h2oaudio.com
Issued by R3
About this certificate
This digital certificate with serial number 03:68:53:44:a7:6c:11:22:8f:06:bf:fa:2e:93:64:d0:52:76 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=h2oaudio.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:68:53:44:a7:6c:11:22:8f:06:bf:fa:2e:93:64:d0:52:76Serial Number (int): 296836906350619216911229673698327039857270
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a5:d7:0c:1e:fe:77:ea:c2:12:89:5f:cd:27:56:93:2a:0a:17:15:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 35:c3:17:22:f3:72:5f:5c:e3:f8:75:4a:63:13:16:dc:63:db:47:f5
Fingerprint (sha256): c5:f2:f0:9c:48:66:60:49:43:3e:ff:74:38:f1:68:10:ee:dc:da:24:33:f1:ac:f0:09:db:0b:55:86:83:21:7a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate h2oaudio.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for h2oaudio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
h2oaudio.com
Other certificates including the domain name h2oaudio.com
(limited to 100 certificates)
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
*.h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
*.h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
*.h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
*.h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
www.h2oaudio.com
h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
h2oaudio.com
www.h2oaudio.com
Certificate
The complete raw certificate details for h2oaudio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISA2hTRKdsESKPBr/6LpNk0FJ2MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MjcwODQ5NTVaFw0yMzA4MjUwODQ5NTRaMBcxFTATBgNVBAMT DGgyb2F1ZGlvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZH Zb3gNYba3PXD0cSydfkw5C0Gh1qM0gSudDSEWUmIyx8cam5OoZ4gcPqcD6uVOuHL X93l1bjNGUJ2v5nnt8LZKklusYVT3yju5kVtf3jNu3CV73F66q0E9oQ0NbNs1U86 Bz6NcCpa5ONReUrv9QUJsbbaKE/2ARkNQzjENTStl33xIu6EDRkufoEAOmVXtOqi FHLmTLv9kr0UaF5QfgsxG1ZiLcXPQGNQaribvtNomkQhJ6/suJPQMwYiEEy4Vsct S+635q7no9bYJp6Q+E1T+CuYTzu3gpzf9y8V4R6htAK8wfpisUlz1rXcO2hWwZjj NfJZr20TkMuIpG7pjfcCAwEAAaOCAkYwggJCMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUpdcMHv536sISiV/NJ1aTKgoXFZkwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w FwYDVR0RBBAwDoIMaDJvYXVkaW8uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7p hBZwMhOFTTvSK8E6V6NS61IAAAGIXJ1YNQAABAMARjBEAiBL+88S/wjRcPjMEV12 ow3FyZL0ZnDQkL8iroyI1DhoEAIgGXsteD4DUKukQP+ocfIAIeGOPw26HJq9d2OY OAkrC7UAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYhcnVf9 AAAEAwBHMEUCIGmodfDfVHajqgh0fK9uXVaSqZjF1FTqd/GPjpOkyIefAiEA6711 10MxFfQVtb5e64CmeAvaTmD0QvArLkrOAd2Vm68wDQYJKoZIhvcNAQELBQADggEB ABIJPBkLCQHsqMvcNe5JTkcOJpBJ0MaNCZzkDsg+flf2s9Ws0V6u3BLtPKEOvYd7 rmSHN5UOHcR+ghmcbqvLamrAKnhdpvyJCuUUeeYLMzKhMyXcjWC55iogHtnUE4Cg 4DjeB/T04OrENEK/Cr2CNEbkzYLc6SftbyTfgRrDEzD1lRotkK/sgJtBdVu9YOk2 pZEMesx+4wrng0EaQCnwNxZ2HKxh79dVvL6cdbo3QvKzvO7UNzlmi5AY3rxfE4eh RVYBokvXfhZ39mlpnhyW908jRSubKOn8Qj88aXJmxQM+7JkFQQdfu21zsvMW5BjS X7eWLFLqeXXjWclP+b+j+Aw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkdlveA1htrc9cPRxLJ1 +TDkLQaHWozSBK50NIRZSYjLHxxqbk6hniBw+pwPq5U64ctf3eXVuM0ZQna/mee3 wtkqSW6xhVPfKO7mRW1/eM27cJXvcXrqrQT2hDQ1s2zVTzoHPo1wKlrk41F5Su/1 BQmxttooT/YBGQ1DOMQ1NK2XffEi7oQNGS5+gQA6ZVe06qIUcuZMu/2SvRRoXlB+ CzEbVmItxc9AY1BquJu+02iaRCEnr+y4k9AzBiIQTLhWxy1L7rfmruej1tgmnpD4 TVP4K5hPO7eCnN/3LxXhHqG0ArzB+mKxSXPWtdw7aFbBmOM18lmvbROQy4ikbumN 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296836906350619216911229673698327039857270 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 08:49:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 08:49:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'h2oaudio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23010578888025543694368258439605728857851458669719129934534102607538736801899043507857281389618691378313550457218924615390935870360869528693439265659385337812210290657455279740944598344331934304842145312844633679262361266932802415380610987965408672672337671013619494275902031253317699928534410688960410264812390485546202896889314024214004001725881055030032585461763448090889092694278449605504938188649803046299260137482762390656838567470641273524844534768490439434885053195151072566490267714810455774157457106648925427168965184436266787980409774023314908592159168430662557372715996683286972018761214919117143104130551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a5d70c1efe77eac212895fcd2756932a0a171599 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2oaudio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001885c9d5835000004030046304402204bfbcf12ff08d170f8cc115d76a30dc5c992f46670d090bf22ae8c88d43868100220197b2d783e0350aba440ffa871f20021e18e3f0dba1c9abd77639838092b0bb5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001885c9d57fd0000040300473045022069a875f0df5476a3aa08747caf6e5d5692a998c5d454ea77f18f8e93a4c8879f022100ebbd75d7433115f415b5be5eeb80a6780bda4e60f442f02b2e4ace01dd959baf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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