www.philjohnsonmusic.roadsideattraction.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:e2:6b:bb:e3:29:08:66:a1:86:70:11:8b:ad:61:e9:86 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.philjohnsonmusic.roadsideattraction.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:e2:6b:bb:e3:29:08:66:a1:86:70:11:8b:ad:61:e9:86
Serial Number (int): 402174440247247667379148524823031553583494
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:b6:99:52:3e:1a:0b:49:50:a7:7d:b2:a1:f2:c3:8c:ca:ec:4e:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:4f:79:2b:fe:93:07:49:a8:6a:60:89:dd:81:c9:c1:da:e9:ae:6f
Fingerprint (sha256): e0:70:12:5d:e7:f7:92:ee:36:cd:72:14:f6:96:0c:0e:20:55:f5:d1:21:24:2a:8d:83:db:9f:2f:08:29:53:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.philjohnsonmusic.roadsideattraction.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.philjohnsonmusic.roadsideattraction.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.philjohnsonmusic.com
*.roadsideattraction.com
philjohnsonmusic.com
www.philjohnsonmusic.roadsideattraction.com

Other certificates including the domain name roadsideattraction.com

(limited to 100 certificates)
manicmelodies.roadsideattraction.com
philjohnsonmusic.com
www.media.roadsideattraction.com
guitarnotesforbeginnershq.com
roadsideattraction.com
roadsideattraction.com
media.roadsideattraction.com
underthecrossbones.com
webmail.guitarnotesforbeginnershq.com
guitarnotesforbeginnershq.com
milpitasguitarlessons.com
media.roadsideattraction.com
blog.roadsideattraction.com
email.roadsideattraction.com
manicmelodies.roadsideattraction.com
whatsantawants.com
whatsantawants.com
philjohnsonmusic.com
whatsantawants.com
whatsantawants.com
booking.roadsideattraction.com
whatsantawants.com
whatsantawants.com
philjohnsonmusic.roadsideattraction.com
email.roadsideattraction.com
blog.roadsideattraction.com
gethotonelectricguitar.roadsideattraction.com
webmail.roadsideattraction.com
manicmelodies.roadsideattraction.com
lessismoreguitar.com
www.media.roadsideattraction.com
philjohnsonmusic.com
whatsantawants.com
guitarnotesforbeginnershq.com
email.roadsideattraction.com
underthecrossbones.com
whatsantawants.com
milpitasguitarlessons.com
lessismoreguitar.com
underthecrossbones.com
milpitasguitarlessons.com
www.media.roadsideattraction.com
blog.roadsideattraction.com
media.roadsideattraction.com
whatsantawants.com
milpitasguitarlessons.com
media.roadsideattraction.com
media.roadsideattraction.com
bigwhizbang.com
whatsantawants.com
webmail.roadsideattraction.com
members.roadsideattraction.com
webmail.roadsideattraction.com
blog.roadsideattraction.com
beingblackbeard.roadsideattraction.com
beingblackbeard.roadsideattraction.com
whatsantawants.com
guitarnotesforbeginnershq.com
lessismoreguitar.com
milpitasguitarlessons.com
members.roadsideattraction.com
milpitasguitarlessons.com
booking.roadsideattraction.com
underthecrossbones.com
lessismoreguitar.com
roadsideattraction.com
whatsantawants.com
underthecrossbones.com
philjohnsonmusic.com
manicmelodies.roadsideattraction.com
whatsantawants.com
whatsantawants.com
www.milpitasguitarlessons.roadsideattraction.com
milpitasguitarlessons.com
roadsideattraction.com
milpitasguitarlessons.com
members.roadsideattraction.com
underthecrossbones.com
guitarnotesforbeginnershq.com
whatsantawants.com
roadsideattraction.com
webmail.underthecrossbones.com
whatsantawants.com
milpitasguitarlessons.com
philjohnsonmusic.com
milpitasguitarlessons.com
milpitasguitarlessons.com
philjohnsonmusic.com
guitarnotesforbeginnershq.com
members.roadsideattraction.com
whatsantawants.roadsideattraction.com
guitarnotesforbeginnershq.com
www.blog.roadsideattraction.com
bigwhizbang.com
webmail.roadsideattraction.com
underthecrossbones.roadsideattraction.com
whatsantawants.com
email.roadsideattraction.com
underthecrossbones.com
philjohnsonmusic.com

Certificate

The complete raw certificate details for www.philjohnsonmusic.roadsideattraction.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/j6ElXykwzNNvSzlB3X
u8H/pe+DSDrGjTKb78kCqkqO//IGmUshkRJiCJbSAtXA5etyujcCc+zRI7VHuhgb
yWHsTgp+PIIgQQpVhsbgUIJfEFNdfxJqJWfwR6AHg+BOpp0sYH7+wAmiyPDsvj11
4bx3g4aU57P1vU8XIi3nAo+SQRPu7v05ZiHedlkVpzKaPhkBywaSJRiktVOiJlhH
3kec21okAdjhntZZYGjbqthcIh9VNVvDTgiBTkWXQLGS4tTVzAxrpUuKfMLn7HCR
kABxYuRQDlCK0BLFD1D3BwYhvFQrC9TwbPeLkd9aDrm1njUjRzpyhbXr5bjxj5w4
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402174440247247667379148524823031553583494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 08:27:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 08:27:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.philjohnsonmusic.roadsideattraction.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24739244525199262739224068211742978149573077663786678118815287554142524897822187815002272606929482002095801133880348553597797995216054685585227003460751947093268773368030273209567133353884874201075562306003623409950760523847721546554080493448495724971817721545154588600971055135474768126361917857497359333077263343350675211570328731771985902800963854919848619845015587670577823285464616107150822268982897471916119075904972279294675793543040747168817718604559075664450844251865709478661840474203831335660337012548008929166579504054783093095928417183436574285180518440092508723222826578696145799452861609999291226273817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57b699523e1a0b4950a77db2a1f2c38ccaec4eea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philjohnsonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadsideattraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philjohnsonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philjohnsonmusic.roadsideattraction.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4518bf8c0000040300473045022100e3e16f4170823f5d8f57f4803289490255a3d42dd81835e8e3c87f321d0d959902201bb2056fb8837bca0cf132b8d34f171fd33ca658b726f750ca91e3b14a62fdfa007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d4518bfa40000040300483046022100c338b13c6d6982f1d34d14d83e4d2e7cf699ea49ee38a91099a08de0f10a3c45022100f4e9688945350b7943b240960ee413bc7aadcbf9fc1d88bff22e427064ca2aec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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