stereofonia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:81:8c:52:fe:de:b1:56:e7:a9:ab:da:c9:b1:ef:70:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stereofonia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:81:8c:52:fe:de:b1:56:e7:a9:ab:da:c9:b1:ef:70:c5
Serial Number (int): 315954235518997803957991689497988379406533
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:a5:55:27:d9:d3:f1:8e:7e:49:8a:bf:b5:25:46:0f:66:5b:95:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:db:1a:d8:b2:41:2d:6a:83:4b:24:7e:db:c1:2e:dc:3a:cc:99:b1
Fingerprint (sha256): 10:11:39:be:61:57:95:a9:e3:26:8e:90:5e:06:24:24:49:fc:54:6d:a3:c6:3e:0e:92:75:23:51:98:12:74:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stereofonia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stereofonia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stereofonia.com

Other certificates including the domain name stereofonia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for stereofonia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315954235518997803957991689497988379406533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 17:52:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 17:52:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stereofonia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691520537313549739986300730720159810800999082462302505834979242940861723345399943618072894469880897595081184399346097993561058618107909454156472253533317209786132093963670767502535556008002624025169717156652105913942550925915571459977637747128682651162390972366266225985144564459575284662542572662997288509101755471877210482044107630344802932873512842149785141948155513320026618501543226916888222978729083283239364320435769882227287249012639881629787434924426194765418726328260506322666936133021791250415406294621261464162477681985594088038141059655089887596985525073977401454449213391407260508640166658974214558070151609634503694243202313863616888050779642413846084871687443667376186343433838697257852098730588354641670172838981818129125402742047763294861083402289786967243908957075399216974270477309184798357478462206668065735726553752285359423944042688659352107398681010210688205100660819439348297253255630898503026345797005535509861142227124607462904902965834748797283495949446042563505049536572657349817175947291629483892392949068471313812756251107499220018224494974096957851993240446263213073749161057020889044090876369675626497824726547194662219153135507595816071533908647749389616455398433867643951561633982947238538441187561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54a55527d9d3f18e7e498abfb525460f665b95c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stereofonia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff7cc91310000040300483046022100941c05466b170bc087078056fa1fb8bbebcf5a359c8023a2592ee7d079a30347022100e09d890b48db7c5d9ce466404dde4b5732c8cbe0df27f94bc5609e25477ef71d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff7cc9122000004030047304502207a7f35ccecc4392c04a8368ed8a2abe4d094eb7bc284cee56d2dc697763689cf0221008c68f4d41465a80d63859cd5bec9e4ef6cc77e24feff8b6d664328f912e3eef4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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