DV SSL/TLS Certificate for staff.blog.ui.ac.id

Certificate has expired

Issued by Let's Encrypt (R3)

About the staff.blog.ui.ac.id DV SSL/TLS Certificate

This certificate with serial number 04:17:d4:1e:ab:88:50:e2:ec:8b:a9:5a:3e:84:7f:66:82:05 for staff.blog.ui.ac.id was issued on by Let's Encrypt.

This DV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for staff.blog.ui.ac.id provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 04:17:d4:1e:ab:88:50:e2:ec:8b:a9:5a:3e:84:7f:66:82:05
Serial Number (int): 356557593749326834917489000430485046198789
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: cb:98:12:25:30:97:b4:35:f8:ed:71:b7:66:de:45:63:2c:84:6d:31
Authority Key Identifier: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (SHA-1): 93:bd:96:f8:0d:32:b4:ca:73:7b:4d:88:56:69:84:e2:33:f9:a5:31
Fingerprint (SHA-256): 01:64:d1:4e:ab:6e:03:a2:cb:71:5e:92:c3:f3:d3:88:64:dd:40:e6:db:b0:64:68:07:01:19:8c:60:a6:aa:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation Information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staff.blog.ui.ac.id
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for staff.blog.ui.ac.id

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

staff.blog.ui.ac.id

X.509 Certificate

The complete raw X.509 certificate details for staff.blog.ui.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgISBBfUHquIUOLsi6laPoR/ZoIFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTYxMDAzMDJaFw0yNDAzMTUxMDAzMDFaMB4xHDAaBgNVBAMT
E3N0YWZmLmJsb2cudWkuYWMuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC4keK1zxLSniiC/D+aLBwKNoefGJreRfDEGHlggHWyqcl+GJ0dN6uXYxs
Exn3gHfdI+CqbtIm671xd5pyYZM2/hyAreoB8g6HYUZJhTlxXEoFn+T8eRFEydRx
W8aRS59H5t+LNlC/3jR3Wvym6KeKCiVFsUXMixss0bId33LUoq8G23mgqViBccZD
qhVVf6GpW+LVcJ6WcrP2Wbl7orvnMj+cRcm/tm2RHTAaYgt+kLGxQr96uoLg5KbW
t2GOk+RXkxCzETOaLJZeTOoG5qTtzAx3ckx8wvTQdiqnQDpv1WLedKGtzls5Kgly
GR0DQLOWkNjiGX77/gB97dQrMifFAgMBAAGjggIXMIICEzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFMuYEiUwl7Q1+O1xt2beRWMshG0xMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMB4GA1UdEQQXMBWCE3N0YWZmLmJsb2cudWkuYWMuaWQwEwYDVR0gBAww
CjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYxySz7CAAAEAwBIMEYCIQCxI4waiuhN
y5IXc3McIqT+m5Pa72eaQ7PU5Atqkip2HQIhAOX21HIk+hNN0okOBgkhdlJTTf92
8+GrM+bZftcEbHncAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA
AAGMcktAdgAABAMASDBGAiEAzoXRdQW3fInDOf7pKoZHQWNkT5bMngtFSXAtbmyu
+t0CIQCkKO1pFTyvNTkYUCtReBdpngxCMWh1HyoPIqdijoFxNTANBgkqhkiG9w0B
AQsFAAOCAQEAMPmE/3x18mSQ0EyZtc8EEH8fZvwlGKHWokT6AB23a6Q9i2XAydkM
ZeXhHiE9X7XW9eD00N5i9K39wK/DmI1QaiHLCK8se63S380gO1OPynxCZV2bAxqr
E0Crgbze6pHgvfSxlqwuXVXREfHWPNIDDQNH2Vdy+X9jxMeKY3qGUUX3mIQDp261
aDVIHgWY1CfsmTRpZ6f9k9lq6frFCvhRJDzuY3fEjmexeUZdmSTdDU4RifC3KYl+
Q/Ml0CrriEtMQQ/ApCcx1GwC7u3btJ837iUbhtmdhGPSr6vKQ3UfUjRiBgOWuq2n
vmMuxTqC0fB2pxovNIhTSK/f7zAaHWwVHw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuJHitc8S0p4ogvw/miw
cCjaHnxia3kXwxBh5YIB1sqnJfhidHTerl2MbBMZ94B33SPgqm7SJuu9cXeacmGT
Nv4cgK3qAfIOh2FGSYU5cVxKBZ/k/HkRRMnUcVvGkUufR+bfizZQv940d1r8puin
igolRbFFzIsbLNGyHd9y1KKvBtt5oKlYgXHGQ6oVVX+hqVvi1XCelnKz9lm5e6K7
5zI/nEXJv7ZtkR0wGmILfpCxsUK/erqC4OSm1rdhjpPkV5MQsxEzmiyWXkzqBuak
7cwMd3JMfML00HYqp0A6b9Vi3nShrc5bOSoJchkdA0CzlpDY4hl++/4Afe3UKzIn
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356557593749326834917489000430485046198789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 10:03:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 10:03:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staff.blog.ui.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24601813725010545042491094073865675110720428090669754693209245278582236074548124821075100761526836154086051687197244216023601963615398294948923467442409855914113543730605525340121861405320618977109013620617124239731285985073830186381090973662386917050513234145428463872798827719110932938974311632139923815483415680741551430091184224198421195429375737296991625162525105734842033467443921734854618064034206585382473277105978976356866251215553808671761159042487631042523172420127628883541045522042209607668800240714444997437382286847032028046182486977146041994330092179006716885872686489067381276628064915195428061980613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb9812253097b435f8ed71b766de45632c846d31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.blog.ui.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c724b3ec20000040300483046022100b1238c1a8ae84dcb921773731c22a4fe9b93daef679a43b3d4e40b6a922a761d022100e5f6d47224fa134dd2890e0609217652534dff76f3e1ab33e6d97ed7046c79dc00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c724b40760000040300483046022100ce85d17505b77c89c339fee92a86474163644f96cc9e0b4549702d6e6caefadd022100a428ed69153caf353918502b517817699e0c423168751f2a0f22a7628e817135
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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