www.underwatermp3player.com

Issued by R3

About this certificate

This digital certificate with serial number 03:55:26:ea:32:4a:d2:eb:7d:f2:9f:e3:d0:cb:72:2b:94:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.underwatermp3player.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:26:ea:32:4a:d2:eb:7d:f2:9f:e3:d0:cb:72:2b:94:5e
Serial Number (int): 290312585664913874040134578731690371028062
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:74:b0:5f:18:38:a3:b2:39:f5:45:15:52:50:dc:f5:7c:7c:26:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:38:75:e4:d2:ce:65:3d:a6:4a:86:cc:49:7c:51:3e:de:05:ad:cb
Fingerprint (sha256): 3f:cc:69:38:78:c7:2e:b4:cf:5c:7a:b1:7f:ef:ba:83:bf:97:5b:5d:ed:eb:a5:05:6f:62:2e:15:76:89:ef:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.underwatermp3player.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.underwatermp3player.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.underwatermp3player.com

Other certificates including the domain name underwatermp3player.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.underwatermp3player.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAui0C6aJCrIT0sh5vxrDI
YhOfXGQiiWI23ygLcy0+F9eExtKyVx3xxtp3g0atDRIJx6XUURZOwA5Li8uOfil9
+uFanf/ux4w4jGYQ4kiKGSlUwejH9JxLwvoOfvjqMNRRp54+nO0YEB/8r9KGnNLL
ku+oZiqeSreDBWrGkqvTrNsi5m7AWsFoKp5wa5NhToGXKV8nol7eUsOzZmx63Jp0
UlDUIDfKDdZagrryHnFYnyV871PXUA8jCeCiALQuOSk853EXDnvuxTfyKGFJUkcC
5YnT8ZsOhmDj/zHIFI8t76c5TRme2DqSRucKJfc7O59OoCaD5XUvbm0rqqu2Fbif
KuEiAUo5EGH1SCMRnA+I1x7kXlzYEjRYVUxx1AGoy7Yob2pN4dN3cdr4l6NDz1Te
X5LxIbxas1Ue568RfrlPrnPQZgTsSgJJmRCgoGm33fqShpUxb2pB8zcCPCrFwzm2
RIOmzh4jBUcXlDcIE/26tgZjLjrbPPIStJytj8jgGyzM2bBd5rEZjWNSC7RgqmRA
k3/rIpTXb1f5k92TltgTqVu58p38VEr4l7yzV+HJnXi+onA8aEjnHFIFP1Tn5Wfd
eEhJ+jr48INqyd6/EtiLd+AwA8S3wfln4O3dBxPm/DYgtgwTSJqBauZtr/L4bSkh
W4+Xq2QuTHdFEQGAAJL2+vcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290312585664913874040134578731690371028062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 01:27:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 01:27:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.underwatermp3player.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759531102898173921760297344348877280764663483951841650960686086139696082423577096972662288902081615758004329676211562197819883821712595814897128865829028979188048905328957844474088607403355398106909776542031823308123232190733384722263336183939737400733746046623188866227348578383635883645554416144763186750177790481891207335670830228749815822986124001066172875921744866548026127836169020206256561608773649597789977888858966472222450981349587881925877641796575945939159028994182780015194691439660876871265749702626611981697664164517345875767300206190921418576207097222045076387395951456427630026896758559262349774723256069058876652822065747908756738615637721509617101686912487402822586057325805954101589086291177225649052702449540169709190941596687570098376615669003168023752496326118296526905843617884118155225763935872446894160408163504348465088270112737790532435710473751864412540422040295225574584898330583942125830099015707928223964894068252846905534661760579623126665250730000235820265266577952840748392074314060945109176442832793185359832787682599761817779634311944847631914225445564714060382298256149564027466450737995313363508169965983788180918520435657678218848677449484299724245339758369062195769138942591425277007989504759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e174b05f1838a3b239f545155250dcf57c7c26f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.underwatermp3player.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0973b6820000040300463044022070b2c71fe1eda0bd4bfa967d9ec89adda451a06a9d8acb1de859b270b9c02c9502205c911d2e071d4a6b2d22cb9f1547c42a473dcee5ae8d110a2d82bb289ebe228400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c0973b6d10000040300483046022100e89d005b4f760002a14e6ecc5957ebe4ee8158c2381f266769e7a4f7dbacf627022100caa69405c4721b7b9db59274fa191a7628e9769cc99177b929f0ee7db1c8a62c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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