music-api.musikki.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a9:c9:a1:74:a1:49:ae:99:6c:5f:a0:28:c8:98:61:62:d1 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=music-api.musikki.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a9:c9:a1:74:a1:49:ae:99:6c:5f:a0:28:c8:98:61:62:d1Serial Number (int): 406224876889164630781228874752348104254161
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6d:ad:32:6c:a0:af:03:d4:6c:91:57:90:04:8e:76:c4:ae:61:db:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 24:69:99:bf:54:03:e0:68:07:93:fc:a3:73:cb:a6:12:05:39:af:f7
Fingerprint (sha256): 5f:c8:a1:cf:35:56:9e:88:e1:40:a1:79:23:32:24:4f:6c:32:2e:b9:4d:83:98:bc:2d:c9:76:4a:78:95:50:77
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate music-api.musikki.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for music-api.musikki.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
music-api.musikki.com
Other certificates including the domain name musikki.com
(limited to 100 certificates)
music-api.musikki.com
exclusiph.com
app.musikki.com
api-data.musikki.com
*.617730.com
music-api.musikki.com
musikki.com
*.musikki.com
chinidin.de
joto-love.com
search.musikki.com
docker.musikki.com
api-data.musikki.com
musikki.com
search.musikki.com
beatsperimage.com
*.musikki.com
www.musikki.com
api.musikki.com
music-api.musikki.com
music-api.musikki.com
elektrokettensaegen.de
docker.musikki.com
search.musikki.com
*.musikki.com
losappcloud.com
app.musikki.com
app.musikki.com
api.musikki.com
api-data.musikki.com
api-data.musikki.com
api.musikki.com
exclusiph.com
search.musikki.com
*.musikki.com
beatsperimage.com
musikki.com
music-api.musikki.com
api-data.musikki.com
api.musikki.com
app.musikki.com
joto-love.com
exclusiph.com
app.musikki.com
api-data.musikki.com
*.617730.com
music-api.musikki.com
musikki.com
*.musikki.com
chinidin.de
joto-love.com
search.musikki.com
docker.musikki.com
api-data.musikki.com
musikki.com
search.musikki.com
beatsperimage.com
*.musikki.com
www.musikki.com
api.musikki.com
music-api.musikki.com
music-api.musikki.com
elektrokettensaegen.de
docker.musikki.com
search.musikki.com
*.musikki.com
losappcloud.com
app.musikki.com
app.musikki.com
api.musikki.com
api-data.musikki.com
api-data.musikki.com
api.musikki.com
exclusiph.com
search.musikki.com
*.musikki.com
beatsperimage.com
musikki.com
music-api.musikki.com
api-data.musikki.com
api.musikki.com
app.musikki.com
joto-love.com
Certificate
The complete raw certificate details for music-api.musikki.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISBKnJoXShSa6ZbF+gKMiYYWLRMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjEwNjUyNThaFw0x ODA4MTkwNjUyNThaMCAxHjAcBgNVBAMTFW11c2ljLWFwaS5tdXNpa2tpLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANgqP+46DHKBMRypfXRIPHDd HzOh9rmojZF3CPZixb85sApcYvAoRITD5ZB4wCxysYeMi1q0pby41AxQo9HLeJ1+ kBNBbGCeKZvKxDQOiIwSuj6x0G34rZSMgTPD3WksvsHkEFDVw5yBV8lofga4Px2A godWudcP1SSi/zuAU5MuDqsknDheLBxLHUy/8vRuW0vtmWCz3ODm0EdE9gj8rRac EKh7QJVzBR0JYsRcgXpUFG+RYStPBVjdR3t51zSMomqQ96MjfS+OiqorIs8VXRE/ F3Cmy9NfZQ3W76LB5Euhl/pFSnuEkL8P00VaQw5iNjBa45Mm66yjsjV/xZlihy0C AwEAAaOCAx4wggMaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUba0ybKCvA9RskVeQ BI52xK5h29owHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzAgBgNVHREEGTAXghVtdXNpYy1hcGkubXVzaWtraS5jb20wgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AFWB1MIWkDYB SuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABY4Gv5UwAAAQDAEcwRQIgQxmkAOa0 U2hEXS49uVMzC4QeZr+MWH9hOEBhhlOOlEMCIQCC62KPUyzlBCAuLWYHH5voVktp 4wT7nXWijgfhRFqrDAB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4 AAABY4Gv5TQAAAQDAEgwRgIhAOQRW6nZHSTyJgP6KRY9CLiNS7jBA9o8TNPWXLtF BitDAiEA7Cd4JTTMWWdcwdqNI4Wl0C5HV4imQ04xfoC4vbYtyP0wDQYJKoZIhvcN AQELBQADggEBAAQ6+Wvfr/WQkP4NCf6dvYuGs/sTAceI9LWvRiqEpK9VfcuBtYBo YxrSy29OLPLh2trCJcCywuBZI+eg0sMNpRSgzxLOqP+tnmiU5XCiytXHJMkEgiGO 2mGpUpio3h6+3snuw93k0v/EGvtow2FZZx95DfaTwMyTU1J3nqj/AUMHrvhYDz3k sKAgtJGm7g3kRauBt+m8kc0TOto0fEv/d7qqNKHQam18mff+bL5F4i1edW53X2we 0aj1mpud0orGoMRsKiR1fcieq8Mw118uUa6OrOF2aaGw/5MUtyySm3Sc/31v9xSQ fBM1ruE/wJcsFigHFIbz3ZLOYg7H+kK6bvw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Co/7joMcoExHKl9dEg8 cN0fM6H2uaiNkXcI9mLFvzmwClxi8ChEhMPlkHjALHKxh4yLWrSlvLjUDFCj0ct4 nX6QE0FsYJ4pm8rENA6IjBK6PrHQbfitlIyBM8PdaSy+weQQUNXDnIFXyWh+Brg/ HYCCh1a51w/VJKL/O4BTky4OqyScOF4sHEsdTL/y9G5bS+2ZYLPc4ObQR0T2CPyt FpwQqHtAlXMFHQlixFyBelQUb5FhK08FWN1He3nXNIyiapD3oyN9L46KqisizxVd ET8XcKbL019lDdbvosHkS6GX+kVKe4SQvw/TRVpDDmI2MFrjkybrrKOyNX/FmWKH LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406224876889164630781228874752348104254161 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-21 06:52:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 06:52:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'music-api.musikki.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27288307990439015544633861749722050795121826535594749446904687338702281993017812611514400403810229942603993033491671687211974035605372655603994672411987139806859639567858926608666943966190126323440917730249887091738394967136292707043086962242076073150852838033932750917547953698171681016958243656003631894210535144620315623795430685473362921624501001474086416745232718241316001490833114104988353835084718168244674959253788119075463432700320813861627334723387027906616709128935544057857470973568777231041134028517064563552419915047700859698933984117827585098584786816433228497123757203183579449645774891854931494602541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6dad326ca0af03d46c915790048e76c4ae61dbda . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music-api.musikki.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016381afe54c000004030047304502204319a400e6b45368445d2e3db953330b841e66bf8c587f6138406186538e944302210082eb628f532ce504202e2d66071f9be8564b69e304fb9d75a28e07e1445aab0c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016381afe5340000040300483046022100e4115ba9d91d24f22603fa29163d08b88d4bb8c103da3c4cd3d65cbb45062b43022100ec27782534cc59675cc1da8d2385a5d02e475788a6434e317e80b8bdb62dc8fd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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