bassiano.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b9:e8:fa:29:fe:4c:f1:06:ab:55:9d:fe:8f:19:0b:ce:97 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bassiano.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b9:e8:fa:29:fe:4c:f1:06:ab:55:9d:fe:8f:19:0b:ce:97Serial Number (int): 411711061428377895788346056229304092315287
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 80:f4:c2:f1:b4:54:ca:4d:36:14:9b:16:27:ac:41:2b:6e:7a:0e:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ce:d1:0f:07:ac:c8:c1:8a:54:a5:1f:b6:be:11:48:3b:c4:92:e5:85
Fingerprint (sha256): c7:fc:47:08:98:04:10:3e:78:41:90:e2:3b:cf:30:fe:75:79:f1:bc:3e:2c:c2:30:37:2a:ff:c1:22:96:5b:70
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bassiano.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bassiano.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bassiano.net
Other certificates including the domain name bassiano.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for bassiano.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBLno+in+TPEGq1Wd/o8ZC86XMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjcxMzU5MThaFw0x OTEyMjYxMzU5MThaMBcxFTATBgNVBAMTDGJhc3NpYW5vLm5ldDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANhy3jwEAaEBZ7xRLCxijgEyrqpfsQgk7c7m 07QOUGO/FNJVlXYceliJ081Z30MPwdAxk8VMwRKSWujc6tSyEjWJTO+n+NHvqstA Y5U9mPr8rZd/sgDRi2Jk87lPgLZ7Im40+zmmRSfpTukMu/yIrINg3+34C2288fNf gamhSgbbIiWv6Bb9EVRpdGGTpZiwEYIF6hsXxgJ80RPnnNDbNrZruffjbdyCDpb1 PhD8rfsVJ6I5Aj/B88rN+9nSaT6dgrgmVWf8rIskcrG7rRrTXl5GgmCLr+U0XM87 bnnNYXBeXmkOBwgQraaDG002RiXQpQiPKe1ilzAPZpt+hS94z/9SfHSlO1AiDUvd RTcDbaqTmUZDGrdKnwooyrOjBN9IKn4xDC8RN97fYOmzFWEZhTswnbtRiRxoh4SC Ggnj0NiAvGAeVNl/xtXXbqiGRjTIacvqlSHmu2ukykjMzk1hzpo8C3tf8iLIQxhR Ga4w7IFA1iKLJYUbBPCLJRdd9VeG+xV41FkqfhJcJdDOG3QQX1XhD9xX3l+B7i+l KuWANn77BSmdpCuLn0v/qaq0sieu5OcOMjY1U1y3LcEHOy8iG0kEBip9r+S6fcvr Tc4n1osyhVllLJLPzlN71ds5eZHuIBQNg7sLcy32v4xMkue4xFr3Rakn4u/vDeyG kmlmNRs9AgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFID0wvG0 VMpNNhSbFiesQStueg4LMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMYmFzc2lhbm8ubmV0MEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADy AHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFtczu/DQAABAMA SDBGAiEAl8PQG79in62iYmRbBa/sgrfTnhiOX0YVIfq8V17jDGoCIQDEju3TP1mo gT607S7kBuZgswL5BhfscMwrXqdJ7OvZkgB3AGPy283oO8wszwtyhCdXazOkjWF3 j711pjixx2hUS9iNAAABbXM7vu0AAAQDAEgwRgIhAK/LBpSySH/Gs1WzGk8bK5nt 7LoTHjw6HEITOgvsftPWAiEAg4TvLlUHp+a22kIIDWrNORKiqYKb8e1lJcF8exmm 54MwDQYJKoZIhvcNAQELBQADggEBAH7pNGfCCdglR1cBC9yDUZPcK4UWpe+0O7l/ JJxbBz99k3gv7F0lJ5TDI3NIi8mzIaW4o+1JvjfMXMsTE9uRP2HbLWG9R38BgfDz MtqgaMYu6JBd+W4oLSVMCDZlSMprRFuz77UT5irrQBMsssoPwvbia5xrvXKB4fwM 0JRppOMIjIg/HaIZdyLCAX4wzSihFc/WM93BJrtyEXK+mMyj8+S7Cfv80X36yXbQ l+WG3+QTGImzpO+43fQ69qtpELkgO+NaYchlDd80St3RM+yh/s7hKLqCiPQ7EeDb m1O5Uw2pZ3zQVT8RP6usF4LOygpYMIlyi8/cZL3P8729/rwJ+o8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2HLePAQBoQFnvFEsLGKO