musicaafro.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:46:73:e7:4f:2b:ad:76:b1:c3:d7:90:43:c9:db:f6:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=musicaafro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:46:73:e7:4f:2b:ad:76:b1:c3:d7:90:43:c9:db:f6:84
Serial Number (int): 336292626283240038360364952000634824685188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:f2:fb:57:f9:60:8b:b1:33:55:5a:3f:61:fa:dd:ea:5f:bc:43:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:99:87:a6:a8:ee:23:a2:ea:5c:fc:6d:98:fb:d1:0f:5b:2e:21:61
Fingerprint (sha256): 6f:65:26:2d:ef:7a:ab:2c:6d:71:2f:db:aa:e2:e9:dd:e4:e5:69:f1:eb:62:b6:3f:fe:4a:b9:75:5d:1a:ca:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate musicaafro.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for musicaafro.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

musicaafro.com

Other certificates including the domain name musicaafro.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for musicaafro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtDY1PHjkaP5IcBx2urqW
KUggv+ksl2ykbj7pVOWH6OXVmVZdarbNqN/IPE9SjWRHS9yZoLIETS5apBZLKVyF
V2mpoMYDsek9z9TwrCm2PLsz+jXb+XPuvuxX0SpFjzNFdVDIazhoq3FWRHftRswg
NueuKlS4b0Cgd6O/SAO0bx4ecqitn7sZnQH5Zv1yY8Z4+E7YWRS/5oOdc+EbPUas
dTGczT7ENAGI/WE1thAfcH2yxL0RPYPWYwXETZ/ihzerHIMJ5yLtFyxLCxy96453
zqMRf6Mzs5+8swtKpX6ORzhLAcFENYtRMWZoAH8Xu/N1bXvJ9eA8U2yY4dZE78Gx
+raKmn52U6/LzpE22yTUeRg3ilprgAlLKqF+1vaTC3CnMZ3TpQOgPdc5uw2KZfru
Kf5n0q8polurVW+YwVfx9b0PcJXhnWUczw+67BIFff3E7F7HY3f+/n8kHMcraAWh
XMnKW7nQ0WWH8oospjYPh/wNKNnGyreApBbfHIBq0Eu2itO2jESg3IDBQQX5OErz
gsFIV5z72YvtK2Mgsk3o/9mukl3Pb8ygCXfGh7cL4e1bXSvfY6v9bKMwJtuBRs8W
n3FOL9K/YqyraKwlvJb33DgeSgVrnjZDejiNzcJ8deiC034IUTXNeFq2bICGEZR6
CwgwOIfyKmMVxf3/LJCVNW0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336292626283240038360364952000634824685188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 23:25:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 23:25:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'musicaafro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735199796141695467590484722451235879744665118892708713743341167660799699178009051786173634131549158955146849220018804490051615404626082999081376537869172430344853400328160884671508676788588940023178203508599454684179230536516059821245917548667592440718611427717215682686354418124331695262159184030015561418207082257089136290148767776573846597070445680195862511645727734702096020756063200356770512475393151578884645358184706387730950573656997291936579184254948374656783598105525370279449719209232513121926454702368481739830775735765699138258030160488564684039807861235402324162928919175283026401638441870433676677160569272133279145775658925621697845333805685479845798626980786417507303245457077380723677256249639904151116438685212088173820183306968028291090452954577091239250213457305563575540525676867062131518284790762621627793458802784121282020563428483935854638858931260148271950911186635661401870176925964996955452484662224803318409227571404494052027354073080646151120455284261311755933359861161423449906975782617928589764941614560390258583928046043538304438650960615372686748917217535877637207742174232613042567698762462168499743122137715095841403950625788244102951846750961501375108325839850333634044598631596201076352867448173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ff2fb57f9608bb133555a3f61faddea5fbc43dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicaafro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ebed9865e0000040300473045022100cf26760bab8a635b84f39df5b38b4880a2c849705a20e5a263452e55c0bc45b002207a9c78adddcb06b7a6c224dd9c59b6fb85ac7f1398fbd49c65e589d269db9f0f007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ebed9867800000403004830460221008274cb34589b7fa16ea0776d64f2d4ff92e711b076c4c384e44e5bd5a433144a022100b2ab5c361a1604755a5f5c15184cf14d7a5f83921da50715d5f065ffe291631f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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