bazza.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cb:10:d4:46:6f:a6:6c:d3:25:49:35:33:9b:08:4f:6d:d3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bazza.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cb:10:d4:46:6f:a6:6c:d3:25:49:35:33:9b:08:4f:6d:d3
Serial Number (int): 417548834055472567074410618103017906335187
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:87:71:28:31:57:a2:eb:03:3c:77:dc:ef:77:bf:8c:4c:de:95:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:ff:a8:14:2a:2b:a4:24:f7:d3:35:ec:0d:af:d1:0f:85:76:ed:d5
Fingerprint (sha256): 2e:30:eb:7f:32:81:bc:34:53:b7:af:a9:21:05:78:fc:7f:79:b1:c3:8f:c6:ff:0f:03:e5:b3:ae:76:ee:24:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bazza.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bazza.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bazza.com
www.bazza.com

Other certificates including the domain name bazza.com

(limited to 100 certificates)
bazza.com
bazza.com
bazza.com
app.bazza.com
cloud.bazza.com
dev.bazza.com
cloud.bazza.com
bazza.com
cloud.bazza.com
cloud.bazza.com
bazza.com
bazza.com
bazza.com
bazza.com
bazza.com
betongvarer.ordreplan.no
bazza.com
bazza.com
bazza.com
host.bazza.com
cloud.bazza.com
sake-bc-dashboard.bajji-dev.com
hyperlightluggage.com
bazza.com
bazza.com
www.restoplus.com.au
host.bazza.com
italian-travel.com
sustainable-travel.net
dev.bazza.com
host.bazza.com
bazza.com
host.bazza.com
bazza.com
bazza.com
cloud.bazza.com
bazza.com
dev.bazza.com
bazza.com
dev.bazza.com
www.bettertravelnetwork.bazza.com
bazza.com
host.bazza.com
www.api.bazza.com
bazza.com
bazza.com
bazza.com
*.bazza.com
cloud.bazza.com
bazza.com
dev.bazza.com
host.bazza.com
*.luggage-brands.com
bazza.com
bazza.com
mootzi.com.ec
host.bazza.com
bazza.com
bazza.com
tui-sdk.joinsherpa.io
bazza.com
payment.toy-pro.net
cloud.bazza.com
bazza.com
empanadascervantes.uy
bazza.com

Certificate

The complete raw certificate details for bazza.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417548834055472567074410618103017906335187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 01:12:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 01:12:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bazza.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896340539683176718406650292749856491015127527237687574910238777194478748858118015360769028995538234528669266017998542901875225773734014843857008544668814193648235044135739026009958011129945410059504740263626304379192627628613736894760817837178356734248774651113716857834589828560269222427332238702911089633341253877948778210263897894839471244119932465917847727498248105118859988805575215134798918157703119057103431387848642413594877179781868737832008704063463662541497453578713120401592157630345396009737650243419648931887273149824418583644360121601680476824214434768270761534377714084995787707169567195306696074249514000667472800182999508062331449726791278615386861733280595047214519419570382425162381399226760106291201196600310140461107982665502968273778600688827608038624974014369578781586402348642066202524668951391371874288790536770846371797055802525675530554236907859762527318414018524468628318162923953320279502977367602707398984308370196825846295937325016981013570610938547658870913776840752972363070137104365995280576284853998341436045944535044329819518086135815468773864205834672153886112022117419086379095949845639169310010383707997353608580921074441525963044592906494113661328084110839292375602410022067720711937944440379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff8771283157a2eb033c77dcef77bf8c4cde957c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bazza.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701844e91c000004030046304402206104e87c7037ad3abaf2c10b218c1e891cbd83bcd940c5b0e79d0de2d61a5c4802202e1dfdffc39edf56d53a179e755e67099770dc63812fd7b1a145666032cbcb9c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701844e907000004030046304402205b4da3244a09078174535abe5da4fc985f2c1a980bbb86d55379100fb3c3d94d02203710851284ffe83c4fd481fae89566711ef0b82326af0b3d0b42bcf06f3a4f24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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