xzone.in.salted.ai
Issued by R3
About this certificate
This digital certificate with serial number 04:78:68:8b:ef:81:db:b2:21:58:d6:2f:1a:c6:03:65:e9:13 was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=xzone.in.salted.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:78:68:8b:ef:81:db:b2:21:58:d6:2f:1a:c6:03:65:e9:13Serial Number (int): 389421994056162890594435850419276320467219
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f2:3b:d2:87:23:28:aa:41:09:55:40:3b:95:58:59:aa:74:d9:16:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6b:60:fb:d6:8e:6c:82:35:c7:3c:aa:81:18:5c:e6:b6:f4:eb:cf:ef
Fingerprint (sha256): f5:8d:6e:26:9d:10:f1:07:89:80:b1:79:f5:16:3c:bf:b2:5e:02:de:d6:81:16:eb:4d:6b:5e:30:70:f5:35:7f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate xzone.in.salted.ai
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xzone.in.salted.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apricottea.com
blaschka.com.slovenskekonjice.com
charlotteinvesting.com
energysmarthomepros.com.designpolicies.com
heartbodynaturals.com.embroideryprinting.com
horsesforheroes.com
hvacwinterhaven.com
iitchap.com
knivesexchange.com
mercatoimmobili.com
mysqlforum.net
nehemiahstrong.com
oboeexcerpts.com
southparkrealtor.com
xzone.in.salted.ai
blaschka.com.slovenskekonjice.com
charlotteinvesting.com
energysmarthomepros.com.designpolicies.com
heartbodynaturals.com.embroideryprinting.com
horsesforheroes.com
hvacwinterhaven.com
iitchap.com
knivesexchange.com
mercatoimmobili.com
mysqlforum.net
nehemiahstrong.com
oboeexcerpts.com
southparkrealtor.com
xzone.in.salted.ai
Other certificates including the domain name salted.ai
(limited to 100 certificates)
Certificate
The complete raw certificate details for xzone.in.salted.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgISBHhoi++B27IhWNYvGsYDZekTMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMzAxMDE5MDRaFw0yNDAzMjkxMDE5MDNaMB0xGzAZBgNVBAMT Enh6b25lLmluLnNhbHRlZC5haTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlbAtNa0G91ihUSrS1lwRemzvBFbVJEcYt8u2gX/sEUp6Sl0XfqEUqvuE82 abnvuqffKn8rwYtsr1zxoKbi2aRaXhXRait2laTqG1QHuUXS+h5QUiS73b58++rL 0s97nhnTYkqU9UJjR76KAeOMMEov9VBIYuIH29VRyqLOdi7rbcn81wV2r+SvDRCg Ulkd/E2sp5lcacfd1MEia74KFI0hT6pn4Wi6BUp2u46DY7cbdPfQDOdQGp3jodZO JAcR7MnHbsKrS4C2eADlyXuPPcZ84R2pefRuhfItS/FFHG8njcKcBPHkX69ko/ff CJgW30jV+UsX90aaGg9DcwDvVaMCAwEAAaOCA2swggNnMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQU8jvShyMoqkEJVUA7lVhZqnTZFiQwHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wggFyBgNVHREEggFpMIIBZYIOYXByaWNvdHRlYS5jb22CIWJsYXNjaGth LmNvbS5zbG92ZW5za2Vrb25qaWNlLmNvbYIWY2hhcmxvdHRlaW52ZXN0aW5nLmNv bYIqZW5lcmd5c21hcnRob21lcHJvcy5jb20uZGVzaWducG9saWNpZXMuY29tgixo ZWFydGJvZHluYXR1cmFscy5jb20uZW1icm9pZGVyeXByaW50aW5nLmNvbYITaG9y c2VzZm9yaGVyb2VzLmNvbYITaHZhY3dpbnRlcmhhdmVuLmNvbYILaWl0Y2hhcC5j b22CEmtuaXZlc2V4Y2hhbmdlLmNvbYITbWVyY2F0b2ltbW9iaWxpLmNvbYIObXlz cWxmb3J1bS5uZXSCEm5laGVtaWFoc3Ryb25nLmNvbYIQb2JvZWV4Y2VycHRzLmNv bYIUc291dGhwYXJrcmVhbHRvci5jb22CEnh6b25lLmluLnNhbHRlZC5haTATBgNV HSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ADtTd3U+ LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjLpy86oAAAQDAEcwRQIgZelT HvM7F7wdoKSbvA3TfvnIx+or+DOufUKFCoi+vGsCIQClmuHKC7Me9d3UA1laWrg+ L4C2QqZjDw48XQmQJaRI/QB2ACnQOhu2dKpxHNMDW2VXwU+Kp4tP6DiUSeykU/lE vSRoAAABjLpy9HQAAAQDAEcwRQIgPz9zmpcjlWUKQ+SAkR4VJyL9hPConcJ1dhV3 DMn3s4YCIQDlp1sJxR6RP+5XqSUY3W9PwhcxJcbwG0+2Gt66cz7YPzANBgkqhkiG 