*.songs.id

Issued by R10

About this certificate

This digital certificate with serial number 04:77:e7:dc:9e:4f:2e:9c:34:42:3d:9e:15:7d:36:ad:18:19 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.songs.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:77:e7:dc:9e:4f:2e:9c:34:42:3d:9e:15:7d:36:ad:18:19
Serial Number (int): 389250942573862024332611666071493070886937
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:ec:f8:6e:0f:25:21:39:2f:a5:78:ea:b4:0a:4d:1a:2f:b0:26:a5
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 01:38:4a:f2:96:a3:7a:e8:04:15:47:46:88:fa:7b:a6:82:09:60:8b
Fingerprint (sha256): 27:05:90:9b:22:99:cc:bb:08:09:24:7a:5c:9c:c1:9b:df:7c:1d:7f:91:87:ca:90:83:79:1a:e1:d3:7f:f6:38

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate *.songs.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.songs.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.songs.id
songs.id

Other certificates including the domain name songs.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.songs.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ6Wq23LnUnsr6SFUg/C
CQXDvCacxoCtiUa7vOqkyKbtA7bmutPvs1c8gQn/XUWJYMcBd6n4a52AQYzU4cFH
8gVHuHEBg9vy8qi1/60l/JdXFfwYsNawi7wmswfrWx4umhALAV+NCNzjuqzS1RuD
ExgkJBSCfVUDP/2BudUE+rTIYWbjxaSFqvCRIXws6AB4SMR2iMx5r3HIa6CIvrYp
LR5L4NXZ+0BHsZeFtXFuRkQ8IKyKdJ6eMqQglT1kh9lW9EuBBIzHrs2Z/HfmDk7A
er6u6R+3muqyUsAXN5+/ZKWs8uwX5w3E3rI45FFiIiNa3VA9FXilFgsDtYZJEkvk
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389250942573862024332611666071493070886937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 08:44:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-14 08:44:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.songs.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19266425285134908571300431424579465585699387440443777770594793890229619546137139299939697582465638304783140853176159310499883725336066210670332572446185305798498191823825594737879373578567215097995036323294228846900407318828451976722740167559129772080358340240101355757589103156268564134294815702828874274471977011947128137144682227636332915852602989754794009427349661848030770336649315515786953276560174574674166447442459707129511851109900119664643212017487007319141939148596891745533003662642050302001567198487852078417109707018376967288027246867004515321831464690323435278729780586033488731545280444626627256378481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8decf86e0f2521392fa578eab40a4d1a2fb026a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.songs.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songs.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190206edb1700000403004730450220362b63bc07437361aa885961045af05f578ee20a108ebc91db13651cdbf22ca5022100d8561eb7c1f99cbfd1e6cd28422f3c3345472e333bbb725877d4c4f0002db36f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000190206edb4b00000403004730450221008c23e441b99b7c04ad57b0b09bdb4dc26dde3a47f610ebfd2af6eacada1ed3a602206c219163445e69b3af2efcda9b355c1630a8db63be3d047ba08aa4b608a016e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00817baad4f04a4247b0bd438d28c5b3b09608852150ea18930add54e727c7aa1ec4eb11aafa72dce03a5250d71369ba5cccbf06435b31e07cc45dc41c9542926fdb514da24a06e322b2894e08bce82c5dc51d79710d31a9841cbfce1f87c3ddf8abdfbf6c1ed5c08412e1b9f97a9ab7864b88f90481105b8454a84cf51f55753c7a30ded24b6c1dffebf38d4038fc32f2d8a7c4bec4041069110be2df31d746d1b44d41fa7d75a067d89f5389f38ab2d4f79a2b0347641c850e295a91b145eef998f96b523e0d2763366a4644ddcc285181e442de85d290abcfdb209299e9ec0ed0d09cc94640a494486c986c6df134d978223a70c941b83a28ad01d97fd34296