cantante.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bf:43:9a:73:8d:0a:0d:9b:18:f9:ca:c3:49:c9:4b:5b:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cantante.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bf:43:9a:73:8d:0a:0d:9b:18:f9:ca:c3:49:c9:4b:5b:28
Serial Number (int): 413532936042025423467954261710708427938600
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 09:d3:e3:c0:c0:10:2c:0e:32:47:4f:6e:72:c5:ba:2c:af:f4:5f:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:03:e2:f8:9e:8a:7e:91:e7:46:fe:70:3b:b9:54:78:30:1c:c3:fd
Fingerprint (sha256): cf:d7:7a:87:68:eb:6e:41:dd:7d:3d:0e:a2:0c:19:6c:6e:0d:5d:50:d6:9a:d7:bd:bc:00:83:8e:e8:21:89:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cantante.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cantante.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cantante.com

Other certificates including the domain name cantante.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cantante.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413532936042025423467954261710708427938600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 21:40:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 21:40:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cantante.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674606907090048016100999140488559652144500308273862488368726654543117726692189951199037883030245632556506107875463358380067839883015664041900910455334917212604246163384300938777941102226856644127848564119357946469197569310243067887136076685712707109957998513077126565970890664773079657895798577490015098738907620154703592040547692467787077827660802332983046178236911183721459830319378782759227470035515325593091787288622159366170552186865587354140468094429140887784990201931746048576176890896983147638112839852808557393123349689354200080296185693909677049572341899752997868316034868256584120230272806730435691412770080963668420434991111662060674527263492023696704987333226472127154594212881497290464030556019813219591345371981233523137177177522259405654009719064480024155804850718501828239815477124178396210840510164976951058630851279711113105907819981472507352911093994168745091732660506834976135722469775319050959203695843615613597200006539096130188168208597483327557740441702056753235405641002913161048698483183397798825654956962482063492008679371840048465024151795267803729537187831990130386961409897799975626012116837385779185036415432418962980884537196059556477149927473605829830211037766343432932272668679940006231478894263817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09d3e3c0c0102c0e32474f6e72c5ba2caff45f35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantante.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d23e1df060000040300483046022100bc3aeb648683ee431e8da15cd4c542b4d718dc3206d5ec7cf2a01727ea698ab0022100d1b27fad93d93f30404522a1d3b7e8c7d124d49c2dcbbdbfa7bf3ede7173cc7e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d23e1df010000040300473045022100e656f2705908a62214615584355f9cda95f0ce280e0485d6fefdfb9004a4f38f02204868158a83b272486930d422fb7f5c545581e8c9029c1a52c04dd15976daa120
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b6e2cd4fb9bdf14eb37b6a2b5fc4c98c786866419bd1fb3ce6d069090e3d47473ace62433dbc3e6d543e016df83f140241645fc8fd6ece3580eef2bdd1cfe288551c665aac151c2a6249c90f3b6dd2ec8e3c1082b1ddb3c4b710cbee60fdd6f59cb1eb73a20b1fd19c2b5edb389400535d2026ec87a972891bd2fd70b3905fb17e25d54b455b3725c9edad232ecc5993297000c083c46a950f0beac0bb1df37219bfe7b29901462a5c09c2421b2a4cdfa016737f9c8b48d813cb9ded2aca97a299f2335253f26c990ac05361d47815dc3fb1e662135a23e66360681c22d45f97c3da7019619dfeee3cb0328d91c4f7d55651079d7d041352dcd56ca963d5034c