Certificate Summary:

Subject: dns.nextdns.io
Issuer: ZeroSSL ECC Domain Secure Site CA
Expiration: 2023-09-26 23:59:59 UTC
Key Identifier: C5:DF:DD:57:DB:56:59:5E:1D:4B:16:B4:C6:51:FC:AA:02:BB:44:54

Download and Install

Received at FYIcenter.com on: 2023-08-23

Certificate Detailed Information:

Name:
/CN=dns.nextdns.io

Subject: 
   Common Name (CN): dns.nextdns.io
   Organizational Unit Name (OU): 
   Organization Name (O): 
   Locality Name (L): 
   State or Province Name (ST): 
   Country Name (C): 
   Email Address: 
Issuer: 
   Common Name (CN): ZeroSSL ECC Domain Secure Site CA
   Organizational Unit Name (OU): 
   Organization Name (O): ZeroSSL
   Locality Name (L): 
   State or Province Name (ST): 
   Country Name (C): AT
   Email Address: 
Valid From: Wed, 28 Jun 2023 00:00:00 +0000 
Valid To: Tue, 26 Sep 2023 23:59:59 +0000 
Serial Number: 0x92DC7C617187C8B472C7152D806CA9B0 
Hash: 24dc5e93 
Version: 2 
Signature Type: ecdsa-with-SHA384 
Purposes:  
   SSL client 
   SSL server 
   Netscape SSL server 
   S/MIME signing 
   S/MIME encryption 
   CRL signing 
   Any Purpose 
   OCSP helper 
   Time Stamp signing 
Extensions:  
   authorityKeyIdentifier:
      keyid:0F:6B:E6:4B:CE:39:47:AE:F6:7E:90:1E:79:F0:30:91:92:C8:5F:A3
 
   subjectKeyIdentifier:
      C5:DF:DD:57:DB:56:59:5E:1D:4B:16:B4:C6:51:FC:AA:02:BB:44:54 
   keyUsage:
      Digital Signature 
   basicConstraints:
      CA:FALSE 
   extendedKeyUsage:
      TLS Web Server Authentication, TLS Web Client Authentication 
   certificatePolicies:
      Policy: 1.3.6.1.4.1.6449.1.2.2.78
  CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.1
 
   authorityInfoAccess:
      CA Issuers - URI:http://zerossl.crt.sectigo.com/ZeroSSLECCDomainSecureSiteCA.crt
OCSP - URI:http://zerossl.ocsp.sectigo.com
 
   tlsfeature:
      status_request 
   ct_precert_scts:
      Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : AD:F7:BE:FA:7C:FF:10:C8:8B:9D:3D:9C:1E:3E:18:6A:
                B4:67:29:5D:CF:B1:0C:24:CA:85:86:34:EB:DC:82:8A
    Timestamp : Jun 28 04:01:42.681 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:45:02:21:00:CA:AE:0F:54:E4:6D:67:9E:ED:09:AB:
                3F:75:B4:BD:CB:43:7B:1E:AF:F3:AA:C4:63:30:01:43:
                9B:2B:7E:C7:5F:02:20:53:33:ED:C5:9A:1C:02:66:68:
                07:44:A5:F7:B1:CF:CC:81:CC:D8:B7:1A:2A:D4:D9:1F:
                5F:CF:B3:D3:A3:F3:AD
Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
    Timestamp : Jun 28 04:01:42.775 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:44:02:20:49:14:03:B4:E2:2F:66:A8:52:00:62:87:
                C0:AD:4E:90:A3:AE:C5:D0:A8:07:DC:41:56:F9:3A:E6:
                B2:50:1B:3D:02:20:10:2A:FF:04:B2:74:06:37:6D:7D:
                47:68:7C:C4:C2:3D:8E:A6:A3:33:44:C6:DD:11:DB:98:
                B3:8D:89:E8:6F:05 
   subjectAltName:
      DNS:dns.nextdns.io, DNS:*.dns.nextdns.io 

Certificate in PEM Format:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Related Certificate(s):

ID      Subject          Issuer           Key Identifier   Relation   
        dns.nextdns.io   ZeroSSL ECC D... C5DFDD57DB565... This Cert
        --------------------------------------------------
10575   ZeroSSL ECC D... USERTrust ECC... 0F6BE64BCE394... Parent Cert

Public Key Detailed Information:

Key Details:
   Type: EC
   Size (bits): 256
   Curve Name: 
prime256v1
   Curve OID: 
1.2.840.10045.3.1.7
   Public key (x): 
579558af5e47e3da2687b80ac4e9a13bd540757613b67ea24088794deaf1e2f8
   Public key (y): 
3d991f8de3bd412ae06d9a84e5a191573327c53aafb9c89894ce2802adea17c0

Public Key in PEM Format:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEV5VYr15H49omh7gKxOmhO9VAdXYT
tn6iQIh5Terx4vg9mR+N471BKuBtmoTloZFXMyfFOq+5yJiUzigCreoXwA==
-----END PUBLIC KEY-----

Identical or Similar Keys: We found that the public key in this certificate matches key(s) recorded previously.

ID      Type Size Pri/Pub Key Identifier   Date       Comparison 
15693   EC   256  Public  C5DFDD57DB565... 2023-08-23 Same Key ID
15696   EC   256  Public  C5DFDD57DB565... 2023-08-23 Same Key ID