www.lighthousemusic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:25:3a:1a:ae:97:f2:da:48:8b:20:17:7d:63:fd:0b:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lighthousemusic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:25:3a:1a:ae:97:f2:da:48:8b:20:17:7d:63:fd:0b:33
Serial Number (int): 314130107798263414483765537776570015222579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:d4:63:31:a0:8c:fa:e5:96:a3:93:06:7a:56:a4:b3:06:08:9f:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:b6:24:27:25:2c:0d:94:f6:24:e5:90:c6:8c:f3:ce:10:51:62:3d
Fingerprint (sha256): 7e:71:19:bd:83:31:35:1c:2f:62:05:22:2d:b1:32:c9:c1:02:15:06:12:a0:8f:aa:8c:bd:41:c4:9f:d7:c4:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lighthousemusic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lighthousemusic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lighthousemusic.com

Other certificates including the domain name lighthousemusic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lighthousemusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314130107798263414483765537776570015222579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 14:09:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 14:09:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lighthousemusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716809192584684262435664527456383017480186140341966051059006901581492860596100011126084967826151189096765447741253229751997842082895425780719005494885634759368949662016944022966420335922291858153836624125150918037496105078451746401007039142351215491760849254817488589480251033880118478616878189000241713120788602589911438238658821179186307995632920567997767349344783066483960231212310201790323480960088427219474896702611021935223439360780111138151797312750892252973305046271719017976220093597353177022769892435308762424894455406645074320972506693064806814888126098392586227703985727666120266706007597205518104386145584747367539570488405477016580777461668413857140694771773621027638299406944920136030756177532151940888885865449433589996723651694549477594857616600606885642156083982899722930069171749403634046378699816941964514854900809283944807535666419268263872429503452789427377209686366422353614913787947885535342829254884552439128735600394077288630101786506239769127964098682436407966357665605027942002300147275080757319724386214958765097261299328615234855182413802292954667842639491193235012231778648639233785558899827991137714414740694846286853027386484662681750188103743063653510468944607810379299218560653296564567150385451361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09d46331a08cfae596a393067a56a4b306089f74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lighthousemusic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170684c17130000040300473045022100fa08b559ee34c11404180a06c75960f249c649b927ba485a58b686c116dac0af0220390048650a8f6cfb9b81dd9158660ad9fab76a8064a0e0e278783d3041b4c0a1007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170684c1709000004030046304402207e5e09365460fe719e46c8115ae9345abd6661b54944374b5dbe2d045e4c30af02206555240b67e2c54c5ee3f2406eeb6ac759f22a62ed625c7c248d60fa7ae98741
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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