lyric.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0a:c3:9c:c5:12:a0:bc:aa:fa:29:6a:1d:c2:e4:01:86 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lyric.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:c3:9c:c5:12:a0:bc:aa:fa:29:6a:1d:c2:e4:01:86Serial Number (int): 14307957514874684354056038674866635142
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a9:da:ce:7c:13:c9:53:23:97:11:8c:b6:e0:5a:54:a7:ba:bb:7a:8d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 02:7a:45:19:00:37:07:6f:b5:51:d5:51:66:59:ec:34:6c:77:e8:b3
Fingerprint (sha256): 74:6f:98:ba:59:19:34:86:ab:50:82:0c:61:bc:97:96:6b:97:95:16:99:c0:fe:43:db:6e:ba:56:ce:cb:40:4b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate lyric.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lyric.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lyric.com
*.lyric.com
*.lyric.com
Other certificates including the domain name lyric.com
(limited to 100 certificates)
groove.lyric.com
groove.ehlinks.com
groove.simondata.com
groove.robinpowered.com
stay.lyric.com
groove.swivl.com
groove.lyric.com
groove.kiva.org
login.lyric.com
groove.ehlinks.com
groove.jebbit.com
groove.jebbit.com
groove.adpearance.com
groove.cloudleaf.io
stay.lyric.com
groove.kiva.org
groove.trustarc.com
branded.grooveapp.com
groove.g2.com
groove.uber.com
groove.crossover.com
groove.trustarc.com
www.lyric.com
lyric.com
internal.lyric.com
lyric.com
groove.g2.com
groove.robinpowered.com
www.lyric.com
login.lyric.com
stay.lyric.com
groove.adpearance.com
groove.kiva.org
groove.elastic.co
groove.zenreach.com
groove.simondata.com
lyric.com
groove.avidratings.com
lyric.com
groove.lyric.com
groove.simondata.com
groove.cloudleaf.io
lyric.com
groove.simondata.com
lyric.com
groove.swivl.com
groove.lyric.com
groove.zenreach.com
branded.grooveapp.com
lyric.com
lyric.com
groove.g2.com
groove.ehlinks.com
groove.simondata.com
groove.robinpowered.com
stay.lyric.com
groove.swivl.com
groove.lyric.com
groove.kiva.org
login.lyric.com
groove.ehlinks.com
groove.jebbit.com
groove.jebbit.com
groove.adpearance.com
groove.cloudleaf.io
stay.lyric.com
groove.kiva.org
groove.trustarc.com
branded.grooveapp.com
groove.g2.com
groove.uber.com
groove.crossover.com
groove.trustarc.com
www.lyric.com
lyric.com
internal.lyric.com
lyric.com
groove.g2.com
groove.robinpowered.com
www.lyric.com
login.lyric.com
stay.lyric.com
groove.adpearance.com
groove.kiva.org
groove.elastic.co
groove.zenreach.com
groove.simondata.com
lyric.com
groove.avidratings.com
lyric.com
groove.lyric.com
groove.simondata.com
groove.cloudleaf.io
lyric.com
groove.simondata.com
lyric.com
groove.swivl.com
groove.lyric.com
groove.zenreach.com
branded.grooveapp.com
lyric.com
lyric.com
groove.g2.com
Certificate
