www.musicaafro.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:b6:6e:7e:96:95:84:5f:68:b1:c4:e2:2d:d5:ed:b6:92 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.musicaafro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:b6:6e:7e:96:95:84:5f:68:b1:c4:e2:2d:d5:ed:b6:92
Serial Number (int): 345629095640153941667710638253697007466130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:97:ed:2a:ce:6a:ca:21:4b:07:c3:74:4f:bb:a6:90:c1:50:42:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:cf:bf:aa:0f:bc:ec:ed:44:98:2b:d0:da:6e:b5:ed:15:12:df:4c
Fingerprint (sha256): 50:f8:cc:22:ad:60:6b:84:0d:d1:e5:e1:da:03:59:88:40:19:8b:b8:a2:10:e2:6b:aa:05:d8:46:cd:86:1b:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.musicaafro.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.musicaafro.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.musicaafro.com

Other certificates including the domain name musicaafro.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.musicaafro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345629095640153941667710638253697007466130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 12:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 12:39:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.musicaafro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728781546332679264059143542867740123392984623472039028862813026769160694247494287774912525231608354698349892411467660226434169629988212575215099807097412025256794105235047152714398722931641869461848519936738311476823869285644089215422140172940268126436640717173986690065715046842580441967342212379130547441166218522539227215648595780080595479537011956670590521803075692666822253214966613535572265851112425532454616358168426625381880708420079088976375435261283069712810063008747625679255221834662541133836962329087241673379204037135466745849080217465765560651441387813824456546820437405791635125319362641402347015808264853342738115370789118016322760245668599669209201955754065417889034186409794722920159389235527712008643881061937182889826209355883301114336668223837567772495702899510480713480854009666668417244950816476529569980886815760812987573346932429007683435868574607109205079683896484129331755244929634667706629424339975750510276822000608805767610334315981738871566144035570582605533443200511448086509235831416720036540013766144936826399129734395891976868662012569868322289926922362830139582243625820948977598318120628236986332801947571017603147468400600271375323589657595332688224307837267089889764166938879688075844597212467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f297ed2ace6aca214b07c3744fbba690c1504247
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicaafro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169aac6ffd90000040300483046022100b01fadbe672715802293a41f662c59a5fd5331908c270c48a5668b73a1ba7c1f022100d4b7a5bc0a09c5940f7e582952b9b219dafe63be4d8166ef6d9666d0efb4c14c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169aac70023000004030047304502202c50f4c9b8fe79ab2a0114f06957732e70679c571b43854e1014cbd68870e91b022100a9ec0fa45958bb861bd07cfde6c63906987bab4c6cea0021d04d333b3e45920b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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