DV SSL/TLS Certificate for www.zohran.nyc

Certificate is witin its validity period

Issued by DigiCert Inc (Encryption Everywhere DV TLS CA - G2)

About the www.zohran.nyc DV SSL/TLS Certificate

This certificate with serial number 04:87:98:c8:d2:fc:6d:ce:d6:71:1e:c7:f2:88:6f:16 for www.zohran.nyc was issued on by DigiCert Inc.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.zohran.nyc provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 04:87:98:c8:d2:fc:6d:ce:d6:71:1e:c7:f2:88:6f:16
Serial Number (int): 6020970896231143050692232536878771990
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 69:58:ac:08:d6:98:8c:44:62:af:cc:b3:47:da:d2:8f:ea:03:c7:9a
Authority Key Identifier: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (SHA-1): 2c:4a:19:ad:91:37:93:41:5c:ba:11:0b:71:72:83:91:ab:6d:97:23
Fingerprint (SHA-256): 2d:95:60:03:ce:04:f5:06:c5:70:d7:41:9c:bb:23:6e:4d:a7:9b:36:8b:f8:08:ca:78:8d:8e:87:43:25:0b:52

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate www.zohran.nyc
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.zohran.nyc

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.zohran.nyc

X.509 Certificate

The complete raw X.509 certificate details for www.zohran.nyc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wVE8y1GhWb9tjt0Omhi
LWQaQi4K5DfqY8sVqpUFwyvAo5KHhR48fmjXyPWYd5ojXJNsizHp4NoTq1p3lMQI
ndsd8tqRY8HkwaYSVOzG9yTWs9/HgxHUQN039afrljRj2ix7TvX53jamXaqYn4TD
JNQ2PnGgUseLykjZFpQtkqx8hIAPtmcrQ8IaYWpaJqVdkmYfkMFiuj5MQZGo4apY
2s+HDrmFi8n7w2iY9P+S5GRKtPAGULnfrytXSYrQ7gSNtnHqIGtZ8KhQg0P/uBYK
oq8PX0VUdQ/D5Iv5Kri8inHwGba+b3p9MWKTXjkvDLt1YAUn7ljc8O1h9fZ8UCDP
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6020970896231143050692232536878771990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zohran.nyc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28658693633515886513283643111807181404180848265111221780201191167436870163529829706590415082539211207687068126495780517817063227567014374175358948671129727182716564759729406436693864735217256483992158089394507977291992359462372228444634147280548980630111299348896111565339322336783356301116074708269774924901811764407944435200527595818736640970821375272883366777557771839516076932224376038924513649646728518779446441376233929595198316771847345939939896805264691112265348843525915329371058824074930691403502270136521577687356878763909913345652024099835268931929722958845344664229279780463598090787492125603848630882299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6958ac08d6988c4462afccb347dad28fea03c79a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zohran.nyc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cf20b014be103c0aa09a8f544246ed6628caec922be92bf8956dbae64bc1ed8b748869911e5b1bc3ad1585a3a5a1810266fe41625e29eb3cab39ccd2a8501f725813b4184bd056de1ca9f5ef5fa114dc7258c83d20b411a14443756df52c465bfc01da32c426348a50a053cbd91daa20906db1120784c6d06ec1dd0a0a3640b46fbfc6d09b086a38626625967c56c7b1a939cc6c025c05b30d97f245b9a74f140be63aeb62c7d6e74a64bbb4e81ec6d1a79aa78b1a8edbb9bd289c199aa670c1baa66da01e636bb84d3b2798629e04f3f08247357eff8797a448d007a2210367b29c7ea49431e617a2c0097b2294107cfaaaa60284241e9b321569d8965c1f19