name zinnia.fund

(limited to 100 certificates)

Certificate

The complete raw certificate details for zinnia.fund in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgISA0npSSQ7Kq6KAND8fuvmoAZOMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjYwODAyMDBaFw0yNDAzMjUwODAxNTlaMBYxFDASBgNVBAMT
C3ppbm5pYS5mdW5kMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud2f
qwMUoa1VLiwGZScf+Epdyg6wQ9V1zlJXscZ12X4wpoRjqLNuyHWx+JxJXGDYCLxg
1d2nH1KqY3pjqJBMihLPmbpu4HvARPgQJFMHQkFWRXQMcIz8o6P2cE7PKptvbm9a
+n0U9k3wXuLXbVJ5DV+Pu1gEKN/9tCQMkGDaUytqLC7Hv75fTZxaDqOUvnDRORXd
QneNPk/3La99quuN3CKA6RWdoMoo9N0zD6CqAxXmqAkZp+nmWyg8FQWcb74sGIoz
pETvHnl6OGKLENqe3r3NOfuq4KvBJvBOM9Mq80KwX5cw0RsKA0XQq2gCh/v7ABVy
Q0siA1F8RGoKhOiI1QIDAQABo4IDADCCAvwwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTwBsn3w02oPft7/EFO8STA7O/H6jAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm
H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v
LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC
AQYGA1UdEQSB/jCB+4ISYnVzaW5lc3MtbG9naWMuY29tgiNjdXJhY2FvY29tcGFu
eS5jb20uZXJpbmdlZXZvaWNlLm5ldIIQZW5kdGhlc3RyaWtlLmNvbYIYZ2VuZGVy
ZXF1YWxpdHlsYXd5ZXIuY29tggpoMnZpc2EuY29tghFob2FyZGluZ2ZhY3RzLm9y
Z4Iea2V0b3N3ZWV0dHJlYXQuY29tLmNhc2h3YW4uY29tgidtYWRld2l0aGFsbHVs
b3NlLmNvbS50aGVtb2RlbGhvdXNlLmxpdmWCFHJlcHVibGljYW5lZGl0b3IubmV0
ggl2ZG4uY28uaW6CC3ppbm5pYS5mdW5kMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A
DS1yb+H61BcAAAGMpVwF4gAABAMARzBFAiBcqCXD4nzix0nKLMJA6Jv8QeWFllmo
qFpBH/HxhXtCsAIhAIkZ4A1WtyX+NdDNDlejmsCGIpz6LmYMNFiijlJSQsAWAHcA
ouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGMpVwGAgAABAMASDBG
AiEA3nG+kyMyl+MYCC54g0tjZIRXkFER2kk5sWWutU1Eqo0CIQDz1Dt2HCGOATcf
4veKHyohIE9WUaKOGn6E95Zk5fpe6jANBgkqhkiG9w0BAQsFAAOCAQEACgoDQh7i
9jbyIJsN3An9JFR+WbylPdrIiUTa3jmHmQ7wkiohLdlqIW369u8apKtczxeHeDRA
0KnKooE5HXucfGgbuPiNy/Yk2elcR24ZqYDwqeGqoVOXtnVp5UjGwzn7mLKWSGXK
QFlKLWY/30L43/1iBfpmiH8n5YPKCz5dAPDpY/6gynqx7xIS+XtHxLpLmDn4YamS
wIYjq667rUflvcoNqUuXBtVL/+ynYUAxcGGVUpXRn/O5k/q8X8XfsVyfCtiIQBEr
27WgeYbANI2wMjAe7gKbQyjIDcVDttgOdaABP85kMi/F3M4ADKl92WmwmY1GQdpr
gUlunVVWGbp9CA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud2fqwMUoa1VLiwGZScf
+Epdyg6wQ9V1zlJXscZ12X4wpoRjqLNuyHWx+JxJXGDYCLxg1d2nH1KqY3pjqJBM
ihLPmbpu4HvARPgQJFMHQkFWRXQMcIz8o6P2cE7PKptvbm9a+n0U9k3wXuLXbVJ5
DV+Pu1gEKN/9tCQMkGDaUytqLC7Hv75fTZxaDqOUvnDRORXdQneNPk/3La99quuN
3CKA6RWdoMoo9N0zD6CqAxXmqAkZp+nmWyg8FQWcb74sGIozpETvHnl6OGKLENqe
3r3NOfuq4KvBJvBOM9Mq80KwX5cw0RsKA0XQq2gCh/v7ABVyQ0siA1F8RGoKhOiI
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286487560476052222908509988926694109480526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 08:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 08:01:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zinnia.fund'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23463373139934011578633232840549939583791091369539304728765283566540578671389237950355155730222060935963332202317690872544951921842413351355809543357721579163398618222882968219837721831909115483500108961936822901535035435819425038559237305991270283774981242637351217425610369618542957972102362112558803949985954328415146258942312426650814058653286021858826312754233677617829209356983869329005068979800952378923017821365376049508305249524420436720639684869204019798793833021716964539201974553103831387344610701456152770295649593813417102756774661967830022748024744140131770381285696203315368169296030743709235349588181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f006c9f7c34da83dfb7bfc414ef124c0ecefc7ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-logic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curacaocompany.com.eringeevoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endthestrike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderequalitylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2visa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoardingfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketosweettreat.com.cashwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madewithallulose.com.themodelhouse.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicaneditor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinnia.fund'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca55c05e2000004030047304502205ca825c3e27ce2c749ca2cc240e89bfc41e5859659a8a85a411ff1f1857b42b00221008919e00d56b725fe35d0cd0e57a39ac086229cfa2e660c3458a28e525242c016007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ca55c06020000040300483046022100de71be93233297e318082e78834b63648457905111da4939b165aeb54d44aa8d022100f3d43b761c218e01371fe2f78a1f2a21204f5651a28e1a7e84f79664e5fa5eea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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