bass.li
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e9:77:b6:c8:1e:22:0d:94:ea:d9:f1:59:d9:bf:5f:27:5a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bass.li
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e9:77:b6:c8:1e:22:0d:94:ea:d9:f1:59:d9:bf:5f:27:5aSerial Number (int): 340781776476255364769716005279600645973850
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 11:38:f8:56:5a:2d:01:a7:e1:07:0f:65:92:35:e7:ca:5d:e2:ac:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3e:c7:90:2b:5a:ae:3b:92:4b:de:b0:b3:2b:01:59:b0:aa:a6:b5:d1
Fingerprint (sha256): fd:05:6d:02:df:fc:97:9d:cf:20:a2:9d:89:6a:fe:e5:7b:61:ed:33:4c:3a:6e:f5:50:f8:97:71:e7:1f:b7:83
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bass.li
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bass.li
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bass.li
www.bass.li
www.bass.li
Other certificates including the domain name bass.li
(limited to 100 certificates)
Certificate
The complete raw certificate details for bass.li in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA+l3tsgeIg2U6tnxWdm/XydaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDcwNzQ5NDJaFw0y MDA2MDUwNzQ5NDJaMBIxEDAOBgNVBAMTB2Jhc3MubGkwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCoxZapy2q27jpAhMYh6miZH/If1AZAaR8RTAfNasMq UI8PAddaN0LETZ31C8NFTZ6He7Se7yA2SvSAcSdenD/c9/PEUydmkArofZQniQ7e rFWGHGWMjQvnfSdincQktaE1gQKMCBmIttqxVeJYQDskUO+9W7VYElDw85FyUYnR c44xxaODOaRx/oJ4KwYQb8tmTgDufCpAFSTM7fX8SAOjrrG/VGYCV5bstOEr0RDx 0keR+M8uw2tjAcYtOYGIo/DFu3Kb2UmrW5lyyXZD5SDKQliJBZoFTo0SHL5LO1Cs qGrAxB7lgsuRXeEGrlkKjw+SvWyfTb9CtdMGFMZZlkfC7pFfv0h0E6/ZOKY5VBZb FDg//xaR26T+pcoK5iGzRCkpBY7itDDfBwk5nnDjxOmQcZTc5hWY+iUWV4G8tPNC clij3E5DuxjvSDMxRrEUxRR3UjWxC5qa1XiA1Zimk6Grl2vv91eLYau9xTAj3JiV T8jnpbrEkxN6kTRZrXVkDS++KTzeB+Id7BVRs2fHZG/KfJ2wF3XDJr9tRNmjtfHg zz9aGlRvusnbS+Lk5bq7viZYqEkmQzTlm4dtUkQk39J5vtei64usnEuYUsOQt2Ky aP9M3vKmo6r1WOCyjOebMFb6i9pwrYwKmRikQF/hv1FogUraTWOZBmPXPvDiVWkh PwIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQROPhWWi0Bp+EH D2WSNefKXeKs7zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMB8GA1UdEQQYMBaCB2Jhc3MubGmCC3d3dy5iYXNzLmxpMEwG A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB 8QDvAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwtC+WCQAA BAMARjBEAiAVG2HiN7gPuewPS0N3AKpyEZKMj1vGXk4rrSeKeauF0AIgI3f7tQJS AUm1TYw1tn5X4gJJihaenDRsDpaJ9/rXb+AAdgCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAXC0L5XwAAAEAwBHMEUCIH+K/Rxz7eowErrqtlg2BEaN Fg6coldsW+Z0z2INch9eAiEA8u85DwgDl7nAwfjYF7oVZUGGZ+wu+ARODFJQXKQ+ vw8wDQYJKoZIhvcNAQELBQADggEBAH5ctG8mGPXw7ucAby5x7viVwhy8ugnNJNjr kJoIbkZbeYMJV/JBImhGhyxfgvbYH+rL2InVARa+FLVrySssAZmKuilfrGtD3JQx hcsutWXI8a3sE+asB+aT7Y9z1dl7DBgL6c+vSEqWtbba7h+6/4fy/mwQc5Wb1JpT MmiWEaQ3EmBkPoWw12exoV7+HN/kyLWuibtQzRqWDPXqkIFJidJnllQsJjcTOv43 MBXTTu60iVNkOmMDhmOFhFQa8nJ0C/t/Xu3RUqTnYm40q/Ic/fym1yWjDfMWujKm UgOt1jdJcjmW8xnyqGXrfFuaiAL3xontDL62zv673xmeV6bbAWo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqMWWqctqtu46QITGIepo