*.iancunninghammusic.com
Issued by R3
About this certificate
This digital certificate with serial number 04:b8:ad:f1:b5:3a:f2:8a:35:c8:6f:6f:91:f6:4e:79:1c:3c was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.iancunninghammusic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:b8:ad:f1:b5:3a:f2:8a:35:c8:6f:6f:91:f6:4e:79:1c:3cSerial Number (int): 411292310703093795348129713092936175524924
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b7:6f:00:43:ed:f0:03:85:47:0c:01:2d:f8:61:05:fc:e6:48:b1:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 97:c7:03:7c:db:12:61:23:75:20:47:61:32:1d:75:5c:4f:93:7f:4b
Fingerprint (sha256): 7b:e1:01:de:de:6c:15:ad:2c:a4:c6:8b:3a:d1:2e:6c:bf:98:8d:c8:08:12:f2:c4:44:7f:2c:b8:66:a6:eb:d0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.iancunninghammusic.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.iancunninghammusic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.marathon-tech.com
www.iancunninghammusic.marathon-tech.com
iancunninghammusic.com
iancunninghammusic.marathon-tech.com
www.iancunninghammusic.marathon-tech.com
Other certificates including the domain name iancunninghammusic.com
(limited to 100 certificates)
pakysaavedra.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
mail.iancunninghammusic.com
*.iancunninghammusic.com
jacquessoulas.com
pakysaavedra.com
iancunninghammusic.com
iancunninghammusic.com
jacquessoulas.com
marathonitis.gr
iancunninghammusic.com
cbstorenola.com
vivazmusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
mail.iancunninghammusic.com
*.iancunninghammusic.com
jacquessoulas.com
pakysaavedra.com
iancunninghammusic.com
iancunninghammusic.com
jacquessoulas.com
marathonitis.gr
iancunninghammusic.com
cbstorenola.com
vivazmusic.com
iancunninghammusic.com
iancunninghammusic.com
iancunninghammusic.com
Certificate
The complete raw certificate details for *.iancunninghammusic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgISBLit8bU68oo1yG9vkfZOeRw8MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTUwODQwMTZaFw0yNDA2MTMwODQwMTVaMCMxITAfBgNVBAMM GCouaWFuY3VubmluZ2hhbW11c2ljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMitPw0RKjzd+2tCchkIjDlaRTWcbGhjEQFnsY3jMTQsUoIhe3bE ywVMi4c6j80/RtZ3o/bQDt5OweTBnGw3JAm7n8/go70GBdOmBh2FMfNyF9y7qThv GHjyBaNCCGhNMl6lDdKzC8cH0f5/qAyjy8wosizcfBk4wS6T6d3BPvbhe0d4nt3S hM/9n7naqJnhnXE/92NL5hzIOAgs0p+0HB1jOIFWpScyK1zlxVD4HeQkd9+LAV5U CMCdABkVRhrCN/Mp3mhBgw38HhvxkIzM4JSiPF33LSyBBiGd8UaoYHE39QUpWfwa MMzw6e0KzLnbLhFfDsqLz3MSSgZ4JO0G33UCAwEAAaOCAoYwggKCMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUt28AQ+3wA4VHDAEt+GEF/OZIscgwHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wgY0GA1UdEQSBhTCBgoIYKi5pYW5jdW5uaW5naGFtbXVzaWMu Y29tghZpYW5jdW5uaW5naGFtbXVzaWMuY29tgiRpYW5jdW5uaW5naGFtbXVzaWMu bWFyYXRob24tdGVjaC5jb22CKHd3dy5pYW5jdW5uaW5naGFtbXVzaWMubWFyYXRo b24tdGVjaC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY5B e8+iAAAEAwBHMEUCIE6Y2wBe3KJc2CMZc0MhVHa4BUJqyT19ul9eIaGa+8I4AiEA 4g+JboAIrRWqdB+4x9N/Cbslnw+14Kd2ikV6ix2wNcQAdwBIsONr2qZHNA/lagL6 nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY5Be8+nAAAEAwBIMEYCIQDnqCj6dM6j1xeS 1SxZdcb9AfpvalSZSRm6e281jQmGNAIhAOkOg7atQUMroi2IaUMBMj1lSBLcib1d FGnGf2QqxWmiMA0GCSqGSIb3DQEBCwUAA4IBAQBLwtGrj9afPL3BSMTkmMZypSG1 /5OEIfmoH1L87UUIM6WV8Suyuq21v7n0Yi46BBke6hjJs3uRKPJej1YlRCKBK3Hp rgbcQVaJy2UQbHCESpz4b7QFIjuYik7tL6jW29jTHMqG7v0y5LCXp3yKMexWh0AA 5EPkYAiBpf05VT1w/xojLwxiiBtd7FrzHfiZ9QRVrW4gLXUwpZECnSeiacTjwlqc aGHITXdUrXDrmGt2YVMU2YFVhsFFX4d3VdXrL5l5Cb6EOCMPCPzLuvdf2NJVP1mu TR/jrinwK2DbVsscIlaiBvJxaOmaXx0YClpV+AOcq30D9JbmhPstetyt0OCi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK0/DREqPN37a0JyGQiM OVpFNZxsaGMRAWexjeMxNCxSgiF7dsTLBUyLhzqPzT9G1nej9tAO3k7B5MGcbDck Cbufz+CjvQYF06YGHYUx83IX3LupOG8YePIFo0IIaE0yXqUN0rMLxwfR/n+oDKPL zCiyLNx8GTjBLpPp3cE+9uF7R3ie3dKEz/2fudqomeGdcT/3Y0vmHMg4CCzSn7Qc HWM4gValJzIrXOXFUPgd5CR334sBXlQIwJ0AGRVGGsI38yneaEGDDfweG/GQjMzg lKI8XfctLIEGIZ3xRqhgcTf1BSlZ/BowzPDp7QrMudsuEV8OyovPcxJKBngk7Qbf dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411292310703093795348129713092936175524924 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 08:40:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 08:40:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iancunninghammusic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333091924412172233852499213304407629059050864116563849615077317906279505904034268866909455966386988778370240872652105869278315804903766699297472637934568262424862268663747470208078867141339418970683769303523428564551176527481023217711212488553608737179939883788331324701061363371763222284066771015779437558334843695137776059508219305921471164908304247325468409398466520292410931982244200097666026583680891406041544919843335338514111096985113137987319759324043045664617493806641442625324091424653832546579411389362602779931981832133534459789843065633088849880721819151079318833610025382261489119488278731200355819381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b76f0043edf00385470c012df86105fce648b1c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iancunninghammusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iancunninghammusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iancunninghammusic.marathon-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iancunninghammusic.marathon-tech.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e417bcfa2000004030047304502204e98db005edca25cd823197343215476b805426ac93d7dba5f5e21a19afbc238022100e20f896e8008ad15aa741fb8c7d37f09bb259f0fb5e0a7768a457a8b1db035c400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e417bcfa70000040300483046022100e7a828fa74cea3d71792d52c5975c6fd01fa6f6a54994919ba7b6f358d098634022100e90e83b6ad41432ba22d88694301323d654812dc89bd5d1469c67f642ac569a2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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