bass.li

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:86:12:3b:df:36:a6:b8:99:6f:0a:72:f0:25:78:11:db:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bass.li

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:12:3b:df:36:a6:b8:99:6f:0a:72:f0:25:78:11:db:05
Serial Number (int): 306958931939432536153150592272657187724037
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:04:1d:c9:45:bb:ca:07:bb:e7:c8:43:76:7c:45:49:4c:68:9b:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:1e:b8:61:4b:19:9c:80:1e:74:b1:f3:95:5d:4d:97:93:58:8b:35
Fingerprint (sha256): 87:25:16:b3:5f:52:61:d3:e8:5c:2f:fe:92:0d:c3:52:09:88:2c:83:c0:fa:1a:76:65:66:dc:36:e9:a3:13:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bass.li

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bass.li

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bass.li

Other certificates including the domain name bass.li

(limited to 100 certificates)
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li
bass.li

Certificate

The complete raw certificate details for bass.li in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306958931939432536153150592272657187724037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 07:52:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 07:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bass.li'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930137601823411912700437233460963304317053382964244463221001698321876545529767803666662813388565964612516437528672520522093409738198424088084657489276239088577286440404976266949312980100969916525426085799124353110503013804602250384190320017823588827872812235635533581550616989086720027039946480834887199679625840837204249339124222660436126142082966912880628520134937869788499117840638216002345339023074661585850061197876758091801700808434475100472321089801439270673049230724077602265320288712617069926121186108756540234221298543752730243363843825555543058828098920645464545427417715752574607987580336955608552337490119251795022613945929825233682082165240283743037534420797692827487014821532000922437431495355700165332889099412603936951486662681050676212002368645101725671092860758884720075943591638114656434968332975466257608777685215402827769773689504883052810009690658479440839422380852537198149138587254513449177032826027471049927024991618637959330363605902239637908687543705201211692422974912269028383861678471557966893651933316330783927172848497302978972854400653892497209553420649914009676188636451217116153221796840222882869924458047182193691202931098718679299068094149584941564790212947665768176541941830841015957834819049349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e041dc945bbca07bbe7c843767c45494c689b82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bass.li'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d05c5eee40000040300483046022100fd0c1c65d4598f6e50cd5af9c7a8cb0438083e6eb75c4aa932a2f143126167be022100e72f314d77374f30655661517913b106eaf2c9e103295cbe9c107d468296ec83007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d05c5ef3e000004030047304502206494a9c311bd4f86883335bdf6b396e76d4a7a6a4f6648b4e46fa3d8766cebd1022100e8a74a880a707eb97ea8c29bdcc84ac5f3ecd72a002b21b004c84b066e663fc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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