freedsound.me
Issued by R3
About this certificate
This digital certificate with serial number 03:53:5a:7e:18:60:62:d4:ad:fb:a6:f2:e6:1e:ad:72:72:24 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=freedsound.me
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:53:5a:7e:18:60:62:d4:ad:fb:a6:f2:e6:1e:ad:72:72:24Serial Number (int): 289700579493157770958031609333755589849636
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cf:17:ef:63:d3:e9:52:7f:dd:71:68:2e:af:bd:19:45:61:4a:1f:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 84:e6:7a:81:dc:62:93:fb:62:d3:6d:3b:9b:91:f7:5e:88:6b:9d:7c
Fingerprint (sha256): 58:be:31:ad:83:d8:e6:cf:aa:3c:d7:3f:56:18:06:f6:cf:5e:be:0e:d2:4e:3c:ce:fc:7d:04:79:36:72:ce:36
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate freedsound.me
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freedsound.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freedsound.me
Other certificates including the domain name freedsound.me
(limited to 100 certificates)
Certificate
The complete raw certificate details for freedsound.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgISA1NafhhgYtSt+6by5h6tcnIkMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTcwMTUwNTBaFw0yNDA4MTUwMTUwNDlaMBgxFjAUBgNVBAMT DWZyZWVkc291bmQubWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA T0dE037lsTz8hmK+eg30EWvW6bU1r5sH1dAzg+eU5e4tPIlzYDoErjRYYvqe+CaG qYSyu3LdO7lNi327KS0iAHRtNXDzG36PKcEi52L1I/QIrv3w/pKphs6rVDazSZCC wly9BQ5iq68IzKxrQHCfx8iax8oaSk6W3jWTrUCcoMoyFwWFsgQx8d/coGk5+Z6L KOgIBt4fbTzXZKFGDVIGNPEd9BpHCaeteGGNSVV14i7/pOfBOf/mLBvrYsXd/aQr QhDI1N4unyDtzvbLjZKPUArDRnZ1/paI0EUpKnw3nbuwB0QWr6VDDZV+sjpeiYE3 r0ytxSxDbEYZ4m2LiZSjAgMBAAGjggIPMIICCzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFM8X72PT6VJ/3XFoLq+9GUVhSh/oMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MBgGA1UdEQQRMA+CDWZyZWVkc291bmQubWUwEwYDVR0gBAwwCjAIBgZngQwBAgEw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+F auvBvyiF7PhkbgAAAY+EdZgeAAAEAwBHMEUCIQD9rnSHARwqQOOirxipMrOZ1Dx2 v7HBQNycXjba1NTSkAIgaZUowMWerlBWxnXa0ZYlDXEmC+Y9pkS8nEhyez5vy/8A dgAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY+EdZhcAAAEAwBH MEUCIEVl2q4LdjdQJIkJo65qyke9qz5jE/Rjj60sdJGCBIvsAiEAi7FMoWsOdK8k qOl13lNAEvb3iPLGdETWKD+7pCJUeq0wDQYJKoZIhvcNAQELBQADggEBAGdNmhlh kDszIp271xmNaKFtfBddscgNbjGau/eKO7+Zv2jnkLcgefnCnTSMMI9XP5Iw+yIn fQu58nsd3DhXyfsWOjtR6GHrwf5c16xA078ytR/XAOv7FXVdOCsXbNZ0L7cCCF2Y CFcMDpZB9mZW8bXX+P6rUh4MC97cholNmLIQfDR8oxfrJc5gveZI3xAOtuiev+qQ sH3XgKpyhJMOoQqPk/MJKIbkYb0Jqj4ndHW5hcETBj+npRUttA3i13DQF8UMdc16 2CtXX1RGo9KbI7PHXjIYPOXCjrnMVZMj7Ypc20XW3+cdA8zWQMdSG5FRvTwFPRa2 tlfIns3nbFeNrAA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE9HRNN+5bE8/IZivnoN 9BFr1um1Na+bB9XQM4PnlOXuLTyJc2A6BK40WGL6nvgmhqmEsrty3Tu5TYt9uykt IgB0bTVw8xt+jynBIudi9SP0CK798P6SqYbOq1Q2s0mQgsJcvQUOYquvCMysa0Bw n8fImsfKGkpOlt41k61AnKDKMhcFhbIEMfHf3KBpOfmeiyjoCAbeH20812ShRg1S BjTxHfQaRwmnrXhhjUlVdeIu/6TnwTn/5iwb62LF3f2kK0IQyNTeLp8g7c72y42S j1AKw0Z2df6WiNBFKSp8N527sAdEFq+lQw2VfrI6XomBN69MrcUsQ2xGGeJti4mU owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289700579493157770958031609333755589849636 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 01:50:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 01:50:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedsound.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24276848186581524431662000068212257794453387832842367610650282870982767955053891105021873057702034252485207847846562753010888738217399385953636025148634193767284219136745626742908774720522009226373876489028441619897854184800076722675007042637978940753678653181565726720636868780161013045291828708264706826063511921218134184657506286318586070713204569785680145111274732057413222797574557056124827962701013730527300392115259474853917048594290853648404399684375508335783162965742762217048759790686320368964372829817618079609790655570519723012773271830772486096571397667290693745859401986141197669411310902890631617156259 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf17ef63d3e9527fdd71682eafbd1945614a1fe8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedsound.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f8475981e0000040300473045022100fdae7487011c2a40e3a2af18a932b399d43c76bfb1c140dc9c5e36dad4d4d2900220699528c0c59eae5056c675dad196250d71260be63da644bc9c48727b3e6fcbff0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f8475985c000004030047304502204565daae0b763750248909a3ae6aca47bdab3e6313f4638fad2c749182048bec0221008bb14ca16b0e74af24a8e975de534012f6f788f2c67444d6283fbba422547aad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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