The complete raw certificate details for lyric.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIQCsOcxRKgvKr6KWodwuQBhjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIyODAwMDAwMFoXDTIzMDkxODIzNTk1OVowFDES MBAGA1UEAxMJbHlyaWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V27BCIsdRdxDctMChKDBxFf2ZHqMIyw3OARh8QghURW8EU2ickbApKeWN46 IPyBy5rWDvMsYj7vFMo8BcSSvcvwiOa00a3Omnn4s8z4e8s77uwwuLJ7WMBZjjGX DDJvaUdJot+7o2JBDw40Jo/PJoS8QM27S3zqSllhmT/tl6/xw5Tbtrxfp5pPsOXX ZRWgKyCoVlE0sg/9/6evdZGCM/bIBwdmhrghTa4YFhyXQFAoAG7+ybeUTvYDaRhI qfE/r1NYS+DuwpDJm02KlP6uyoN03rkb+7VVBHkGsLlLidEd3oWT+Dnm+WZSMDSB Lmqzqi9YzYVhe3T81B/6H4aVzwIDAQABo4IC8DCCAuwwHwYDVR0jBBgwFoAUwDFS zVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFKnaznwTyVMjlxGMtuBaVKe6u3qN MCEGA1UdEQQaMBiCCWx5cmljLmNvbYILKi5seXJpYy5jb20wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmww EwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB hiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG Kmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNV HRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDoPtDaPvUGNTLn Vyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYaYniMwAAAEAwBIMEYCIQDHPAmb4k+p lSYbGVSzR2eZlTzgc6N91+zIqHqL9E0huAIhAKbnHmNamirdGGBLxtzTgBjsZ7q9 wXI7VdIU9XWhmMm8AHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoA AAGGmJ4jlAAABAMARzBFAiEA33LfxyIyNUwh8ys+SJn5lpRtAgYK34PKaLaYFX/D wLQCIEtvKTTIa5Zs0IBR0pfZDbpbXNKEBpMgPlTCnr9XGDSLAHYAtz77JN+cTbp1 8jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGmJ4jSgAABAMARzBFAiBl24+GWizI 3qZnOfQ0QU9bYrLHympJyylmC3zDFrIbKwIhAJy6/XlQGY91BhtE5RaJNDEhjBcB d854QoKh27oYrUlfMA0GCSqGSIb3DQEBCwUAA4IBAQCmaaRqYS2RgUtKMnaXCTal qFydvtiXN+B19JoeHuEIkuOW5vBp4s3MCQ2u0ijpceZsvneiX4LCXAl9KnKwoxuK G8YMZ7ZXzpKZ5dye/eoa+QA15vbs+tW8PjOuXupLJY3oQzoNOPGPvfNlMoXflspP Fh5Pb93K2ugqpkMsVcoNj9vFwznKEtWEkULq/oTGF1TqTMyjcTLwgggyUv81cevo rIiSsI6gkvoT1GFiFf2PxaEt3pfEMdcyxMN02poZtEhL26DShqz8Q+Qj8gOjA6p8 KR/xXgH4SWXR4Bd3LTHw2pFlDkZx7+uWjd94j13WuvakwVDphvmlaCAM9fPvwyb8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V27BCIsdRdxDctMChKD BxFf2ZHqMIyw3OARh8QghURW8EU2ickbApKeWN46IPyBy5rWDvMsYj7vFMo8BcSS vcvwiOa00a3Omnn4s8z4e8s77uwwuLJ7WMBZjjGXDDJvaUdJot+7o2JBDw40Jo/P JoS8QM27S3zqSllhmT/tl6/xw5Tbtrxfp5pPsOXXZRWgKyCoVlE0sg/9/6evdZGC M/bIBwdmhrghTa4YFhyXQFAoAG7+ybeUTvYDaRhIqfE/r1NYS+DuwpDJm02KlP6u yoN03rkb+7VVBHkGsLlLidEd3oWT+Dnm+WZSMDSBLmqzqi9YzYVhe3T81B/6H4aV zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14307957514874684354056038674866635142 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyric.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26430025985799942409318017924882680714728619140859192476597880840913968055646426058824764462305201365953467763865564318528590059044998299932276671196892447826684960218528482242109433280905977433859602059679346747818165130217280517832838763169356002428303984606427107143137415370374904588105565535321205662691446763994046785249996446027715212500760000414555449189849450761712032120350327535944350737354567785394792095689201507675224240544330819345272873093048533101648490896228146087623607974975350358885682863462746990401555551477791569717614779207105009509773549799288984200418956697212926093699645846046112055989711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a9dace7c13c9532397118cb6e05a54a7babb7a8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyric.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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