www.bass-time.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:0a:d0:a6:b6:72:bd:eb:71:d4:bb:f1:71:2c:19:e9:c5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bass-time.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:0a:d0:a6:b6:72:bd:eb:71:d4:bb:f1:71:2c:19:e9:c5
Serial Number (int): 428770157979421919040456652763805448268229
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:fb:fd:1f:ad:8d:01:46:14:27:cd:f3:b6:c3:39:30:43:66:21:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:eb:4b:e8:d3:70:a7:60:69:ce:21:9b:d9:bc:70:b1:54:f8:77:e6
Fingerprint (sha256): 08:4f:78:70:40:a3:ee:ed:54:a4:8c:47:ce:50:70:52:5c:2d:62:26:2c:e1:09:ee:0d:eb:0e:89:28:1e:54:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bass-time.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bass-time.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bass-time.de
www.bass-time.de

Other certificates including the domain name bass-time.de

(limited to 100 certificates)
sync.emrtop.de
www.xtatic.de
www.wayonaise.lima-city.de
www.master2011.lima-city.de
www.bass-time.de
blog.bass-time.de
breuers-gv.de
nightflyer.lima-city.de
pokemon-go.lima-city.de
xdzudyhtqynjzus.bestseller.app
kdefansite.lima-city.de
playlist.bass-time.de
www.no-n-a-m-e.2ix.de
www.shop.bass-time.de
lutzkr.lima-city.de
shop.bass-time.de
shop.bass-time.de
www.bass-time.de
secretfilms.de
skane.lima-city.de
datapoint.lima-city.de
mxxthi.lima-city.de
www.bass-time.de
www.bass-time.de
www.jmteam-dev.lima-city.de
alt.zirkus-arcobaleno.de
radiotools.lima-city.de
www.bass-time.de
www.fischerfreunde-hagelstadt.lima-city.de
ferienhaus-wolkenblick.lima-city.de
www.nebras2017.lima-city.de
stayatsteve.lima-city.de
traceleung.lima-city.de
kalmiya.de
fight-star.de
bass-time.de
shop.bass-time.de
signatures.architektur-noerthemann.de
riotcoding.com
www.presse.schnittlauchgang.de
shop.bass-time.de
sinclair-schneider.de
pammerich.lima-city.de
www.griela.lima-city.de
sirania2.lima-city.de
shop.bass-time.de
krobtv.lima-city.de
www.fxr1990.lima-city.de
www.heruinband.lima-city.de
bass-time.de
shop.bass-time.de
rechtsanwaltstock.de
www.eulenkunst.lima-city.de
www.notvhaam.de.cool
wawa-the-duck.lima-city.de
www.ahnma-event.lima-city.de
alan.hu
www.mgrides.lima-city.de
playlist.bass-time.de
www.annafrey.at
teamroyal-mino.lima-city.de
www.shop.bass-time.de
blog.philipfrenz.com
www.r1pp3rs.lima-city.de
blog.bass-time.de
bahnbus.4lima.at
fellmuth.lima-city.de
www.bass-time.de
gnorfbert.lima-city.de
www.alpinecabin.lima-city.de
www.mgordon.lima-city.de
schwer1n.lima-city.de
crazi.lima-city.de
shop.bass-time.de
timwalk.lima-city.de
shop.bass-time.de
stiftungneuewege.de
www.shop.bass-time.de
www.dimalive.lima-city.de
www.fambachwetter.lima-city.de
daijoubu-forum.de.cool
www.mausi1973.lima-city.de
playlist.bass-time.de
playlist.bass-time.de
moserdennis.lima-city.de
12hp.de
pokemon-area.lima-city.de
programmiererbob.lima-city.de
www.shop.bass-time.de
shop.bass-time.de
pote.de
www.archiv.zirkus-arcobaleno.de
fb.computergott.eu
danielreinhardt.lima-city.de
www.bass-time.de
www.bass-time.de
www.wasserwacht-bayreuth.lima-city.de
www.bass-time.de
mdezvyoqimrzrmy.looktool.de
playlist.bass-time.de

Certificate

The complete raw certificate details for www.bass-time.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JDPW+L3lD9auPMOZNoX
mcYvaISdTO8rqbFAxyB+E8thdILfX1GO9XBfuSsK2ljwqxjgp+EF1v4Gw1LgTNlQ
myjm+LUa1wbxulK/qN5s46mm4Nmr0dKH4+XeHqxeHCUm+6UA/ldTez04ryIcB4YE
toL7xkyRbUKxfKp4rZ2Mw6p4ciFbe1bS84NpbvNDRgHExFBqj9X/u/DrQa/Cx6Kk
n/3IOIZByLqtgJSSpKm6fSMOvCunYgh4jqSjgmR1LuuqsJEOaLxW36I/1QsJpk9Q
1FKZJGuuTdibZCdGqSzD43ls+gqIwOMQlM7OuaieYRcY1tFydLZdNFnni/zHZYDp
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428770157979421919040456652763805448268229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 09:46:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 09:46:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bass-time.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27338882343041635704435332819836466520718850015727337986679193355253824281259085394938352355371745103171002892261903672058580468773857933252127210964821236983321778989008376881345549300921753241442950417819931201647335938852393861371183132393121483714263129231199971868125427686308916782934013522639890864653286675153440240947802438133113183860132084614859141639484378612770106812754727682934872909712771598341741700007971708203083126978758042202458735946933732785501686473795070359543546865965982592622198972427659005809344527270322639570595118725241745141052136412739563997397432914135444505801185075627386751478211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eafbfd1fad8d01461427cdf3b6c33930436621bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bass-time.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bass-time.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001631102fed8000004030047304502203b5d1e18403ba29ea0db416535f581b998aa37ec5be7681b904f239e730f5f06022100f717bf5a99af7775944a6e0132b77f9ac17e75109804428cfef5b7811ac2b6b80075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001631102ff2d0000040300463044022058c43e76f720006bd962bce6a6eb7b817e28f6a71a301af37fd5f7e74ca18af502205adbb5d77434710a8143f933a27d2c6f81aa3e4a2ad2204cec2888e0fe1cfe63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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