www.lighthousemusic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:48:b0:7a:b8:90:3b:4b:4b:be:a4:50:e9:a2:20:ea:6d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lighthousemusic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:48:b0:7a:b8:90:3b:4b:4b:be:a4:50:e9:a2:20:ea:6d
Serial Number (int): 311454986481678901213240251282035832842861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:1a:0c:2b:7d:31:4a:79:07:3e:a6:e3:c5:e5:da:3a:fd:c6:3b:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:94:df:51:ff:aa:cf:e7:8b:a4:d1:93:42:ee:ae:a3:15:5d:c2:d8
Fingerprint (sha256): 63:ff:8b:3e:d4:05:fe:fd:83:cf:61:90:93:8f:d2:58:85:b4:cf:de:be:92:d1:ac:b0:0d:24:a4:6b:c2:9b:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lighthousemusic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lighthousemusic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lighthousemusic.com

Other certificates including the domain name lighthousemusic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lighthousemusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311454986481678901213240251282035832842861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 12:32:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 12:32:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lighthousemusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 943444737957281725418483530063984044700221284754624951412216346718073707986487098903110452410902005305696931336773138262245647665359099762756857047668597284563625137662154475901403119043905050362212208302104979623484232518968395550909710792052170182077621766741629663207507261695615931580631038913803228713998810161106207643970082496055777875941295243254455967224109311019145675703667888259094743202121458721993861900238424275240754454238666758412016190255091445152480744823010013073774554050521499476077704360715006121494023026135445828888249709396099023092918802625955622242154160086866288783146690118419656069973041112740363282712093751130505371821145361857232816586106572637601550757692801142346735174060908341901336096278312907875376785238145422517229039467801617852017853732218217089572846676883055245186403817378263601929459026446740467407473951142690654765260065739352637068343519025549466629167427337592204306425502129012739182895392885019031473224498333955026566149034381019107376210031738561445806628353503853915659205767006142648807301755997569345002536236756418242733210534117068117934415229299071284850700077304158747626288449693943551830537973862998597210147636465991147937810482266450245076101946568750024432379082097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a1a0c2b7d314a79073ea6e3c5e5da3afdc63be6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lighthousemusic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f28a8e90b0000040300483046022100ff0289e8bcd76fcb0ee552da3a856f9161c868f822a8335a65a6690b80bdcb15022100fe5b7939402d1350d0e21d29eac12d1ee8c46a29ece391155ff74b9853289552007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f28a8e8f4000004030047304502207400e15ca1ad980fe8e277715543c37e355831bad37de6349b985fe54d589421022100d295c32feabcdca8ff948c9a8c66f5b9e6d9c559cc7629fe37bc2119b9358ab5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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