www.magicalmusicforlife.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:c6:c0:f2:5d:b2:91:16:94:a7:bd:c6:8e:90:8a:92:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.magicalmusicforlife.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:c6:c0:f2:5d:b2:91:16:94:a7:bd:c6:8e:90:8a:92:8b
Serial Number (int): 269087258847470245095962708840557100831371
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:12:11:8b:d7:87:e8:f7:3f:56:52:2d:28:33:e7:fb:1b:14:ca:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:ad:31:7c:d7:39:be:a4:5d:81:7b:d7:b7:3d:a8:a8:5a:34:0b:0c
Fingerprint (sha256): 77:73:c5:b8:f9:75:00:9e:9f:14:85:0d:74:1d:89:9a:e2:bc:e0:40:03:5b:13:2b:b3:2f:ba:b4:25:f5:60:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.magicalmusicforlife.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.magicalmusicforlife.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.magicalmusicforlife.com

Other certificates including the domain name magicalmusicforlife.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.magicalmusicforlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269087258847470245095962708840557100831371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 17:01:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 17:01:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.magicalmusicforlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727921647198742657041133129487588781671527600954704618031530686373566171449190486765268989658168145471713219684975044078263525697392919162412985625784258117071305792801033527225446472997171727511820789487165611882283876039181869714722917032339829077975094048835317200592617281520902038740132084876823913178998623112873759905976150559968229777327841940817907600807290671864799896370355803230207121970359350737535893174727699247443009967826032163755117681489064198963194266473215384500047084959492352488623127757461120213837442715342363616486661970620360667542481728615453563480161882167107288591893205037123797344517472746747479642019397421840919493125154203150366027443997953532931452496661597241368432700327839076031792538067526724473537071519879878465047107207010965074570643166061959318944695563632005855412972255395322988478687981502049917091373631644362992181719119607541905437633186525428569915142736611288459960600871668075872519606690284752173690851404604774990909016822693318524259342143260799922032783277896209706909648967591659988172401818754121924364800345125149408206222696945062954976103100287015645000178478950373609822249899295709324826901504353735491514441604647856339010543657742884512217391078700111464882693776363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc12118bd787e8f73f56522d2833e7fb1b14ca7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicalmusicforlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef0f8df0400000403004630440220623aa04a312dc2a863e715a0b24ab9c7be405f03fc0f60536b7c2b9745fd348602201f0919712cfbfa54593928401256505275e7ee6e965ef6ad318a93ac34bb55ec0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef0f8df8f0000040300473045022100c7cf2c4d63a6909b2b7219e5961fdd6f602c840823f8a124098e34320a48d0e102200df3cd20ea06161db9d4208b7a0ab48c86b6cd22043ac581bb451b3ae5b69aad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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