concerts.cool

Issued by R3

About this certificate

This digital certificate with serial number 03:e6:a7:27:4a:13:43:29:11:7b:a2:c1:ba:46:8a:68:4b:7a was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=concerts.cool

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:a7:27:4a:13:43:29:11:7b:a2:c1:ba:46:8a:68:4b:7a
Serial Number (int): 339823987264394581247672482380670011198330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:61:c9:dc:69:66:2a:f1:56:cf:18:37:10:11:af:7a:1c:3f:62:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:8c:c8:0f:04:e3:9a:6c:f8:c1:36:7c:eb:0f:39:fd:ad:6c:d9:3b
Fingerprint (sha256): e9:b1:0b:af:94:14:56:f6:a9:1e:f9:00:13:4e:31:e8:ae:f2:13:1d:c2:e6:c8:71:6e:43:98:03:d0:1d:8f:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate concerts.cool

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for concerts.cool

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banesi.com.halfmarathon.events
bannerexchangenetwork.com
concerts.cool
forexarbitragesoftware.com
marriotttraining.buzzank.com
rxglp1.com
taxquality.com
thinkamerika.com.passionforpaleo.com
www.freedomprojectschool.com.shibariumblog.com

Other certificates including the domain name concerts.cool

(limited to 100 certificates)
balmorallaw.ca
34725625397.ca
impossible.ca
balmorallaw.ca
balmorallaw.ca
jenksamericatoastmasters.club
impossible.ca
balmorallaw.ca
hugabee.ca
exoniaconsulting.ca
concerts.cool
rent.zone
marketing.world
bud.world
impossible.ca
leaselock.ca
jenksamericatoastmasters.club
echuca.work
impossible.ca
impossible.ca
balmorallaw.ca
powerbilt.club
powerbilt.club
jenksamericatoastmasters.club
bud.world
impossible.ca
echuca.work
impossible.ca
concerts.cool

Certificate

The complete raw certificate details for concerts.cool in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIJDSGUNVrzIZDKXsdIk
R5PQ/v4NhrKzXqbSGYEtNRPspX9YlFFRWM5CxfS76khTBIYNStMBz0B8FGZKHP/8
mobD0ok+LFnex7m13jqLh3xVSM1oM6lyisSp1qSZZQXk7X5aMwEqF0u/vEoV9Wgx
4BPb5ShOXivzIwGSfW5sk/UWntqAGuHLd1XYWDRrkMcK/cXaV/oHOxEn+e740YcP
4bvXK5u4OMNnNnoU+OiXJJubDFRxMdrNB1Da+neSlQggs63tpJvEpXGHSb/bQ1/E
+snSenEtbhDpSy70NrNer4iJPuPNmZR13i7Ix2hM78/9FvIeBGkT1HsNVHTYSR8U
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339823987264394581247672482380670011198330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 22:31:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-06 22:31:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'concerts.cool'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22787129886182992886867526757866979525827217662546897619424455493684193477667173538077404493604763970795992873826547799791425361111756350595588466975089171605510895999290707322814537738715876577557764577978854134805721718808117146626038081475740729894872085285369854647964758786210423545624849081815581030364184162834349429297655833108137466329159320494804877269690051204707865413488889223096573406506023583401443106890762712292879748729907921555448901729435017221276456477071075099728270170720074846840402822773522073219260183749467003737926780820543102043933393811706557716033944485849501973054864726859748869084229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a61c9dc69662af156cf18371011af7a1c3f62a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banesi.com.halfmarathon.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerexchangenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concerts.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexarbitragesoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriotttraining.buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxglp1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxquality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkamerika.com.passionforpaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomprojectschool.com.shibariumblog.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187fdb50b3e000004030046304402206c3a07c41c047a115613b066ca7ffabb7b5b6e6b5057a89f64f5c4b1325d45bf02205dddc42b701bdb4c3f3898eb73be500b8aed3bcd690e72a42a1b30fc87f796c90076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187fdb50b52000004030047304502203543b6a2b4240af3f7850d56a80d6f4a9fb8ee8ba331a42df63fcff1e921a91f022100ca4eb5010ebc93aca6c9b161038d8e3114c068257ff6cba4aa40bafaad24843f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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