*.soundud.com

- YAMAHA Corporation -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number c2:f9:da:2d:37:6c:bc:0b:00:00:00:00:58:08:64:36 was issued on by AffirmTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

YAMAHA Corporation

Organization: YAMAHA Corporation
State / Province: Shizuoka
Locality: Hamamatsu-shi
Country: JP

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): c2:f9:da:2d:37:6c:bc:0b:00:00:00:00:58:08:64:36
Serial Number (int): 259167538247762888165395598526934180918
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 83:20:6b:9b:34:df:61:b7:cd:99:2f:37:07:78:18:6f:95:d6:b0:ce
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 3c:c7:c3:83:37:08:be:88:be:86:50:59:76:cd:4d:b5:51:38:99:3c
Fingerprint (sha256): fd:59:ac:39:c7:43:a1:22:52:34:92:8e:40:20:3d:3d:81:25:1c:a8:bc:5b:cb:57:4a:ef:0c:ca:cc:f5:c0:57

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate *.soundud.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.soundud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.soundud.com
soundud.com

Other certificates including the domain name soundud.com

(limited to 100 certificates)
service.soundud.com
link.rc.soundud.com
*.dev.caption.soundud.com
*.soundud.com
*.multi-caption.soundud.com
www.losparketos.cz
*.caption.soundud.com
*.multi-caption-dev-nict.soundud.com
service.soundud.com
*.multi-caption-dev-nict.soundud.com
link.rc.soundud.com
service.soundud.com
service.soundud.com
pankajgaikar.com
whos-that-pokemon.es
*.caption.soundud.com
intranet.lrusso.com
service.soundud.com
www.apricot-model.xyz
*.caption.soundud.com
www.andamp.at
service.soundud.com
service.soundud.com
*.caption.soundud.com
eupayments.world
*.dev.caption.soundud.com
*.multi-caption.soundud.com
shopirai.com
*.multi-caption.soundud.com
*.multi-caption.soundud.com
*.soundud.com
*.caption.soundud.com
www.apricot-model.xyz
service.soundud.com
*.soundud.com
*.caption.soundud.com
*.dev.caption.soundud.com
link.notiva.dk
*.soundud.com
*.dev.caption.soundud.com
*.caption.soundud.com
go.soundud.com
kingchiller.com
*.soundud.com
*.soundud.com

Certificate

The complete raw certificate details for *.soundud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q/xCuuPos+YlrpYzwA1
HJ9WIjqdySgtvvp4kuE2fWdNCRvCggoPcV/LbZwB0Nem1r83g6MfN+7Oyr2snKEv
4RKamky/VVxZx+d4pE4sUjWXJ7spmaQfkXmE1B+rwGFG6RCG1Z4oqADV63hNAuVl
fWgBFcjPOGn5ickOlzws5+0MS5fXqmgeqGwfyw1o9xKG4JtJNYOdQHRwIrDClNBl
Qv45QuNfMk85BpZv4jbgD9zojh17kYIiRVxJw5flvjvs76ol18n4eqSJ28zfkIoa
m/Hn80dFi2KwjLlN0Jg8jkUgOE5bGX5T8cJ7wy6YKqkLI4tl4ewo2+l/jbeHZ1pE
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 259167538247762888165395598526934180918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 05:21:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 05:51:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shizuoka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamamatsu-shi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'YAMAHA Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.soundud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29626523385234415440138848481077431767358683438218728039292560050168046397223337256018892686095135812394928232203543266685082428242121054139888305865462554499780757845989353383259714337309077846409483019199023512854898778361343098148181223492290670506338340890739562286236624478599024188782035839266939246244172727242471489769750184070207747416208565085104460590849539196846055844063062803485323828795476090503333469875159263744912062286419103341509837682957073087958273712057635390524380104433834480055099203397312648068982064688705122262021567073607057605635901817073155090781739534864283054519995863948429981533357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83206b9b34df61b7cd992f370778186f95d6b0ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059bafbf5cf3edcef6a1f455168abb4fa96a4a5d6e737ebeb881309725cd8ce485f411f51fef63c7a223617e6b9de15491818032abeecb5a93c58af62edeab3f24a3eeac572c583e034f15bf1b52e0c5eeb20e0fa50cf7fd22ff0822494114a26a5406ef066b02fdcdaf99c3e93f801756f7f0e2b1753d8cca3dff4ea54fdd2d00bcc76ed1a2bd0554f35e3706d23bb6beb376ea301fb884062cf89cb24f6ee13a93083351599a12d412133e3be61cf50031acb1653aa5a172027aabf6dbed22814599dada7228acfa50f99fe45ea7b61e529e0b343529c3c3e4bbb7fd1859f691b53d1f354fbe1f663079658dcaae05cb73c1f75eee0ee69385f109a0a3530dc