spotify.marix.live

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number f7:67:62:d0:e6:73:60:5c:5f:49:fc:d4:0f:ae:81:4c was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spotify.marix.live,OU=Domain Control Validated+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f7:67:62:d0:e6:73:60:5c:5f:49:fc:d4:0f:ae:81:4c
Serial Number (int): 328856125762223302462976906822561988940
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 76:61:9e:c3:39:33:60:bb:b3:e5:0c:0d:92:7c:0c:f5:78:02:2f:08
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 8c:ff:a2:16:21:f0:5c:1d:bc:04:61:f2:8d:49:5b:09:56:bb:7b:a8
Fingerprint (sha256): 2f:4d:bd:53:84:55:8c:3a:c1:25:e1:d3:dc:90:36:d6:e9:a6:00:ca:a0:f6:4a:06:8f:7d:c6:6a:22:68:14:d3

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate spotify.marix.live

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spotify.marix.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spotify.marix.live
www.spotify.marix.live

Other certificates including the domain name marix.live

(limited to 100 certificates)
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
livio.marix.live
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
weed.marix.live
monika-gruber.lima-city.de
www.dev.marix.live
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
cloud.marix.live
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
marix.live
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
virtualworldhd.lima-city.de
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
dme.einsatzmonitor.de
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
www.transnet-group.lima-city.de
onlyoffice.marix.live
spotify.marix.live
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
plex.marix.live
sni209110.cloudflaressl.com
www.g-h-c.lima-city.de
sni209110.cloudflaressl.com
server.marix.live
prtg.marix.live
sni209110.cloudflaressl.com
cloud.marix.live
apfelsaft81.lima-city.de
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
marix.live
sni209110.cloudflaressl.com
sni.cloudflaressl.com
marix.live
sni209110.cloudflaressl.com
server.marix.live
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com
www.r.combatarms-game.de
plex.marix.live
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com
www.acare.lima-city.de
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
www.shop.marix.live
sni177508.cloudflaressl.com
nhabbos.lima-city.de
sni209110.cloudflaressl.com
www.antikwerk.lima-city.de
sni177508.cloudflaressl.com
sni.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
marix.live
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com
weed.marix.live
rdp.marix.live
livio.marix.live
www.firsttekno.de.cool
sni209110.cloudflaressl.com
prtg.marix.live
sni209110.cloudflaressl.com
marix.live
sni209110.cloudflaressl.com
sni209110.cloudflaressl.com
sni177508.cloudflaressl.com
sni209110.cloudflaressl.com

Certificate

The complete raw certificate details for spotify.marix.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQUHA5+Gt01sXebqJtmi
KmxVSbGC4OTAjGQHp2iWyYrOBd3I1xfc4N7kO4HFUFDKsfWnrDUC0HenpisEEX+N
skR11KV6AeOIdMEIOT2JoWiRE4utHl0MZbKh1wQ2OKk0yRHn9BaIa629xL2kCnEn
Vy+lCfXKmFY9apzJz2K1uLkuz3CjB+D8rej9d/LlJZFyCaap19T8/HbbWLtgA+Yo
7AVknfSyVc2U4vbsJ8T+3mcjUFSTXrdELOTzlC3p5SFqz58GPzCBLzKx9xQ57BjW
Cak1j2Hsp9E/6hAQuqIXGzauu5wT5keMqN5Bgr/fYkYvg7wRBAMA4ihhm7v8tOTW
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328856125762223302462976906822561988940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spotify.marix.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23861518741446603849693037561278694906023402967256352215374146676822899875994338423672752056621555032342916916123961876083927236169542815360971141469291684527044145336217892129514702211667082046270000747101768263087130663256129981005807858570286119584825969010690951073917820459930521681143120942977436167651968882579482480071730365522683240088262317867859156052375666270433670683846707093819159127030021034143338094342461568508362242668503679315916875955336716715581455449618228301400911556961451588305685706218847834049199130779711058551024283216431940831983434129879442182171031198742515215036326531473305502013091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76619ec3393360bbb3e50c0d927c0cf578022f08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotify.marix.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotify.marix.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166e890e154000004030046304402201a612f2655ab6355cf7f6470ea8675246238baaf21571c4e48e0e45e4e724e5a02206a263f2ed0bd71d3df2c0ace47dcb2e10a0bff19928dd5d8fa93dd0f0514942f007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166e890e195000004030047304502201efe325bea399c1b025b6330b8baa80142ddca2316a93d01fe51d09ddc4bcd7a022100fee633a740de217f02555e357eb9b559c1f6a061a9cf8db9def292f1ee973003
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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