playlist.bass-time.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1a:be:de:0d:e1:81:07:2d:39:f4:f1:98:31:00:10:5f:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=playlist.bass-time.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:be:de:0d:e1:81:07:2d:39:f4:f1:98:31:00:10:5f:55
Serial Number (int): 357550191557624709039633083398212692238165
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:2f:0d:bf:a2:73:fa:87:60:55:b8:60:e0:42:f8:52:40:a9:c6:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:fc:28:74:0f:a4:d2:0b:b5:bb:80:ec:5c:72:22:f2:82:73:01:0b
Fingerprint (sha256): 98:07:78:e9:7c:be:cb:e1:f0:34:c8:aa:57:ba:4a:2b:b6:2a:b2:07:bb:14:6f:b1:5c:26:4c:16:4f:d8:52:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate playlist.bass-time.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for playlist.bass-time.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

playlist.bass-time.de

Other certificates including the domain name bass-time.de

(limited to 100 certificates)
sync.emrtop.de
www.xtatic.de
www.wayonaise.lima-city.de
www.master2011.lima-city.de
www.bass-time.de
blog.bass-time.de
breuers-gv.de
nightflyer.lima-city.de
pokemon-go.lima-city.de
xdzudyhtqynjzus.bestseller.app
kdefansite.lima-city.de
playlist.bass-time.de
www.no-n-a-m-e.2ix.de
www.shop.bass-time.de
lutzkr.lima-city.de
shop.bass-time.de
shop.bass-time.de
www.bass-time.de
secretfilms.de
skane.lima-city.de
datapoint.lima-city.de
mxxthi.lima-city.de
www.bass-time.de
www.bass-time.de
www.jmteam-dev.lima-city.de
alt.zirkus-arcobaleno.de
radiotools.lima-city.de
www.bass-time.de
www.fischerfreunde-hagelstadt.lima-city.de
ferienhaus-wolkenblick.lima-city.de
www.nebras2017.lima-city.de
stayatsteve.lima-city.de
traceleung.lima-city.de
kalmiya.de
fight-star.de
bass-time.de
shop.bass-time.de
signatures.architektur-noerthemann.de
riotcoding.com
www.presse.schnittlauchgang.de
shop.bass-time.de
sinclair-schneider.de
pammerich.lima-city.de
www.griela.lima-city.de
sirania2.lima-city.de
shop.bass-time.de
krobtv.lima-city.de
www.fxr1990.lima-city.de
www.heruinband.lima-city.de
bass-time.de
shop.bass-time.de
rechtsanwaltstock.de
www.eulenkunst.lima-city.de
www.notvhaam.de.cool
wawa-the-duck.lima-city.de
www.ahnma-event.lima-city.de
alan.hu
www.mgrides.lima-city.de
playlist.bass-time.de
www.annafrey.at
teamroyal-mino.lima-city.de
www.shop.bass-time.de
blog.philipfrenz.com
www.r1pp3rs.lima-city.de
blog.bass-time.de
bahnbus.4lima.at
fellmuth.lima-city.de
www.bass-time.de
gnorfbert.lima-city.de
www.alpinecabin.lima-city.de
www.mgordon.lima-city.de
schwer1n.lima-city.de
crazi.lima-city.de
shop.bass-time.de
timwalk.lima-city.de
shop.bass-time.de
stiftungneuewege.de
www.shop.bass-time.de
www.dimalive.lima-city.de
www.fambachwetter.lima-city.de
daijoubu-forum.de.cool
www.mausi1973.lima-city.de
playlist.bass-time.de
playlist.bass-time.de
moserdennis.lima-city.de
12hp.de
pokemon-area.lima-city.de
programmiererbob.lima-city.de
www.shop.bass-time.de
shop.bass-time.de
pote.de
www.archiv.zirkus-arcobaleno.de
fb.computergott.eu
danielreinhardt.lima-city.de
www.bass-time.de
www.bass-time.de
www.wasserwacht-bayreuth.lima-city.de
www.bass-time.de
mdezvyoqimrzrmy.looktool.de
playlist.bass-time.de

Certificate

The complete raw certificate details for playlist.bass-time.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P0eVp9mW2g5JIoBJ5mI
A6WXMYLRIAENCBPTx3yDxgRNDH5+ix36Ek5lvLYq4/pUhaYHo9kGU1NeJvwZwUbs
hdFQ7LSmexfpfPPtbho8kiMxVq1YClGJIhMp46FQn4LeXlXhZ6aXh2tBYgnSyf0b
dUIV50bvGSTFICtsGR6ZAKy493hz5xppOq875f2U1pPGV3qkzXDlkoQhSe6jAYGf
8NVexfPnIKpuDiLiaRyzojdu+0815FH1H0+OwbHaB9A2GL/6GxkLtDB3vtZ3mzg+
WZBo4sq48/OOVqffyPCTgsITmi1LfxIw9FCxbKGTqFA6Wrs1DqbNzggHMuSjDZ/l
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357550191557624709039633083398212692238165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-01 08:56:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 08:56:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'playlist.bass-time.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26382384821862528615090161874666356072850993356166248814897668805601900616371817213256429382920034749591789069403164914519395134199327060699435275893289072533202860032591764223192277051218445325671906404886263483643239021616746053677208111669004618710490404135264143314967127339838256938862930827549596418565316705633704261186894745228291219019848429654716399350082365890922638823701751962829566965551780755428057258878289082134423444483838953124390476577566309485991600689969431107217063231998289458489967324386541032157581142498728852649206484416961781952122362349403129970556267602017999784400537300031917281764653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							282f0dbfa273fa876055b860e042f85240a9c6fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playlist.bass-time.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001631b2221620000040300473045022100cf0dbb747a2b28c77e30f6bbd2a243ce865a1e1973df3d36af5663453a9f067902206dfdefb019974177ab5ba0350650e1af84d7a01d3a8a415eea7d0741fa26c6fb007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001631b22215600000403004630440220038d0109b2d26f13d61c0a787431a24314554bc0f60fe7bbc70386788aafebbd0220095a488ff09ace4384fccc7266088bc7db1e88d6481b091c3d64bb1acd360112
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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