*.iancunninghammusic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b8:ad:f1:b5:3a:f2:8a:35:c8:6f:6f:91:f6:4e:79:1c:3c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.iancunninghammusic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b8:ad:f1:b5:3a:f2:8a:35:c8:6f:6f:91:f6:4e:79:1c:3c
Serial Number (int): 411292310703093795348129713092936175524924
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:6f:00:43:ed:f0:03:85:47:0c:01:2d:f8:61:05:fc:e6:48:b1:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:c7:03:7c:db:12:61:23:75:20:47:61:32:1d:75:5c:4f:93:7f:4b
Fingerprint (sha256): 7b:e1:01:de:de:6c:15:ad:2c:a4:c6:8b:3a:d1:2e:6c:bf:98:8d:c8:08:12:f2:c4:44:7f:2c:b8:66:a6:eb:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.iancunninghammusic.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.iancunninghammusic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.marathon-tech.com
www.iancunninghammusic.marathon-tech.com

Other certificates including the domain name iancunninghammusic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.iancunninghammusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISBLit8bU68oo1yG9vkfZOeRw8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTUwODQwMTZaFw0yNDA2MTMwODQwMTVaMCMxITAfBgNVBAMM
GCouaWFuY3VubmluZ2hhbW11c2ljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMitPw0RKjzd+2tCchkIjDlaRTWcbGhjEQFnsY3jMTQsUoIhe3bE
ywVMi4c6j80/RtZ3o/bQDt5OweTBnGw3JAm7n8/go70GBdOmBh2FMfNyF9y7qThv
GHjyBaNCCGhNMl6lDdKzC8cH0f5/qAyjy8wosizcfBk4wS6T6d3BPvbhe0d4nt3S
hM/9n7naqJnhnXE/92NL5hzIOAgs0p+0HB1jOIFWpScyK1zlxVD4HeQkd9+LAV5U
CMCdABkVRhrCN/Mp3mhBgw38HhvxkIzM4JSiPF33LSyBBiGd8UaoYHE39QUpWfwa
MMzw6e0KzLnbLhFfDsqLz3MSSgZ4JO0G33UCAwEAAaOCAoYwggKCMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUt28AQ+3wA4VHDAEt+GEF/OZIscgwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wgY0GA1UdEQSBhTCBgoIYKi5pYW5jdW5uaW5naGFtbXVzaWMu
Y29tghZpYW5jdW5uaW5naGFtbXVzaWMuY29tgiRpYW5jdW5uaW5naGFtbXVzaWMu
bWFyYXRob24tdGVjaC5jb22CKHd3dy5pYW5jdW5uaW5naGFtbXVzaWMubWFyYXRo
b24tdGVjaC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY5B
e8+iAAAEAwBHMEUCIE6Y2wBe3KJc2CMZc0MhVHa4BUJqyT19ul9eIaGa+8I4AiEA
4g+JboAIrRWqdB+4x9N/Cbslnw+14Kd2ikV6ix2wNcQAdwBIsONr2qZHNA/lagL6
nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY5Be8+nAAAEAwBIMEYCIQDnqCj6dM6j1xeS
1SxZdcb9AfpvalSZSRm6e281jQmGNAIhAOkOg7atQUMroi2IaUMBMj1lSBLcib1d
FGnGf2QqxWmiMA0GCSqGSIb3DQEBCwUAA4IBAQBLwtGrj9afPL3BSMTkmMZypSG1
/5OEIfmoH1L87UUIM6WV8Suyuq21v7n0Yi46BBke6hjJs3uRKPJej1YlRCKBK3Hp
rgbcQVaJy2UQbHCESpz4b7QFIjuYik7tL6jW29jTHMqG7v0y5LCXp3yKMexWh0AA
5EPkYAiBpf05VT1w/xojLwxiiBtd7FrzHfiZ9QRVrW4gLXUwpZECnSeiacTjwlqc
aGHITXdUrXDrmGt2YVMU2YFVhsFFX4d3VdXrL5l5Cb6EOCMPCPzLuvdf2NJVP1mu
TR/jrinwK2DbVsscIlaiBvJxaOmaXx0YClpV+AOcq30D9JbmhPstetyt0OCi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK0/DREqPN37a0JyGQiM
OVpFNZxsaGMRAWexjeMxNCxSgiF7dsTLBUyLhzqPzT9G1nej9tAO3k7B5MGcbDck
Cbufz+CjvQYF06YGHYUx83IX3LupOG8YePIFo0IIaE0yXqUN0rMLxwfR/n+oDKPL
zCiyLNx8GTjBLpPp3cE+9uF7R3ie3dKEz/2fudqomeGdcT/3Y0vmHMg4CCzSn7Qc
HWM4gValJzIrXOXFUPgd5CR334sBXlQIwJ0AGRVGGsI38yneaEGDDfweG/GQjMzg
lKI8XfctLIEGIZ3xRqhgcTf1BSlZ/BowzPDp7QrMudsuEV8OyovPcxJKBngk7Qbf
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411292310703093795348129713092936175524924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 08:40:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 08:40:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iancunninghammusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333091924412172233852499213304407629059050864116563849615077317906279505904034268866909455966386988778370240872652105869278315804903766699297472637934568262424862268663747470208078867141339418970683769303523428564551176527481023217711212488553608737179939883788331324701061363371763222284066771015779437558334843695137776059508219305921471164908304247325468409398466520292410931982244200097666026583680891406041544919843335338514111096985113137987319759324043045664617493806641442625324091424653832546579411389362602779931981832133534459789843065633088849880721819151079318833610025382261489119488278731200355819381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b76f0043edf00385470c012df86105fce648b1c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iancunninghammusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iancunninghammusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iancunninghammusic.marathon-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iancunninghammusic.marathon-tech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e417bcfa2000004030047304502204e98db005edca25cd823197343215476b805426ac93d7dba5f5e21a19afbc238022100e20f896e8008ad15aa741fb8c7d37f09bb259f0fb5e0a7768a457a8b1db035c400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e417bcfa70000040300483046022100e7a828fa74cea3d71792d52c5975c6fd01fa6f6a54994919ba7b6f358d098634022100e90e83b6ad41432ba22d88694301323d654812dc89bd5d1469c67f642ac569a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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