bassiano.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b9:e8:fa:29:fe:4c:f1:06:ab:55:9d:fe:8f:19:0b:ce:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bassiano.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:e8:fa:29:fe:4c:f1:06:ab:55:9d:fe:8f:19:0b:ce:97
Serial Number (int): 411711061428377895788346056229304092315287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:f4:c2:f1:b4:54:ca:4d:36:14:9b:16:27:ac:41:2b:6e:7a:0e:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:d1:0f:07:ac:c8:c1:8a:54:a5:1f:b6:be:11:48:3b:c4:92:e5:85
Fingerprint (sha256): c7:fc:47:08:98:04:10:3e:78:41:90:e2:3b:cf:30:fe:75:79:f1:bc:3e:2c:c2:30:37:2a:ff:c1:22:96:5b:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bassiano.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bassiano.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bassiano.net

Other certificates including the domain name bassiano.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bassiano.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411711061428377895788346056229304092315287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 13:59:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 13:59:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bassiano.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883033669380216325664259709036469003921474715249165079920988437490763413025967004567033368193876428625370702533143339251485973185160614157282199965301627402619042201154840726869066514192830385611552142917119250837297673380305923572046422273837673947124667090757417676280892260180146829968386765793340552649974793598788006973442968257569284003493877840979235183030341760355793543546933581177568588019741553203162141507902574362531268181363795466752060271875417530502134648009893949428518772512561406346608670232737268190864308536449756437337218799811079424667364579322736417266192921334403849193815045102438841022391336674126558801876108005266767290566111015037069406264534432418503610340403436937935083719950358937526574405551568614533932847028342543322113056430246242505853349091163477619601374307807856408860287572371573722567802103125268229470533753836254692024992611351064898958444133159936842818773317594437295746922293138302149915886184747645993074950708353263470839460811789523957795617262863763942358150858078319325227229835819365360790981920287272220404938961628587865684791015965979332835984135748347466306975997052648171350559203016271059706890245097152157343579696546360118898694964355817005623971277487961457310999845693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80f4c2f1b454ca4d36149b1627ac412b6e7a0e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bassiano.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d733bbf0d000004030048304602210097c3d01bbf629fada262645b05afec82b7d39e188e5f461521fabc575ee30c6a022100c48eedd33f59a8813eb4ed2ee406e660b302f90617ec70cc2b5ea749ecebd99200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d733bbeed0000040300483046022100afcb0694b2487fc6b355b31a4f1b2b99edecba131e3c3a1c42133a0bec7ed3d60221008384ef2e5507a7e6b6da42080d6acd3912a2a9829bf1ed6525c17c7b19a6e783
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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