zv.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8b:68:d4:11:44:79:c5:57:b8:1e:5f:df:fb:a1:64:e5:69 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zv.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8b:68:d4:11:44:79:c5:57:b8:1e:5f:df:fb:a1:64:e5:69Serial Number (int): 308775447626012991567385505972269548365161
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 12:2f:49:b3:e1:19:11:26:4c:f5:4c:93:96:d9:b4:d4:45:81:8b:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bb:e2:ba:e2:d6:29:34:ba:a8:bd:df:5e:04:4a:3a:fe:fc:f3:3c:46
Fingerprint (sha256): fc:d5:23:9b:98:f0:7f:6e:e0:95:40:d4:24:b1:29:0c:6c:d8:ae:41:7b:ef:d5:7b:9e:91:c6:56:e5:fe:3a:bb
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zv.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zv.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zv.org
Other certificates including the domain name zv.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for zv.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISA4to1BFEecVXuB5f3/uhZOVpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjYwNjE0MzBaFw0x OTA5MjQwNjE0MzBaMBExDzANBgNVBAMTBnp2Lm9yZzCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBALu5bP6KJAEehKtW4+XMFDnz8m6dcorlgGJH8/Q619H3 L8IEDZE5yBUuuoYHKP7VfbkdJe+JMZpXoO6DvujAGCSGM63sL4gQKxNfQgVZZJhN TxGNc6wfwx+uG7wLNGktvaGgknAjgd/spPlAXSCZ6ONL+oI+BJQWQR4kLylOdsnH 3eTw4e3He6djfQlmIK8VW2LC5xVZctPwuLKi3XwBLNHttG9LIujk0KhJcrfKbP5O pRnGtSv0wjPRUc0mAzQ5Md97FSgNi1QhAkJqN4/3OeD9SsW2FTP5ettiMVnxUoLW di5/Kii+KLgYT09xAAzt49ueGB0bcAYdHN7zIuCkr0p2EkFJQ/Dj0wMm7rpooNex M++P8EbLuGveEkXJHs/at4ZM/XUMaInmnL4p7zk9P9iZI+JxCKGFsA/4bPutNsFW 8NGWvWXTgfiOPCajHjrKS+WBXNZvU9xuEFES/JxeCJYT3lM+/+7+oN4McUqgNKdL dDJ6DEfdCNkJTMDEsoD02FlhtzH5TOTRd3TXI4m6qNNnj0vrHY2cph/UcxA5Eq68 /hJ4c5Ghp6dyO7nVHl9Ej2opU2le2wFrJuWFnBpuQbGlerEphm2xuozvtQA9JG59 RHaoUaxjmo/Ne1hRxD8R0ro/n04z8SYHedJdxIQx+Y8nNCIa/S8w239gCsHjvqpP AgMBAAGjggJaMIICVjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBIvSbPhGREmTPVM k5bZtNRFgYtZMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wEQYDVR0RBAowCIIGenYub3JnMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFrkqLKawAABAMARjBEAiBQ+eIzMBuP zQEHRKi2LpSp0nurUo8iz+CP+TpRfkefwAIgNHBf+RWY9og1XGJgXvI00TPGJdju zc+ipAu5PJPovocAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAA AWuSospYAAAEAwBHMEUCIQCtaAINOrn79dZPWGy+bUJmL3sTWfR4H8IJcl3yZRC5 QQIgTZWpIo33rLkv9pNawY6a5nGKZVmwB8pqgdzrj9GgpnQwDQYJKoZIhvcNAQEL BQADggEBAFnE8WmN4tz7NBVhBF+aCZ4c1wDQ/uY4v+5IJXDuDRuoWN1ABHZ39FM+ ZrE1FgHlLr5Nv3xdQzSX2xIwujTSE6sD4CxNiQ2AenYqiw5TgKS2jlRbLAUf+qg1 QA/J/h1tS9Qds1OZm+6JSU+oAoqGWAKKZYl/xNwyFlXzlJETqEB2FHSVieihitcO KO2TRjaS6twkuBMKEoBS4Egin8iIz8QGvjX8QTeK+8tXhLlv+wcy6zte7WvsZFsg ibh9llK4KAD1b0IIDK+dJRmMBflcbIP30g1FNMwS6EgKHkTKFh1VbQvTuPP7uhpU AVayS9dY9JPaw98BMybe1EVo5lA8iUI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu7ls/ookAR6Eq1bj5cwU OfPybp1yiuWAYkfz9DrX0fcvwgQNkTnIFS66hgco/tV9uR0l74kxmleg7oO+6MAY JIYzrewviBArE19CBVlkmE1PEY1zrB/DH64bvAs0aS29oaCScCOB3+yk+UBdIJno 40v6gj4ElBZBHiQvKU52ycfd5PDh7cd7p2N9CWYgrxVbYsLnFVly0/C4sqLdfAEs 0e20b0si6OTQqElyt8ps/k6lGca1K/TCM9FRzSYDNDkx33sVKA2LVCECQmo3j/c5 4P1KxbYVM/l622IxWfFSgtZ2Ln8qKL4ouBhPT3EADO3j254YHRtwBh0c3vMi4KSv SnYSQUlD8OPTAybuumig17Ez74/wRsu4a94SRckez9q3hkz9dQxoieacvinvOT0/ 2Jkj4nEIoYWwD/hs+602wVbw0Za9ZdOB+I48JqMeOspL5YFc1m9T3G4QURL8nF4I lhPeUz7/7v6g3gxxSqA0p0t0MnoMR90I2QlMwMSygPTYWWG3MflM5NF3dNcjibqo 02ePS+sdjZymH9RzEDkSrrz+EnhzkaGnp3I7udUeX0SPailTaV7bAWsm5YWcGm5B saV6sSmGbbG6jO+1AD0kbn1EdqhRrGOaj817WFHEPxHSuj+fTjPxJgd50l3EhDH5 jyc0Ihr9LzDbf2AKweO+qk8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308775447626012991567385505972269548365161 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 06:14:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 06:14:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zv.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765848405944860520313869754165629762037038791123110221853671371825430382868932457932425223638362346156866546960859167254028499361679426938262577866695299356430524428823546830034879828854733916387217870798517879214232485033800231551835825609614656240791090882260438670101699560092292698189988490538602648083617537969956173889231667901537750298814109609030495134536382000148036564662507566524774258092575658707225477688465779008228663730521496207724398037281556835820666846053848998628874397775989851708559706518588301024288450843636704094054571428628747533413675814376964977885449178554105625888571051351150967993937319921946430456643191509229816209718935398351704397016002325975600609311013854655382276768257728844873555036831109027563212787456670175812079917958775901848262806826478407176103067352069785198821271486912959574081635134649699057312464624046230238262980895000243129596591174593505400093731590029615104665398598374073548678383040705977476545111956136650509993682123503246067702846496774087194098349197383598687773445984404359293994277579060330876897736013825494624593109223143168326931619384228764890939029626332772490599472834620481435415095705458896811997296102680370771702820400429500030593836775438841510648193395279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 122f49b3e11911264cf54c9396d9b4d445818b59 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (10 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zv.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b92a2ca6b0000040300463044022050f9e233301b8fcd010744a8b62e94a9d27bab528f22cfe08ff93a517e479fc0022034705ff91598f688355c62605ef234d133c625d8eecdcfa2a40bb93c93e8be8700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b92a2ca580000040300473045022100ad68020d3ab9fbf5d64f586cbe6d42662f7b1359f4781fc209725df26510b94102204d95a9228df7acb92ff6935ac18e9ae6718a6559b007ca6a81dceb8fd1a0a674 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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