musicaafro.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:af:e9:18:47:bd:5f:61:79:f3:3f:2e:c4:c2:f3:d2:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=musicaafro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:af:e9:18:47:bd:5f:61:79:f3:3f:2e:c4:c2:f3:d2:32
Serial Number (int): 333710544779411731087983817526934657815090
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:24:cd:c1:93:62:06:ff:c8:72:24:5a:ed:df:5f:a5:bf:a2:fc:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:5a:5a:15:0e:42:31:8d:7b:ea:4f:5f:67:dd:91:ca:d2:dd:88:23
Fingerprint (sha256): 24:86:77:94:dc:b5:ed:02:3a:e9:60:2d:54:b4:c5:62:72:7e:86:9c:27:66:c9:30:aa:fb:37:6d:ed:7f:3b:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate musicaafro.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for musicaafro.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

musicaafro.com

Other certificates including the domain name musicaafro.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for musicaafro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISA9Sv6RhHvV9hefM/LsTC89IyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjQwNDQzMjRaFw0x
OTEyMjMwNDQzMjRaMBkxFzAVBgNVBAMTDm11c2ljYWFmcm8uY29tMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwPxAZ+x3R1SLHYMeRnq5g1CzRTqO2l9E
vdtRp3rQETRP0NplJxeiH/Pp46mTGxOAJEusPt5JhJXawrx4acNoPZmvaoVLWNVo
BRqnLQh5HEdFaKx5ItImLmHp1b9BkLDkLhW2P15rekOBbZz2uUDBQiHg7srh9TxT
KR1ZQBNODW7qqjUu2m2nOFq8Wf8YeoBe5yhYtf84YHqreAi8llQHXmtCZhJzrjMo
9x9UvN/E1jWylCUnceLRqwEvKOWr/ewkkbWAE7YN38BE+ZCkUl2ArmOv+AfhyDtq
JnqMf65nI0Fs7YfuS9vxd5Ble9gIApBhb3hoF1P6SC4HDHZFdQ1w7DMg13tzFwuH
h/5zPrmWz6bPwgcLQgY+pQfk/pWTIfEgWTio6EcfWfBB5/GgzxeruSDTBgmPVUCN
Xk0iaf5ad0lmRcBjJrM3ikrgAsxkdFVqXB3XEd11POPZSP65eOpjd31RFepfv8H4
7jAmaIqEJSbYNb7yAI0vYuh06fndTwcBgiAppi4xqMCIagPkXRM/3EoG3QmnL2Kl
lh/+k8eZ2JWmCbVRm+wKxAaK0HLO5tEAwTTkgqBJMjg1USO8wim6T+SB3NBdtYji
bU0Eh3pMwcqKn0VDoplvRvHD7qLyW57UTrg3QD3DnUKYFdzdvRoSOa33VgG7Uche
iWX/t45pMn8CAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhiTN
wZNiBv/IciRa7d9fpb+i/OswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5tdXNpY2FhZnJvLmNvbTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbWHLulsA
AAQDAEYwRAIgCQ1VvaGowkkhSizMRCY9w7Dy2MRHYJ+IKi6GCaVK7oQCICQDFSJQ
yusOCgD3x5WrJmGbQSCo79t4NcTZTPCQpbiqAHcAY/Lbzeg7zCzPC3KEJ1drM6SN
YXePvXWmOLHHaFRL2I0AAAFtYcu6RwAABAMASDBGAiEA/ZVF5MaWOcl1rHdXmqh0
8XShdqq31yrAzN1EZAgde6ACIQCy+OpIN70vaRWkDfvwpsZQaynd0MxqHBH8L1SX
A7vlfjANBgkqhkiG9w0BAQsFAAOCAQEAk60nH4CekyMrLduzSnimNaEej2qYZOcx
3CMogg82Q1EGyK4BKlGKzCCtRPWtOgmYEOHNWDkaW5JrjUMIppa6DD8yJ9xMYn9y
I1XquA6p1rJrA5Rfra1PnnAOg2bFzwQuEJlPy6xLes1wKQsyMYBFrTu7HL+RhyW2
DDmvY1Ix1VaZb4lQGUaESbnB3Nh5kpmYR0NiTUBvcoMyQJQtrLEhd7a6LL6mjDFy
/bxiCQ92PDKSQ7aEJ/jCZjrFnJy+76ro8zTt4EkuPI87EdFeONDn5NH0XZkKAf16
6Sn3wvOo0DBncb+BJnQKVOe09z8Lw7CyXhDMFal8MUTsQONbWSlk6Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333710544779411731087983817526934657815090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 04:43:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 04:43:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'musicaafro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787311569987413608900960867593958697699489315140716740920337458278393903487611333722316213103470310517362389576133967171865814589054724085520424963556665651915623864106212320996799701736555542199697063329737827772645834144196799313975237095524172205007780067602811310050870217314381782527765016189409667011096291809508233878875906730488096531591807468560702795678677524310823566574715632895876253228038064543911504593836395578661544861836355311315058165920871133766590690892087976977253164292329361180038929354292901897250584219516363463904031322111467513906230124743778371524370549823797468456934392847672097424430182552821903838733092400019369053818234272896510780249899242363113756605981616928893636484314666684570499938836717187088082181380673867810082816251507631038206334865002088963734285401376542906969387188780823450713516480926020649317490545098306096575977536490223882757291172738881134499567423779081321694543556471845804526996551717639802461623866711777139864754608758202950651646959786372463423263512575837293800904770564427799196058423101040412782860026381683980647232601823797349537045413405937443269983649496685705925676124314348614143886777916094630290230434280145148721958431691822505086723302180450425389456110207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8624cdc1936206ffc872245aeddf5fa5bfa2fceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicaafro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d61cbba5b00000403004630440220090d55bda1a8c249214a2ccc44263dc3b0f2d8c447609f882a2e8609a54aee8402202403152250caeb0e0a00f7c795ab26619b4120a8efdb7835c4d94cf090a5b8aa00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d61cbba470000040300483046022100fd9545e4c69639c975ac77579aa874f174a176aab7d72ac0ccdd4464081d7ba0022100b2f8ea4837bd2f6915a40dfbf0a6c6506b29ddd0cc6a1c11fc2f549703bbe57e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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