vivazmusic.com
Issued by R3
About this certificate
This digital certificate with serial number 04:16:ca:22:db:22:00:f5:1f:1a:9c:d6:00:c9:04:71:db:81 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=vivazmusic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:16:ca:22:db:22:00:f5:1f:1a:9c:d6:00:c9:04:71:db:81Serial Number (int): 356204040837085133032066671879511447034753
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3f:d4:b6:22:c6:d5:d1:aa:75:71:bf:3d:32:86:08:fd:24:ae:3e:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 15:80:a6:2b:83:84:7f:97:5e:f8:3c:96:37:dd:de:05:07:43:d8:c1
Fingerprint (sha256): d6:1f:26:a1:da:64:59:92:5c:a5:f2:58:56:ef:01:c2:a3:9c:93:b2:a5:26:f8:cf:7d:ce:b1:ac:eb:70:d9:34
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate vivazmusic.com
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vivazmusic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.marathon-tech.com
*.marathonitis.com
*.marathonitis.gr
*.vivazmusic.com
marathonitis.com
marathonitis.gr
marathonitis.gr.marathon-tech.com
vivazmusic.com
www.marathonitis.gr.marathon-tech.com
www.marathonitis.marathon-tech.com
www.vivazmusic.marathon-tech.com
*.marathonitis.com
*.marathonitis.gr
*.vivazmusic.com
marathonitis.com
marathonitis.gr
marathonitis.gr.marathon-tech.com
vivazmusic.com
www.marathonitis.gr.marathon-tech.com
www.marathonitis.marathon-tech.com
www.vivazmusic.marathon-tech.com
Other certificates including the domain name vivazmusic.com
(limited to 100 certificates)
vivazmusic.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
marathon-tech.com
nolapos.com
marathonitis.gr.marathon-tech.com
*.marathonitis.gr
vivazmusic.com
vivazmusic.com
vivazmusic.com
www.vivazmusic.marathon-tech.com
customsound.gr
www.vivazmusic.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
guysndollshairstyles.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
avlida.gr
vivazmusic.com
vivazmusic.com
vivazmusic.com
marathon-tech.com
nolapos.com
marathonitis.gr.marathon-tech.com
*.marathonitis.gr
vivazmusic.com
vivazmusic.com
vivazmusic.com
www.vivazmusic.marathon-tech.com
customsound.gr
www.vivazmusic.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
guysndollshairstyles.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
vivazmusic.com
avlida.gr
Certificate
The complete raw certificate details for vivazmusic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISBBbKItsiAPUfGpzWAMkEcduBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjQwODQ1NDJaFw0yMzEyMjMwODQ1NDFaMBkxFzAVBgNVBAMT DnZpdmF6bXVzaWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA u5NRTmcWBANBoxzFW7H84DZ1JjPko3yP6KxTacUvA6x4Loox2tvj2E+F1YOxfB6t ZU6WpTt9U336Updg/53yGVlL3IMyOivUghY3mRqNfKGjlKJjlYCqc1W1KAODj/jC FUpjQtXA8qd4IYFZsmQN50RGtWDV6c5uAlLWxHhyE4mfnS7HULoWKZqBp48zfpMX 4wVAVWDjc4DYOpl1u7Pm1r1MLsW1+ApwKdkbA42SsloVkQFzv1X9krme+qVAt+7u NKY7Pi0vHU2L8Dt89vyiCVKaJJQWdxHi8WRm37P5MvyQTqN5JzLOmL585+uNRN/V dbkU5VlUIk37InZ3d59lXwIDAQABo4IDFzCCAxMwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQ/1LYixtXRqnVxvz0yhgj9JK4+azAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAR4GA1UdEQSCARUwggERghMqLm1hcmF0aG9uLXRlY2guY29tghIqLm1hcmF0 aG9uaXRpcy5jb22CESoubWFyYXRob25pdGlzLmdyghAqLnZpdmF6bXVzaWMuY29t ghBtYXJhdGhvbml0aXMuY29tgg9tYXJhdGhvbml0aXMuZ3KCIW1hcmF0aG9uaXRp cy5nci5tYXJhdGhvbi10ZWNoLmNvbYIOdml2YXptdXNpYy5jb22CJXd3dy5tYXJh dGhvbml0aXMuZ3IubWFyYXRob24tdGVjaC5jb22CInd3dy5tYXJhdGhvbml0aXMu