DV SSL/TLS Certificate for pn-sampit.go.id

Certificate is witin its validity period

Issued by Sectigo Limited (Sectigo Public Server Authentication CA DV R36)

About the pn-sampit.go.id DV SSL/TLS Certificate

This certificate with serial number 03:0b:42:db:e3:7e:6a:17:7a:ef:90:ac:f2:15:e3:87 for pn-sampit.go.id was issued on by Sectigo Limited.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for pn-sampit.go.id provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 03:0b:42:db:e3:7e:6a:17:7a:ef:90:ac:f2:15:e3:87
Serial Number (int): 4046155313205985243460699963954422663
Serial Number Length: 122 bits, 16 octets

Subject Key Identifier: 42:12:90:96:58:35:73:be:bd:0a:cd:49:c2:73:40:b7:6a:da:8e:d2
Authority Key Identifier: 68:c0:12:16:18:0e:af:ce:f6:87:a6:32:57:a3:46:51:5d:cb:07:27

Fingerprint (SHA-1): 9c:91:87:31:0f:44:82:82:73:db:8d:96:af:fa:ee:b6:73:18:58:14
Fingerprint (SHA-256): 34:1b:a3:3b:38:cc:ac:12:74:6f:12:30:35:e1:0e:66:13:c3:04:ef:e1:f8:92:0c:17:6c:45:43:19:44:71:13

Issuing Certificate URL: http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt

Revocation Information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate pn-sampit.go.id
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for pn-sampit.go.id

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for pn-sampit.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4046155313205985243460699963954422663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Public Server Authentication CA DV R36'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pn-sampit.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794244244155166425090725668782699784593808291839994422277623578765071524218322540736081270578431985434089838951165779627038436938828961045917114975469686220160823218798908446528432513201722009645338661218094520122018248660848067388674079176942997137398816858805037783438396112278344137962063047036000122744032865041364797980792916890110933788869365953334451344078917905636314235649800940038452506882100586207714912486946922622673176882163112256358002117542906226037293305612013366899484517991486301500207715195453521910895883736849877189282191282512026958078186694540878999062649830803590169933229027270790243002772342422942566367941680942948051886562556938445088147265668034821630553939207588430606238824437386593344984708318519456950207822449962620398994750788929688558684815674711696718084190692679111731991046360616277182225140613861564485059207898857356438979780548378371929717986468784792605487980558108542458874001185329160034952898448954021211597647328042271839170705804707995064974521186230711390167705927421063144517536666902226747730987148376757153316247287339940966293545053605356172969515806064558348545381352582542992580581025608866224189058297490981880778324926646267483151241167749181139608899356632388378695121135681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 68c01216180eafcef687a63257a346515dcb0727
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:2|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pn-sampit.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pn-sampit.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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