mR/yH9QGQGkfEUwHzWrDKlCPDwHXWjdCxE2d9QvDRU2eh3u0nu8gNkr0gHEnXpw/ 3PfzxFMnZpAK6H2UJ4kO3qxVhhxljI0L530nYp3EJLWhNYECjAgZiLbasVXiWEA7 JFDvvVu1WBJQ8PORclGJ0XOOMcWjgzmkcf6CeCsGEG/LZk4A7nwqQBUkzO31/EgD o66xv1RmAleW7LThK9EQ8dJHkfjPLsNrYwHGLTmBiKPwxbtym9lJq1uZcsl2Q+Ug ykJYiQWaBU6NEhy+SztQrKhqwMQe5YLLkV3hBq5ZCo8Pkr1sn02/QrXTBhTGWZZH wu6RX79IdBOv2TimOVQWWxQ4P/8Wkduk/qXKCuYhs0QpKQWO4rQw3wcJOZ5w48Tp kHGU3OYVmPolFleBvLTzQnJYo9xOQ7sY70gzMUaxFMUUd1I1sQuamtV4gNWYppOh q5dr7/dXi2GrvcUwI9yYlU/I56W6xJMTepE0Wa11ZA0vvik83gfiHewVUbNnx2Rv ynydsBd1wya/bUTZo7Xx4M8/WhpUb7rJ20vi5OW6u74mWKhJJkM05ZuHbVJEJN/S eb7XouuLrJxLmFLDkLdismj/TN7ypqOq9VjgsoznmzBW+ovacK2MCpkYpEBf4b9R aIFK2k1jmQZj1z7w4lVpIT8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340781776476255364769716005279600645973850 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 07:49:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 07:49:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bass.li' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688528995879070627117189241878427997916123030709236086943807555890871335185633415632232256350417407746781943650766874134636187131649730348581839276146006554324569636907381827963517876390454637633413198424259951912637248292962940028481954855984556571173045634898829060818136382477454747673347454360897900172235698148547942757734637134797664333874606968505981446562017234998662849606064442974846357811663374554562258555476569396959536325703339138375899359303617098211787264262266525750053030909586550668322560149864736286141370714424792035270769725622220636917411440953017028685337550721944258614741351598885148572963704004257433771038959675347906839934109743799930540929901369115949123376232365343726328505681846181852039532335598503259173560002722356741038513283819938624412933086807885115943152941749715678610790965737145078942613892475483780856823098567124375862973464633435139488545117937753780158739332876226989022822100769859941089423817933129481701691050058940428586024538865224388772698129406232772924381723703359201464308829833647184112436857322424598630782213820492078814435175473635653244994211218845730869438317758687595072103333379825038632612904297315451363861193535637961340092289488221623357746498788610415722490306879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1138f8565a2d01a7e1070f659235e7ca5de2acef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bass.li' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bass.li' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170b42f960900000403004630440220151b61e237b80fb9ec0f4b437700aa7211928c8f5bc65e4e2bad278a79ab85d002202377fbb502520149b54d8c35b67e57e202498a169e9c346c0e9689f7fad76fe0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b42f95f0000004030047304502207f8afd1c73edea3012baeab6583604468d160e9ca2576c5be674cf620d721f5e022100f2ef390f080397b9c0c1f8d817ba1565418667ec2ef8044e0c52505ca43ebf0f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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