ATKuql+xCCTtzubTtA5QY78U0lWVdhx6WInTzVnfQw/B0DGTxUzBEpJa6Nzq1LIS NYlM76f40e+qy0BjlT2Y+vytl3+yANGLYmTzuU+AtnsibjT7OaZFJ+lO6Qy7/Iis g2Df7fgLbbzx81+BqaFKBtsiJa/oFv0RVGl0YZOlmLARggXqGxfGAnzRE+ec0Ns2 tmu59+Nt3IIOlvU+EPyt+xUnojkCP8Hzys372dJpPp2CuCZVZ/ysiyRysbutGtNe XkaCYIuv5TRczztuec1hcF5eaQ4HCBCtpoMbTTZGJdClCI8p7WKXMA9mm36FL3jP /1J8dKU7UCINS91FNwNtqpOZRkMat0qfCijKs6ME30gqfjEMLxE33t9g6bMVYRmF OzCdu1GJHGiHhIIaCePQ2IC8YB5U2X/G1dduqIZGNMhpy+qVIea7a6TKSMzOTWHO mjwLe1/yIshDGFEZrjDsgUDWIoslhRsE8IslF131V4b7FXjUWSp+Elwl0M4bdBBf VeEP3FfeX4HuL6Uq5YA2fvsFKZ2kK4ufS/+pqrSyJ67k5w4yNjVTXLctwQc7LyIb SQQGKn2v5Lp9y+tNzifWizKFWWUsks/OU3vV2zl5ke4gFA2DuwtzLfa/jEyS57jE WvdFqSfi7+8N7IaSaWY1Gz0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411711061428377895788346056229304092315287 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 13:59:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 13:59:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bassiano.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883033669380216325664259709036469003921474715249165079920988437490763413025967004567033368193876428625370702533143339251485973185160614157282199965301627402619042201154840726869066514192830385611552142917119250837297673380305923572046422273837673947124667090757417676280892260180146829968386765793340552649974793598788006973442968257569284003493877840979235183030341760355793543546933581177568588019741553203162141507902574362531268181363795466752060271875417530502134648009893949428518772512561406346608670232737268190864308536449756437337218799811079424667364579322736417266192921334403849193815045102438841022391336674126558801876108005266767290566111015037069406264534432418503610340403436937935083719950358937526574405551568614533932847028342543322113056430246242505853349091163477619601374307807856408860287572371573722567802103125268229470533753836254692024992611351064898958444133159936842818773317594437295746922293138302149915886184747645993074950708353263470839460811789523957795617262863763942358150858078319325227229835819365360790981920287272220404938961628587865684791015965979332835984135748347466306975997052648171350559203016271059706890245097152157343579696546360118898694964355817005623971277487961457310999845693 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 80f4c2f1b454ca4d36149b1627ac412b6e7a0e0b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassiano.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d733bbf0d000004030048304602210097c3d01bbf629fada262645b05afec82b7d39e188e5f461521fabc575ee30c6a022100c48eedd33f59a8813eb4ed2ee406e660b302f90617ec70cc2b5ea749ecebd99200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d733bbeed0000040300483046022100afcb0694b2487fc6b355b31a4f1b2b99edecba131e3c3a1c42133a0bec7ed3d60221008384ef2e5507a7e6b6da42080d6acd3912a2a9829bf1ed6525c17c7b19a6e783 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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