9w0BAQsFAAOCAQEAuGe5WYLpc4SJNydGSm+4sGgKHhd2lUeeLQk6IpLHDbQf24nP cIAOyxAMJx+XtAXhHmyL5GPFw4SGJXSZ4fy2Qq35rCsm2DUqNHMmr51XNClEcXSc FtcQQU6/Qq+1Z1hVfz0NH/of9DW0wqpJP4aoGrKcwI3m8tKmaE4K22xNI1et5OmU stFMhlLhNT6kkc4ku6jxhAosRILjK0bPcmR6gs+jm4MMyzqGehPUp3MVH4/Od5EP wajvRUM7ehxKpRJnA32QJThimRKW4SBfsaEbfVvCCoA83fUpkH1jisXRatjGyqZX 8lq0nFBbJBeLYuOrewwVgDZ2lj9LL/TyWRUXdQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVsC01rQb3WKFRKtLWXB F6bO8EVtUkRxi3y7aBf+wRSnpKXRd+oRSq+4TzZpue+6p98qfyvBi2yvXPGgpuLZ pFpeFdFqK3aVpOobVAe5RdL6HlBSJLvdvnz76svSz3ueGdNiSpT1QmNHvooB44ww Si/1UEhi4gfb1VHKos52LuttyfzXBXav5K8NEKBSWR38TaynmVxpx93UwSJrvgoU jSFPqmfhaLoFSna7joNjtxt099AM51AaneOh1k4kBxHsycduwqtLgLZ4AOXJe489 xnzhHal59G6F8i1L8UUcbyeNwpwE8eRfr2Sj998ImBbfSNX5Sxf3RpoaD0NzAO9V owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389421994056162890594435850419276320467219 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 10:19:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 10:19:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xzone.in.salted.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21379152754535016691951486891677401088059288287105846222198919574768650843053416718104054476910680563309405785387165560315463934388279111868381897494746401144587072976490993390270887358081731089697939447522362905585672922706274570950384467161659081656730053537676145052075590599482291428034285552987751278492082715639800171318361371989837782577693326125925383817079315992817621577377129150399612408355539359398035697663064137894453126201370558759444856785614212578329318824369167768032465942234515835318409937734572208165804637928431643762775690062959476449338762994573963223898458593033568543428148657772517097690531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f23bd2872328aa410955403b955859aa74d91624 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apricottea.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaschka.com.slovenskekonjice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotteinvesting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energysmarthomepros.com.designpolicies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartbodynaturals.com.embroideryprinting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsesforheroes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacwinterhaven.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iitchap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knivesexchange.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercatoimmobili.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysqlforum.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehemiahstrong.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oboeexcerpts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southparkrealtor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xzone.in.salted.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cba72f3aa0000040300473045022065e9531ef33b17bc1da0a49bbc0dd37ef9c8c7ea2bf833ae7d42850a88bebc6b022100a59ae1ca0bb31ef5ddd403595a5ab83e2f80b642a6630f0e3c5d099025a448fd00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cba72f474000004030047304502203f3f739a972395650a43e480911e152722fd84f0a89dc2757615770cc9f7b386022100e5a75b09c51e913fee57a92518dd6f4fc2173125c6f01b4fb61adeba733ed83f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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