bWFyYXRob24tdGVjaC5jb22CIHd3dy52aXZhem11c2ljLm1hcmF0aG9uLXRlY2gu Y29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKxpScGQAABAMA RjBEAiBlWGIk1A3b7NS3ZqyfU/x+mAoeKwUahK+EUQM0NosRFgIgNp8mpUvOUg1W FDLf+jZthU1OB7toa4Pm+nBpTyK7ze4AdwCt9776fP8QyIudPZwePhhqtGcpXc+x DCTKhYY069yCigAAAYrGlJxGAAAEAwBIMEYCIQDrtO+qQkCbQ9QM3dU3uUcOSzCj 6glJfrH8sZx/EEz8rgIhAPg2cfBVh6+Zq0akl+sGFIP83uWUGjiHeeA3pyM9Zf3P MA0GCSqGSIb3DQEBCwUAA4IBAQC5OZAL+bZwOdtbsg4cNQvyn5BlaV9XMeboFQ00 ONbkp6bwJbDfEP+OYCPq8tsJkBeBaVdMwDhO58U2b6Pur7PKs1gRvzg/OAkhltK4 Lj7nPXhuTGBNWgeETy31Pzk7Cil5tdE7DQj0LESuFjMSPWKmd8uElHjA0u67QLPp 0+8o16CduNucxGC1kGhabBv5lJIDpGCq+Olz+NNWEPDawybX2THZcFRBcC1Mj5s5 jMqCTt1A8flobPZWQdH6uZ6MsrlruY8utmxrbfkMecarQbymOER+437waShMfM8a PeU6NsxBwNQkp33JFHN64qYGB9G/pMyXrPrZ6tbnw9Pnj95h -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5NRTmcWBANBoxzFW7H8 4DZ1JjPko3yP6KxTacUvA6x4Loox2tvj2E+F1YOxfB6tZU6WpTt9U336Updg/53y GVlL3IMyOivUghY3mRqNfKGjlKJjlYCqc1W1KAODj/jCFUpjQtXA8qd4IYFZsmQN 50RGtWDV6c5uAlLWxHhyE4mfnS7HULoWKZqBp48zfpMX4wVAVWDjc4DYOpl1u7Pm 1r1MLsW1+ApwKdkbA42SsloVkQFzv1X9krme+qVAt+7uNKY7Pi0vHU2L8Dt89vyi CVKaJJQWdxHi8WRm37P5MvyQTqN5JzLOmL585+uNRN/VdbkU5VlUIk37InZ3d59l XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356204040837085133032066671879511447034753 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 08:45:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 08:45:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vivazmusic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23679208046002011213451160590150845158150143062512146951624810617473969276160702573860258912514703651580114832082856204197941907804468891516670870933212088959834107601679630023478882868128534351745603531217058393373278316037162761915097715165744690822821251803594566017117251259079880090805568667114279447240891540529906906343412098296968837172453075605775396711749693494446920454086770901315823057409772079008172003228242044226215514407771627479021971181293499586736299732404334934680171094129863517145328946898930833150047539158316678815742313520948171953188723250237234853183691356905636481593482601936838226568543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3fd4b622c6d5d1aa7571bf3d328608fd24ae3e6b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (277 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marathon-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marathonitis.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivazmusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonitis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonitis.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonitis.gr.marathon-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivazmusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marathonitis.gr.marathon-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marathonitis.marathon-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivazmusic.marathon-tech.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac6949c190000040300463044022065586224d40ddbecd4b766ac9f53fc7e980a1e2b051a84af84510334368b11160220369f26a54bce520d561432dffa366d854d4e07bb686b83e6fa70694f22bbcdee007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac6949c460000040300483046022100ebb4efaa42409b43d40cddd537b9470e4b30a3ea09497eb1fcb19c7f104cfcae022100f83671f05587af99ab46a497eb061483fcdee5941a388779e037a7233d65fdcf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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