www.bassberry.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:00:18:54:fe:1a:b4:8d:c3:d1:fd:e3:41:95:f7:dc:9b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bassberry.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:00:18:54:fe:1a:b4:8d:c3:d1:fd:e3:41:95:f7:dc:9b
Serial Number (int): 286177596919488477480293393226583730805915
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:61:a3:7b:57:7c:1c:5d:41:98:c2:c0:7f:f4:c9:85:50:7b:cb:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:bd:17:d5:43:7c:14:1c:3c:0a:e2:cc:10:1e:b9:fe:e5:45:98:8e
Fingerprint (sha256): 18:5d:90:a3:88:d8:2a:24:0f:fb:c0:7d:bb:dd:f5:43:e7:2a:72:fa:0c:ad:9b:f0:d5:12:88:57:5b:35:88:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bassberry.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bassberry.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bassberry.com

Other certificates including the domain name bassberry.com

(limited to 100 certificates)
www.highq.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.bassberry.com
www.highq.com
www.highq.com
*.bassberry.com

*.bassberry.com

www.highq.com
www.highq.com
www.highq.com

www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.bassberry.com
www.highq.com
www.highq.com
www.highq.com
bassberry.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com

www.highq.com

www.highq.com
www.highq.com

csg.bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
bassberry.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
glsshelpdesk.glss.net

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.bassberry.com
www.highq.com
sip.bassberry.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.bassberry.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGa2XuGPmo7SU+7cQeoA
0FE3BtnjD9BZY+nnnQHwM8/hDMrbW6FlG2ebUkrD9NkruSqtkkkpU6cCwAD+J/nv
2LzwhZz6dE5SoCgXGSxstzuDkFYsRePNqelgeFmBIkfDJdzkyybVRGJLlXM5zGQL
4hssv3X8jx4T3BsdUn1FEawKyJThamhWVmftxvDG26XGjqJe2O2WltPA0e0SQqWg
sO0pYef1e7zsjykTYm6PMq/APmjMW0qVM9Z/jO/tgf1A9l6+JuN1ROobvxSj3kpw
R90Ap94c/v4/2CS/z6v2i7ABBH0lPMnqx1CIIr4FECWGnGSLTjAoOS29YfT3MS7K
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286177596919488477480293393226583730805915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 20:29:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 20:29:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bassberry.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21258684599202488825735679404422674712358807444199879130263231832112485009550435047029603524250967333578589911639505811405153567593281680210134617892234862462403793519918915579628899622556082474663745443473262180766414700690363258617336551516391158970352545989169374404076806924239581358474853663289774000109861047448916583969344622747744023623370385870361483747039033688643689811774732880563130650949888107820702347297907506410953567576182952893642552451551110131693104836593496913203759184796865357153567220705843972699787616365878818202938874955652274323248847364438311688145948791925237787220804986854267016891121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe61a37b577c1c5d4198c2c07ff4c985507bcb46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bassberry.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bb49760410000040300463044022060b0fd53557e6304a2b815d9c2831b0909c22bb442942e47987ff6bcbb3c355602206b9b76134b3b1c92d7e11caccda4e2d764acd3638a49784ef446c49db13ab14700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bb497606e000004030047304502204b5098dd1608be38471e8dbe5adc6de4dc68a91933b019e765473f6c02767566022100eac14e43bd60671bb93370cca4ded46508925ee3b9e07f0dd607b2969b8a08de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00191f07f89640bebcc5122d12bbd94003b35dd57dc045ace5b78788a6fe2f9197700ede47eea003b9c7c480a340bf808b18995eea19934b0ef664dd3373f8b6631a5e469d830e2df1c136296901ca222d2d2e4d7b20a742cf2bbf4f92d00af389e4c0e46fd5009cd6c5cbe601f550be530e309daa3229f0476d568aef67382ced0fd276c03218a322ab52d3d83b2fa64e8acc6d9c35d0376eab0c17bfceb9aca2a42af675b253be9f651fdd3e2f08c0930a13c1c58b83f6188c53209a7e4b91c7a7b0db16e16b70720465863ea9b0373e220f56fb1541bbc00abfd11ffcaa28fc2b08f243a84de1a043f4795d9165bd9177beae76985381f7072f6a54a4a9d774