www.stereofonia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:13:b8:09:2e:0b:9d:05:c9:05:06:f4:ab:03:f5:e0:26:7e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stereofonia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:b8:09:2e:0b:9d:05:c9:05:06:f4:ab:03:f5:e0:26:7e
Serial Number (int): 268046848382585669775831967777057614603902
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:0c:15:55:c4:91:82:18:72:ba:c6:aa:31:a8:95:d2:d3:ce:e1:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:82:f8:59:24:1c:56:04:1a:68:14:c4:e4:0f:f5:29:75:4e:49:46
Fingerprint (sha256): e1:e1:f6:53:c3:54:de:ac:47:cf:67:64:a4:39:d6:d3:77:4f:ab:b1:95:2c:8f:0d:7b:33:e6:05:f3:83:19:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.stereofonia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stereofonia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stereofonia.com

Other certificates including the domain name stereofonia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.stereofonia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISAxO4CS4LnQXJBQb0qwP14CZ+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjcwNTAyMjBaFw0x
OTEyMjYwNTAyMjBaMB4xHDAaBgNVBAMTE3d3dy5zdGVyZW9mb25pYS5jb20wggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCuHi5nqq9q9TTIcJPxlkZWWlRi
kfN3NUUDfY5NW9x3lz1wzLnLXERD6B2sR8+U+TtUgk43Ot8GfFisv/B6Zd8I+q1F
YsrR+k9cAHM0EHR53IwOIfankG0E3KbKQ0li18R6hLI9WiBxuhvl+DtE/AeytS+I
T0I9jHd/7qsiwnRfWmMlaF3w2tjwT+bmHC3vj+vjIxoRSRkfcYi4ClGL5geTmHzg
53MNDXiaSGTkStYtfZEFmTXxdvH/3f1FudhlStkmIytfUvq9u9FDq4vlCFnrx5KL
DwfJaPkHYu6qMV7dMzKC2uuxucjWoK2u94Y7nbCJl5Ap1f8b30DyHVcMAxNUxB65
QIxMOyHm6vY9p0d2v2FxJWvPqSChnIu9W+t7n/uE2wClDF+r/K9/J4pAaGcMLLnj
NcOxwE5DxNDH6V9mydioOWL39BTXu6YvgFV6ecgQkivC3s6BHOgDpCt8uMGDtK+Y
9W2tSnugQF2f1dxFiTpznLrj3Xl4RWV3jaI/7ErcqVO0xH7kfOuk7tiesDPrQIPd
Da7pTsxy4ObElozw48Ono6ovv5NdrKsCS1Wo5w8Ap4/JYE2pr82iXrvbeGtAud5B
fY57ew1fX22j9RCe8MjvRzkMtjLWu+F7g13nFputA19MmsqLvCXRGaZ/aR3jlyeS
PeLXU43yfvH4KGdglwIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTrDBVVxJGCGHK6xqoxqJXS087hoTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5zdGVyZW9m
b25pYS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE
AdZ5AgQCBIH1BIHyAPAAdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb
/gAAAW1xUCWTAAAEAwBGMEQCICWj+2BWr0PS2aMWr6qmy8biGtU5A6X1IL6wfms2
tHlFAiAqRzBqgZa48Yh1R1Psbmab7kfRGKSaHtnprd7PKKTUTwB3ACk8UZZUyDll
uqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbXFQJYUAAAQDAEgwRgIhAIQL7ArS
JOAx4OAR27riXdnZ7ISkra1woiXty03LHdVkAiEA6lqUXHacaV/dRI7qxMHQSEJR
R2ss53oV6vGxn7AK/zcwDQYJKoZIhvcNAQELBQADggEBAIqZbMAycOoL9zMJE1hS
4BI27ue9GkHqjpsdyW0MuV4sXDW9CcvNMd/RRRDAXljLUrZizOnE+OEp5NFITXKb
rWg1ddNXt81LqvwDZyBctDhIUCR0s4rPRWSWIXtXocxUBoxWiefiSCyd1iKaxbWx
bfdxLmCBi1YvSZvKy1U52xeyLuIT5nT72XrmXZp3LxDw9UaufTykcnmgEre4ddAD
SlrVh70eshbBUSqYvs60ooajKFHSMSWoZ7UqaDKz2LnPPyls5iEKcbgswsPFSXcv
HYUDF78EHAtGQ/z5dhUTjBiCkzpFMAZFyyQcHR8veRVbeh/qT/D6TfKHhHI3AhVe
2o8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268046848382585669775831967777057614603902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 05:02:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 05:02:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stereofonia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710339039852623140857096509368587716403011358550549821699231282078225406989331757710964169238762298103847929737857729699768505415307209943479581076751183098853731621872471509186623828805373193746729805311369896845234556040809734275933482614181892324729943861706910037188993636615715991639016664738520791840765896100096311128917431965385772441465892815626290541449776939277348956155271161253856111781265643372733735506553348510678672850144089081636007662574231708461494758067980499957420866093727068600541242379361783804169944113183002369057054603350004938303111083516238789545432431861231722185098203580704624591403852635653375633700279729054885903777622386534663093675989248473992963300882875406314587499236629275036910721240047999895101760056415630170070956375318462601005661122823553515812401104656954563185118670720074495494667146744359413450706135223603551825534402259948319143008682062176091539442023355286039935177266739009906331836913147150982155510432133077933869946356535541654133890831593263509567569209461039534648598555623413400789647213636011422712878588765159905218453130041141271168356126764812340366526819730429789776549661696822302931421303558274817984127353191124283491940201952890295339411001957890389726336606359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb0c1555c491821872bac6aa31a895d2d3cee1a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stereofonia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d715025930000040300463044022025a3fb6056af43d2d9a316afaaa6cbc6e21ad53903a5f520beb07e6b36b4794502202a47306a8196b8f188754753ec6e669bee47d118a49a1ed9e9addecf28a4d44f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d715025850000040300483046022100840bec0ad224e031e0e011dbbae25dd9d9ec84a4adad70a225edcb4dcb1dd564022100ea5a945c769c695fdd448eeac4c1d0484251476b2ce77a15eaf1b19fb00aff37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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