bass.li

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:77:b6:c8:1e:22:0d:94:ea:d9:f1:59:d9:bf:5f:27:5a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bass.li

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:77:b6:c8:1e:22:0d:94:ea:d9:f1:59:d9:bf:5f:27:5a
Serial Number (int): 340781776476255364769716005279600645973850
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:38:f8:56:5a:2d:01:a7:e1:07:0f:65:92:35:e7:ca:5d:e2:ac:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:c7:90:2b:5a:ae:3b:92:4b:de:b0:b3:2b:01:59:b0:aa:a6:b5:d1
Fingerprint (sha256): fd:05:6d:02:df:fc:97:9d:cf:20:a2:9d:89:6a:fe:e5:7b:61:ed:33:4c:3a:6e:f5:50:f8:97:71:e7:1f:b7:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bass.li

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bass.li

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bass.li
www.bass.li

Other certificates including the domain name bass.li

(limited to 100 certificates)

Certificate

The complete raw certificate details for bass.li in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340781776476255364769716005279600645973850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 07:49:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 07:49:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bass.li'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688528995879070627117189241878427997916123030709236086943807555890871335185633415632232256350417407746781943650766874134636187131649730348581839276146006554324569636907381827963517876390454637633413198424259951912637248292962940028481954855984556571173045634898829060818136382477454747673347454360897900172235698148547942757734637134797664333874606968505981446562017234998662849606064442974846357811663374554562258555476569396959536325703339138375899359303617098211787264262266525750053030909586550668322560149864736286141370714424792035270769725622220636917411440953017028685337550721944258614741351598885148572963704004257433771038959675347906839934109743799930540929901369115949123376232365343726328505681846181852039532335598503259173560002722356741038513283819938624412933086807885115943152941749715678610790965737145078942613892475483780856823098567124375862973464633435139488545117937753780158739332876226989022822100769859941089423817933129481701691050058940428586024538865224388772698129406232772924381723703359201464308829833647184112436857322424598630782213820492078814435175473635653244994211218845730869438317758687595072103333379825038632612904297315451363861193535637961340092289488221623357746498788610415722490306879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1138f8565a2d01a7e1070f659235e7ca5de2acef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bass.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bass.li'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170b42f960900000403004630440220151b61e237b80fb9ec0f4b437700aa7211928c8f5bc65e4e2bad278a79ab85d002202377fbb502520149b54d8c35b67e57e202498a169e9c346c0e9689f7fad76fe0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b42f95f0000004030047304502207f8afd1c73edea3012baeab6583604468d160e9ca2576c5be674cf620d721f5e022100f2ef390f080397b9c0c1f8d817ba1565418667ec2ef8044e0c52505ca43ebf0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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