cantante.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:61:af:38:f8:32:0e:cf:b1:31:ea:37:f7:f2:a8:c7:0d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cantante.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:61:af:38:f8:32:0e:cf:b1:31:ea:37:f7:f2:a8:c7:0d
Serial Number (int): 402343602623569658512497621832398115751693
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c3:cf:d8:45:a0:57:f7:b7:69:7d:77:2b:bc:32:ae:b4:33:e5:3b:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:85:f6:3b:99:81:c0:1b:93:67:fe:02:3b:eb:d1:e2:b3:91:fa:5b
Fingerprint (sha256): 0c:cb:ba:00:f1:71:bd:e1:dd:c5:ce:b6:94:fa:6b:8d:07:74:98:cb:c8:3c:69:44:dc:85:ba:f3:3d:2f:70:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cantante.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cantante.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cantante.com

Other certificates including the domain name cantante.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cantante.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1aZtgOBw0WG90CS+Ris2
PTi9u2ZqBDESVk5BR9B4Vo0YXo1ol+2SP1wic2IAaqZ2XBFUNglIAkQ6J8OwgHjB
mxDMxAaDXQKLMO5B7g/VKvPKwfTxhKClFv7D0FZ6UMAKJrMDOubTf+J30z4lRVYI
kgINkY/06Zd70yG43GEVAN3DRZ2iEOpILjvCh10PdypCdKSYi7HxVumKqBEAl7ML
TNORdt2sg3rgYDtmvaeiTGUqOuopMPVGeBgNCXQYkCbAd3CgmjlTmcaMm3Poc+hu
LEAc32hWLUAlPlKlYmBWH75F+7aWxXJ/xj1SJARL4rpSKBZJNaxvxK+2kvOYmmJa
1OwWsqwpzBkkkB3zQFdzDGkfoCBEmtGrfl+6HMcSBHVgjIrtuuJS2kLrXtYRCdT4
aivz4f9SwmwPONdhIKkCGznMH0RXAD1v0hE0qgF11lpcWf/XTBeBuQ9X6uh8eAsO
G8g6vOLyYfm9YOjIThr1VCUmN7A0GD11C4nlNya9lSDHH/yyTWvGruN0q3qq0yhY
yTd45LiIkixeJ/1Mr8J7UWB/1ko4vSCObCcZMBZPikSXhFVRgdPAZ//PCrc3EW1N
MF6qOJmWZTCty45H5w4OwpkV5JOqu/4tA01RPZau3GS2KuUwCmS7y5gXVcwZA1BO
uMXzeVhcmuO3OY/7CJYBy90CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402343602623569658512497621832398115751693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 09:26:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 09:26:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cantante.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871616397323729565240180079485475604002268309973742143532734628550879554934911278090146380843993614180229399555999614505494160430001858937364530937261906445839391859461566049933272677190659504829589152335541187700046594789075277019646993409506173662260552608550489390283370223719261755327755883946695730903314173930469885338493640743131363338418366295959228095863872010454886989571932049309342076473566974485024382114401330781528393420382124164372922526757754652222347985438797074328380256012531801390111778708162064058457425775220766395068228572897397991851208675687046223636784599435213233271312340571792262596241251088344947278121475774423925710275263067439937416322744959793682250985117244571383022476244172682476149359019422273576541800366126464439427427509161370447130450726521837181455110576109982598401251453762700569961760561294263778039768407672461499715064952223085682674879654440076931761674695738566197092274593737654309001307316917159498822389225546562811327459270928274393498678151681078130214474538425469377055490941665539314459410815854138566368354157179532862587519255912758896121437006308985542717169408193374599958762649608520362913459629419985723902642149485166691050849597201900763956136650549260656027677871069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3cfd845a057f7b7697d772bbc32aeb433e53b43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantante.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf16aa7bb000004030046304402205f0316f587f6df935a6d0644d916fcfe9eb9761ad41b5415eaf210cad9385f520220019a674b3e6165802f178424d6f7ee7e2f9cb0d7617fbf437733985c8a39c8850076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf16aa7b90000040300473045022100fdbecea8aa8d2eb84196b0cba692dd80425f0339a5aa1995975c8e831b732c3302206ec77b04db8b2c9f6793610e1119c675ed993ab7fb1e5c8924c747969e584ce1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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