music.kaishi.jp

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:02:ec:92:63:8b:3a:01:35:2e:b7:76:1b:fa:a5:c7:63 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=music.kaishi.jp

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:02:ec:92:63:8b:3a:01:35:2e:b7:76:1b:fa:a5:c7:63
Serial Number (int): 324973547216664895420411057047582590486371
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:c9:09:37:e7:2e:81:e7:02:ac:0b:f9:09:ba:0d:4f:c8:4e:32:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:c3:a3:ab:7e:b9:39:db:3a:53:12:62:2d:cd:ff:e1:7e:58:c8:d6
Fingerprint (sha256): f4:83:07:07:29:b1:45:9a:15:5d:0d:0b:de:7b:75:e6:73:1e:1c:a6:3c:ba:c8:47:6f:e0:7f:fc:d7:4f:4c:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate music.kaishi.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for music.kaishi.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.kaishi.jp
www.music.kaishi.jp

Other certificates including the domain name kaishi.jp

(limited to 100 certificates)
music.kaishi.jp
music.kaishi.jp
massimomarra.com
pixxers.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
pixxers.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
kaishi.jp
test.mspek.no
music.kaishi.jp
www.parleebeachlifesavingclub.ca
kaishi.jp
blacksquaremedia.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
app-link.nexquare.io
music.kaishi.jp
supapp.in
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
www.cirklar.org
music.kaishi.jp
music.kaishi.jp
aiobets.com
music.kaishi.jp
retypeproject.com
music.kaishi.jp
music.kaishi.jp
kaishi.jp
app-link.nexquare.io
someoneneeds.abetterdomainna.me
kaishi.jp
music.kaishi.jp
music.kaishi.jp
www.kaishi.jp
criandocomahelo.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
auth.google.agnisdanceplay.com
music.kaishi.jp
music.kaishi.jp
www.runedigital.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
botanycoempresas.es
music.kaishi.jp
www.nompilookyere.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
criandocomahelo.com
starbreeze.12traits.com
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
www.icgsrl.eu
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp
music.kaishi.jp

Certificate

The complete raw certificate details for music.kaishi.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm3tcFfEjrSKxfQd7yTY
BcIBS8LTd0isoi8KXvSp5ylci09Mz0TPcpcyJiwG22xMY+A1QbfCpQHsYqvhetIR
DWmzWLJ9PDIdJgu6L8Y+iCCiW4AcbRnFuVjBLv3IXKj6sMXhhtNjCgVIxVPNg2au
3ub3+zQnpQx+6uKytFahJ2ds9WoJQ4Bk1kjoimtw5l3jpxXVFIXNU4f0lx34A6T5
8FlpvmjEIRult9uPlXfF5Qrh6+yyAprK73dsinumS4rI5Obtv30tgSZKpEYbJUPv
0vBqJCQEXWLlipBo9Cxw1j0oZ/hRJ8tyvl3cyu5yzeF1ClE8x/tqlHnmAosokK6w
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324973547216664895420411057047582590486371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 06:29:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 06:29:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'music.kaishi.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21009765892712448400090809131226834629820045134935534616331284797408889105561471071447148890140959152208431647404656350643589650341929765869184320257960221801082991137013088836553070025837621136347308476882118530620592368153363493593751834462966575629598184434227521315433725936377675582815678312882850904204041602121730022189525339044472807128621432236677320104521444180476917138895602793366246532413088469339490399901631569107737253376198519655912325730749386227947109752861701360770252251849825911800109302588772997631251284962967826882762872623138422225268299362398544633634907390848545080589662388407465847730189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4c90937e72e81e702ac0bf909ba0d4fc84e3209
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.kaishi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.music.kaishi.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170d7f2e9770000040300473045022100f01e7b604382d6a1ac99102f67e6af22b0f8a2a2cbf80b8392a7596628f4dbbc02207ed8eadfc20e4af9a1a7775c3feb2ab64ea412c794f368dc4759876904eb2e2c007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d7f2e999000004030048304602210093e7d4b270a453ffb575c35eb8d0a78e6efc613ba805cf2740915337caeba240022100ae3766535f6e11f2183bd1b64311fe536f3c218d7057cfe28d466f0f34a84066
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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