spectrumusic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a1:09:8d:0b:88:0e:a5:29:54:05:1e:1a:9c:d6:3f:f9:e5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spectrumusic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:09:8d:0b:88:0e:a5:29:54:05:1e:1a:9c:d6:3f:f9:e5Serial Number (int): 316135014269257018411199748249882785216997
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 20:82:54:8a:17:37:e9:a9:c2:bc:38:e4:18:27:77:1d:49:3b:a6:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bd:0d:6f:cd:65:ce:b0:cf:fb:ed:f7:01:b8:fc:6c:1f:91:65:ef:d8
Fingerprint (sha256): f1:74:41:93:95:90:54:30:e3:7b:77:f1:5b:0a:f4:92:6f:0b:39:ca:e6:9d:40:e8:67:ee:e7:94:b8:68:f8:13
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate spectrumusic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spectrumusic.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spectrumusic.com
Other certificates including the domain name spectrumusic.com
(limited to 100 certificates)
www.pax38.com
mosquitorepellant.organic
www.baltimoresportsmed.com
nicki.org
www.drinkingwaterdepletion.org
spectrumusic.com
helpkidsread.com
www.sortmatic.com
spectrumusic.com
www.spectrumusic.com
www.spectrumusic.com
swedish.bible
spectrumusic.com
www.spectrumusic.com
epolynesia.com
spectrumusic.com
spectrumusic.com
spectrumusic.com
mosquitorepellant.organic
www.baltimoresportsmed.com
nicki.org
www.drinkingwaterdepletion.org
spectrumusic.com
helpkidsread.com
www.sortmatic.com
spectrumusic.com
www.spectrumusic.com
www.spectrumusic.com
swedish.bible
spectrumusic.com
www.spectrumusic.com
epolynesia.com
spectrumusic.com
spectrumusic.com
spectrumusic.com
Certificate
The complete raw certificate details for spectrumusic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISA6EJjQuIDqUpVAUeGpzWP/nlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwMTU0NDlaFw0y MDAxMTAwMTU0NDlaMBsxGTAXBgNVBAMTEHNwZWN0cnVtdXNpYy5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDYGfY/iJqd2nMhZ9BwX++DwSIaOcxi aQjSB110l4QO2Qoo1cSf22q4yIllhxq1px7+6383kXtVP4xsGSSVUT4x9GvLtXfn aIIAUGAowcnW/cgWwgPthkAYqLkIuKuqmqlmdR3F5mYcP6ssQuqYdxknQx7eSrHk umi6OxBPbDdD22haQj0603x2v3zjJmyD5CnWd4qPehSa2041GfvgWNBLh4lbvLsG 2TrplUsvSFNuEa3NH4udowmzGSWJXgmk4ZcTKJa1uLlZ7E3idkXT0KeQrFhxSRP3 43oYHu3K4o3GI8Pb6cMTImE/1Usau+YouHE84sgSsFq4OemLoxBof7sSkiB4pinn 8DoI7SYp5RRp9Fnc9c/+ht7vvg8r3mKT3B3t8qRC0xJTVRkjmdBRmSh//nacVIne ZACbJuXJShosezOVgo23trfij/PNVaWBZcFr3n+kGiq8pxcbFpVshgde4O7sIDRk oewbLdbFn1iTJI6LquDUlC6rS3EvDwi/KxoU2tL2sTNRIi4I+LMFi7EwOkvg6e7V DNxD4ktwOPRDnOhjeVTajXn4jB2F+Y249Q9f0uCTL6srOa1YRNc+L11p6yqGU3Pc kPqOyqeF/z5IfZkxnChoE52WhPbJzv9pGSfO1F5DPAjPkgthNsqUSdAgbXdUobh4 XPPKuE8Clk8xnwIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQg glSKFzfpqcK8OOQYJ3cdSTumXzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHNwZWN0cnVtdXNpYy5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW29 49kWAAAEAwBHMEUCIH8Yr6yRa9GnhYn6PsCMIjrj5l38B94xZojw4Tm8kCCaAiEA kZ6Aah0vAyXUFwE/zWYA0l6DQv8wBxCYxTmrR/n8zLQAdQBep3P531bA57U2SH3Q SeAyepGaDIShEhKEGHWWgXFFWAAAAW2949siAAAEAwBGMEQCIGzn+QlMQ2TWoqoe JcpE3EmvWnUXOVVTm3pksHNyCOSFAiALdkSQAXhcOlN3f5H8zsVtov7tr98YQOHo rrmkimBM3DANBgkqhkiG9w0BAQsFAAOCAQEAi+Fej8Bel8KflF+y2Cmycz19ybKC q3pbZHJo5+S+ruMKlfbjsWPrc2B8PlI072VdH9c++12oJv9kb9d+dQaHCrsTotFn +QC9cP2lZ4ZGGoELLHqedAtnpQOmMM7fExc/XYoXvndehrvdd0WSLKIQfEJjMau+ UJAQRGgGeHF+juzx2OUj8TI094nbeOCam2FewQ6oGK3GMg0DJAZyYbTCTJHZfRD3 gRVjw5/r71LtqxPBifvtsGSLn6UsQOomcaAmUf4oZ53YuMKHiNiU8u5eUvneePey HC5VIftTIh4Gq5LByoBcIEsNH7b9WKs3OH3jyXyyNE3m6MN3SDtvdUa3/A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Bn2P4iandpzIWfQcF/v g8EiGjnMYmkI0gdddJeEDtkKKNXEn9tquMiJZYcatace/ut/N5F7VT+MbBkklVE+ MfRry7V352iCAFBgKMHJ1v3IFsID7YZAGKi5CLirqpqpZnUdxeZmHD+rLELqmHcZ J0Me3kqx5LpoujsQT2w3Q9toWkI9OtN8dr984yZsg+Qp1neKj3oUmttONRn74FjQ S4eJW7y7Btk66ZVLL0hTbhGtzR+LnaMJsxkliV4JpOGXEyiWtbi5WexN4nZF09Cn kKxYcUkT9+N6GB7tyuKNxiPD2+nDEyJhP9VLGrvmKLhxPOLIErBauDnpi6MQaH+7 EpIgeKYp5/A6CO0mKeUUafRZ3PXP/obe774PK95ik9wd7fKkQtMSU1UZI5nQUZko f/52nFSJ3mQAmyblyUoaLHszlYKNt7a34o/zzVWlgWXBa95/pBoqvKcXGxaVbIYH XuDu7CA0ZKHsGy3WxZ9YkySOi6rg1JQuq0txLw8IvysaFNrS9rEzUSIuCPizBYux MDpL4Onu1QzcQ+JLcDj0Q5zoY3lU2o15+IwdhfmNuPUPX9Lgky+rKzmtWETXPi9d aesqhlNz3JD6jsqnhf8+SH2ZMZwoaBOdloT2yc7/aRknztReQzwIz5ILYTbKlEnQ IG13VKG4eFzzyrhPApZPMZ8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316135014269257018411199748249882785216997 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 01:54:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 01:54:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spectrumusic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881616850487919705927629963237976754669022091380244077739094724149533177492144033346492241545339338752511152881377546920214609440266641891403607924427258961525695169732186704476349785517048790399555206137393260741730269874110123027019113935109455705451434187280165664087576485118303198501133504043673706949858259943394789519372696353276560939091737152387608996147668241163213790777260339089805823777504684656930748974767766242839459401086882869628239642072859463064291999455700977682862966421343653945365854588870123632010981046047646666634676034284364718555307051714817416183156157380714443463246772008347999562743257477573304139824478075617852285749238240146305006499404914141567226288369792965670465489298845217774660912404559354941561487105302290462784911833518004474285783131477120864287957564405995403216667366593369001092170827750164289791365970433176908651587732422967784144057919271076783752485220918610986494925889697391587239409219489810851018544319650275735856631616135034441893728974012367881649032666904988686567196851956623674032707372989854831512640780826449334115530091762647191224113726830163027357173831606353772388134187546026429327190230857468025399029852261712852281799844022638761184088085626097678302330171807 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2082548a1737e9a9c2bc38e41827771d493ba65f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumusic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbde3d916000004030047304502207f18afac916bd1a78589fa3ec08c223ae3e65dfc07de316688f0e139bc90209a022100919e806a1d2f0325d417013fcd6600d25e8342ff30071098c539ab47f9fcccb40075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbde3db22000004030046304402206ce7f9094c4364d6a2aa1e25ca44dc49af5a75173955539b7a64b0737208e48502200b76449001785c3a53777f91fccec56da2feedafdf1840e1e8aeb9a48a604cdc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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