lighthousemusic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4d:71:6a:7a:5e:2b:21:bc:19:84:a9:03:7c:fc:8f:05:53 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lighthousemusic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4d:71:6a:7a:5e:2b:21:bc:19:84:a9:03:7c:fc:8f:05:53
Serial Number (int): 374801641608858716018636828345730553808211
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:7f:43:63:47:c5:da:f1:f1:38:8f:58:28:aa:bb:7f:f5:33:60:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b8:9f:c2:2d:a8:c5:0a:86:fe:49:81:2d:56:92:86:20:d5:00:a5:c7
Fingerprint (sha256): 0b:47:6f:81:99:f6:dc:96:02:f1:fa:a8:79:06:b5:41:0d:76:f8:6e:4a:d4:75:7d:9b:2f:bb:72:22:f0:2d:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lighthousemusic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lighthousemusic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lighthousemusic.com

Other certificates including the domain name lighthousemusic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lighthousemusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374801641608858716018636828345730553808211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 11:36:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 11:36:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lighthousemusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780462899228131921941475043351995681539771567079007520023109651794548205663249108589823338341712048404636857912307662969614281425428676752391031825460768244572893607420838634525975115557982176877173541124104032149506275475383988527202601916178343586377846247143338303882989273107465345687878840811430429619774515351793581770567800180307198625633201999974727797887523600278226759307750171406940942066920684865517256062268454241353082815022062506641992314853333243062796013577914581194154158371676255368699746501451365988183583007930639587057573566565932528670749473391240766107528405512313425776467754267734183890286663174321784995061615792501282539207398664917199706153330963333693008706833634451121795515047437732626259516813714132957915628615773478562451884081774121310716352704440631978983463593100269583219608780287261909413302922635964033164000839912705630465653943447102429249564555202044264549124197164892016596376673202812963093694747955078808470768876354971331318543934742671077689505683280223437749201599823882120464241155285338247309302743065912919234831462393498254969845161868499972015236507458828735272493287443923902471221887168735974447753021622760890420935473907077832527191087798791979921801026656821176319527933491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a7f436347c5daf1f1388f5828aabb7ff533609e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lighthousemusic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f287581d70000040300473045022100bb8fec36cfb62e604fffc361b140ad1b8534090c034582262ea86a156ecb34b1022067dc01a317db2405a086833ccd323a594acc7e4f304dd2909d47372205ae4f64007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f287581c70000040300483046022100f13964450e5fe96e010fe67c4fbcf2a28ed296804557a8afc0668f50a751c0eb022100ec2bfc33a11a7032d60f1bb4c49c11208ce62e8a742fb0870454e8f291abc706
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094f9d8a50cc8827ff2704a52a315b52b2d3d60603e14494a06d65eec187750c0604a278a2b32fd6d636d0ef21163a74de92f13165858f445edf5291c65bff8f7bafc0337c0687f833c1c02fd5dbd03be74bdce5166009a7c848eda5a5f2b4410ed9950b1680143c2516f56e7192668551a378d95c03c38df4e1947d32b7a7a18e19273fe201d88e9919fdd568115e8aaae502eb0739ac90e247141f5152c1d293f77fa02144377df50f3ea237828eb49d38231f41c66598f899390a935d241f6f06c2c2db82db0d4dcd1528c527080e1e98c42ee37fd778716484f8724a0e49cba70e947fb055d124fce380393407842a83971e46bd51e57d72ba7bd520c3bc1