stereofonia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:97:07:12:b0:ce:cc:4a:f6:54:13:54:ab:9b:6d:be:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stereofonia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:97:07:12:b0:ce:cc:4a:f6:54:13:54:ab:9b:6d:be:29
Serial Number (int): 326191257662792110393644815068739849272873
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:34:8c:2d:2f:7c:09:67:71:49:06:86:d0:7c:ba:9d:7a:a6:f3:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:a1:44:58:ea:05:fa:39:0a:ef:fb:ab:c2:2d:26:76:c4:21:0a:ef
Fingerprint (sha256): e4:84:83:ce:0d:95:4a:b9:7d:4e:11:19:e1:ec:a1:8c:f5:34:47:e7:41:32:eb:fa:d6:9d:f7:d7:33:7a:ab:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stereofonia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stereofonia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stereofonia.com

Other certificates including the domain name stereofonia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for stereofonia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAydSA0A2OmsOyvYvrVcFC
XHCvq4oPYY0Fdz3vTjNeQnQ5nS2EtkoVa4GRW+AAX7dD3Rl0PBkrZ71Ma2+AYN/a
E4Pu+bHErYza8+vk738pOjiBb2QDY9gla8fsWsZZLy37uNzk7fNgrGgQTyKoSpra
Mrc3xZAcO3T4RO5bFy5qNhlZcouyb6EMSm9VxsZk6dyWuh0D7NlDDrkFhTz9Zog+
xvoHqteVQ+qfGq204ogNDSpu9bcCwn9L78tZkejH6+oyzKuFsR4LODs2/cAF4A9Z
wrBKb7qjQEIpEjy803+8OTXlLC7CT22wKtN89gn2VO6t/MhFe7WKfwzu7wWk+Tx6
YiRsr2ZBq03zuF6bd/y+Of/R6PyrPV5ZWvnityWaGqRfWbQITTZ3GAurSaVodk0k
ZwIfSR7y00ZaGbX1zB/k8IdvHxdOtDpdKiyLEhHCOkQmZt/BlRStKF1ODcRUio9q
QnJ8PuovALZjs8ZyXclqXnhWPx7ATXbpBLdZW+n1t6uZkO8cQW0MMMHsA2IOmnrs
qJrhE66v8Sa61ROD+fD8YPa+voV3HivycFmgQ4RfcgMI93u5PcX+Ma3EOVLCFjqu
AszndnSBSOLpfdPTuobN2VvW0iowCptC5z/H62GQnWGCDLNDHuJMFUDd6AGh/OGf
hDuPdqwYmpm4OYYC8jGiAb8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326191257662792110393644815068739849272873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 16:21:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 16:21:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stereofonia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823394931562045405059753385992718945165954617182089758666543080434340011848167205791284355083907975506830179581834406896571280472981980865857454570450824074523919147997226040189961209232997292659232403036015493037254204476952637140080720470642738453291236806293404771129565300298932068419924625551890747555241999080237762145751008127194274324993523227631025398522866753754897229373041585758640572876352765727789602268910105507060858729152015052414376257882020759201322433523995851051217905939954780743754717101801096676338555302706831492601968827011986227050365449299930732220073157371560884903864319010669701301623623668566672439794922131948728223606971524672650601810021601814389877742620128497339462303005845574586936732071578186505959690702800127589608758239457808672332574195196944635018779688445416702917867549734336556517292749078278847763628939135923372358372831703014045586677710851267510343262282422312066263971204467151009285803065210256208433708686229086734471832401295518765650994922085537759539196277512535524621082273874601040601574438722865664961512976842319054438362142177942444028390459239631201546098442647864196544435538326419165904655899043256166797979654699573734844300184249597625435061402895862701281092174271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c348c2d2f7c096771490686d07cba9d7aa6f305
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stereofonia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d73bd94d20000040300473045022100f448787c14b70cedb4e5bc2cb0bfbbdb2651e7e45723e9334cc2ad739aba22e90220575d0cd50501645f0f0df88387e30d1dec1bc75ed1f51b8d03223c53f7fb05a1007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d73bd92ff0000040300463044022028eb8c6d5c2893beca7da8f188dc34157f0096610cfc42323a71a321a8731d9402207dab9f8c6b020f55a045ea281d8e471fe0c5309a97183151d35469b9cd08332d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096f5ab1fddc9045fae6a3b541605494c314c1272fc9dad00fa2ad9fa5965e42dc5c26f44d1f1b57d8142970116fa81b54c6063f764fe4f551c208c1b9f1c8e3b18501006ae4aad295efc287dc17dbab5d3086a9291336d1b4829a571fc3b2c9eda27680c5d19c05ac9847aed45700a9bea536325bf7b9d83e60ab0042144db2fdf9db9d74055e35d78339fbd4514bb107f90d8f1e45c950bd4bca4ecea0243aa820329023a2ec2d221149c8d963c6219ceb8f70d6ace37406bc5397234da2cc01a15e7bef60895dc73843499986223acf26373838273abdad4fbf8ebbcd5c37ec576ecf6da8c9bf9bdf351dde9c48cb41204e2d7970f35af0b6dad1bc80eb29e