bachelor.asia

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:e5:b3:3b:3d:3b:d9:fb:bd:3c:20:bb:4e:bd:7b:ee:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bachelor.asia

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:e5:b3:3b:3d:3b:d9:fb:bd:3c:20:bb:4e:bd:7b:ee:4d
Serial Number (int): 311323407199423786744670619806963399913037
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:75:73:43:ff:bf:98:71:cd:ad:06:35:14:ec:78:18:67:28:3c:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:eb:5d:28:48:ac:7d:fb:af:9d:af:ab:9d:94:2f:91:cb:e4:bb:15
Fingerprint (sha256): 11:ee:c4:5d:95:9f:6a:69:b0:8c:c1:6c:70:03:42:4f:d4:46:e7:2e:ca:5e:8d:03:88:ae:ea:c6:b3:e5:08:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bachelor.asia

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bachelor.asia

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bachelor.asia

Other certificates including the domain name bachelor.asia

(limited to 100 certificates)

Certificate

The complete raw certificate details for bachelor.asia in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311323407199423786744670619806963399913037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 08:29:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 08:29:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bachelor.asia'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799667688652075735308660150928162404673211866502252327969360990966623752766038706559649200025541463293901248121657507625933155044797123457694797456150530915084192772963160327120238180396139602906352935112338664280165366321677426415676011374845198523325484196978148696516386254847173253428144735629929448448294737247883256123138691079835029589535639903478287377099774253501074441494573687068722958186409712081950527696635546318194602374719744438438170081319329243430655795561835880527413570471786287268329020506686203399768939444830087350651675523347473279334728025037731914550066866353070777759324973893087866607815224987623052030088880755303418354337364944328900866024917657159457174483818554849240726752324799553887150185143425720295669644586082538459093116180591423442646851731836520522987981648875634491239339962727544000400161714735086371851122253839708436078818043726089139431578182045454851269545443214077614516611511503017342584207133823156010532076040287654167045988108510368846653308796087085914084997017386492683582551022263010684739090386032861477282226471081958797908602873287030799206920264323276424218705128784175647781704093334531382327905678855694850129523318871764261014076927355572943864741164189316219242972200111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f757343ffbf9871cdad063514ec781867283c0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachelor.asia'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e2ad3d03000004030046304402201ece3f1d2fd56d507f3873d5ad17aa4963137629d711bb63fad04511e6bd8c1c02202e658346a86b64b47695427f085ac847baddbc7ec014c4c9e474ffe945beb4c8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e2ad3d020000040300473045022100e88dd874d58e05686d0203250926f68308dc8621254ff91b1984e4fbf6f73785022067fa20c668b5e2f8f882d86f06a6cecf0dbbe0dba3c20db7f1bf9f71a8c648e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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