DV SSL/TLS Certificate for pn-purwakarta.go.id

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the pn-purwakarta.go.id DV SSL/TLS Certificate

This certificate with serial number 05:2d:0f:5a:35:31:ba:5a:a7:50:92:3f:3a:2a:d0:24:6b:39 for pn-purwakarta.go.id was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for pn-purwakarta.go.id provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:2d:0f:5a:35:31:ba:5a:a7:50:92:3f:3a:2a:d0:24:6b:39
Serial Number (int): 450894542975805068723560980579099359865657
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 21:ea:5a:89:f0:c5:2d:b8:29:17:55:00:95:b7:17:dd:24:29:70:f7
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 1a:5a:99:f8:75:80:bf:50:51:05:34:56:e6:9b:e4:88:3c:67:7e:c3
Fingerprint (SHA-256): eb:84:5f:e4:c6:86:99:e7:ca:bc:9e:6a:cb:a0:76:57:08:01:8f:9c:16:62:1d:24:4d:65:d2:a9:73:52:7e:b8

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/58.crl

Check the revocation status for certificate pn-purwakarta.go.id
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for pn-purwakarta.go.id

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for pn-purwakarta.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNEGDQWFuHKn0tX2dgO5
4VB/6d/kESvWhXhPH5tnA4MzAFJEyhTeYKILFA+ccCHJ5CPsvHp7VR8g0frRGY0q
TLL3YTOFIqGne5MDY76c82s7tAGFh0wkE1iy+ku4GkrMfCj1zjuhruMujroyaraR
xBritVXmlRwWJeN0CTtN4xdVi64uN7kCrg5tSSI0T4yzPSVyDPh4jhuCnzk+CCIA
CVAkh+7th7RY9h4l0uegFXgbAkcYpjBRuVdSEQXVwZx/ECE51yODF1jJzCmhYdqC
MGOavpQSiCekT6cL2pbNppTLjj1zZKlxqxv/KAE/nLafP3TdcejignwDkYs0F+Rb
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 450894542975805068723560980579099359865657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-22 21:29:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-20 21:29:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pn-purwakarta.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23330921510359860111427202155737195960861433158337670317601662848918905137673565741149154173775488509782175809161669856096147139909377182292471475326164438560377733592505404343316734799252381712678809216880423744116839853696135712738973367831732565833771566085932191116709537128083427355320132957369598261025248483345268807228272343231043015683316343349485211759868998822149769180350184526570367883518643043053119456484331184565220052395546742010991087185755905986579173366172266083190708454555570262939457766158757451188733189759892705324068022964793391776313748706395197479292320699716476617093970806867986129116059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21ea5a89f0c52db82917550095b717dd242970f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pn-purwakarta.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pn-purwakarta.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/58.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019799c1856f0000040300483046022100ed1b2c195a21c634444c1c6dfcb09522166013783b5aa5dd9bcfcc2579b5ad2a022100a703e2d962f3d27b2de869a9fc04dbb2a184376ceaac1dd92baf69abca58c92f00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019799c18d3e00000403004730450221008e23824905cb2fb450f0d3b0bf004779ad54d5a0329cd1fe9559c2ba5473e28202203523934bd5a4367d6a9e7fa8241f03ed76390cc224813a869373d4d6034730a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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