analytics.karir.itb.ac.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ef:50:73:0a:6d:36:09:34:de:d6:26:c0:b0:22:9d:78:f9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=analytics.karir.itb.ac.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:50:73:0a:6d:36:09:34:de:d6:26:c0:b0:22:9d:78:f9
Serial Number (int): 429883564986423493200359626487387083602169
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d8:6f:0c:81:29:2b:b7:2f:8e:2e:14:b5:a4:42:1d:59:99:3a:84:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:1a:57:65:42:8b:80:e2:43:34:85:e6:71:b7:4a:36:a8:f9:e3:28
Fingerprint (sha256): 00:26:3e:fe:bb:73:2a:5a:9b:4f:a6:55:92:56:29:ef:4d:d7:59:38:a1:fb:f7:95:f4:fb:60:65:99:18:36:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate analytics.karir.itb.ac.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.karir.itb.ac.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.karir.itb.ac.id

Other certificates including the domain name itb.ac.id

(limited to 100 certificates)
knpts.ftsl.itb.ac.id
www.as.itb.ac.id
analytics.karir.itb.ac.id
concern.itb.ac.id
kep.itb.ac.id
g.six.itb.ac.id
kuliah2021.tf.itb.ac.id
help.fttm.itb.ac.id
robotika.unit.itb.ac.id
icgere.fttm.itb.ac.id
tuid.km.itb.ac.id
ftsl19.kuliah.itb.ac.id
aksantara.kemahasiswaan.itb.ac.id
nautika.unit.itb.ac.id
alumni.if.stei.itb.ac.id
alumni.itb.ac.id
sik.fti.itb.ac.id
webmail.icici-bme.itb.ac.id
tf.fti.itb.ac.id
ecosystem.sbm.itb.ac.id
himasda.ftsl.itb.ac.id
www.lppm.itb.ac.id
ccc.itb.ac.id
percama.itb.ac.id
aerocreation.ftmd.itb.ac.id
medphys.fi.itb.ac.id
fsrd.itb.ac.id
pertunjukan.lfm.itb.ac.id
psa.itb.ac.id
gamais.itb.ac.id
*.stei.itb.ac.id
subaru.ccc.itb.ac.id
hmrh.sith.itb.ac.id
ciel.sbm.itb.ac.id
geothermal.itb.ac.id
integrasi.itb.ac.id
yon1.unit.itb.ac.id
redmine.ditsti.itb.ac.id
*.arc.itb.ac.id
homecoming.itb.ac.id
tenismeja.itb.ac.id
proposal.lp4.itb.ac.id
pri.itb.ac.id
ukm.itb.ac.id
ciel.sbm.itb.ac.id
asasi.itb.ac.id
elibpascasi.ftsl.itb.ac.id
mg.fttm.itb.ac.id
ck4bc.sbm.itb.ac.id
ss.fa.itb.ac.id
geothermal.itb.ac.id
logistics-center.itb.ac.id
esdc.aryya.admin.if.itb.ac.id
www.fmipa.itb.ac.id
himastron.as.itb.ac.id
pme.itb.ac.id
dosen.fti.itb.ac.id
taiga.if.itb.ac.id
medphys.fi.itb.ac.id
research.fitb.itb.ac.id
kmpaganesha.itb.ac.id
kep.itb.ac.id
perisaidiri.itb.ac.id
dev.help.fttm.itb.ac.id
hidrografi.gd.itb.ac.id
asrama.itb.ac.id
layanan.uptor.itb.ac.id
p2d.itb.ac.id
*.arc.itb.ac.id
beasiswa.itb.ac.id
new-multisite.itb.ac.id
mwa-wm.itb.ac.id
dc.ftmd.itb.ac.id
wisuda.lfm.itb.ac.id
atletikganesha.unit.itb.ac.id
selva.sith.itb.ac.id
care.fitb.itb.ac.id
aksantara.kemahasiswaan.itb.ac.id
s3tmi.fti.itb.ac.id
kompaq.mtk.itb.ac.id
api.esdc.aryya.admin.if.itb.ac.id
*.kuliah.itb.ac.id
debust.unit.itb.ac.id
tpb19.kuliah.itb.ac.id
imk-artha.sbm.itb.ac.id
terra.gf.itb.ac.id
sipintar.ftmd.itb.ac.id
fpa.itb.ac.id
mwa-wm.itb.ac.id
desainproduk.fsrd.itb.ac.id
new-multisite.itb.ac.id
icgere.fttm.itb.ac.id
ojs.itb.ac.id
debust.unit.itb.ac.id
inventory.fa.itb.ac.id
jerse.fttm.itb.ac.id
jerse.fttm.itb.ac.id
scaapg.gc.itb.ac.id
asasi.itb.ac.id
fgb.itb.ac.id

Certificate

The complete raw certificate details for analytics.karir.itb.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtIHs7VtwFn1ZuQLOF9b
IDB6o2HV8ApSJOkGOyPcq45mTKttp6byEnd+Nk/ZW0qBOvnXaULPp63+cBqDPb0p
AwE1u0sY/itUs0lD1M7ijzNUBmPW4/ykHZbcR2RMHHWpRty9/hbteFGa721oklZP
HGyJHLQcbm0Jn2+E1J5tebU3Efj8O175oQJ6hOoc5ByTYosfVICfXDoE7J032bM1
Vo/3to49AQPfUot9tONCL4EsSSI2lZUlbJjcTrX0Yva6dhdOx6vP6UWuKGANTEkL
t7wNmj6Q4QcT5cc0Bcdp1qaKI244LZD3hiyzO6B9hqZOplyTy0LfIyM+W68goNNq
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429883564986423493200359626487387083602169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 02:43:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-11 02:43:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.karir.itb.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24593800858861780652032825412338344156731983733715292043045984901370651376132419552927508796607001108820216678202522081730834103898650708775879334323285027638975361776894414608585364539297904150870577242500381608296235758626897901574419754148605341972832524034355663065196814377309791956327334606485657400665578133112350847241682887103580328790192186191287907583057478690470229193561526957365898854597705810625198420261260066433450783948391021337821924349039093749580057886241196252408036887656252930693071120454157832231682615630023860865074337620640746151029229782795069931769515015217576045605382390883840483879567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d86f0c81292bb72f8e2e14b5a4421d59993a84ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.karir.itb.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001716c7bc726000004030046304402201182ed87d3fb153e3395a7fbbbe6eb6c2eeba99f6a5dd33091b1af2f00fe01b602201ab17198406bdcc0a4e732f05b45569457b738b0e29ab1554114d701426f786f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001716c7bc75e00000403004730450221009dec3f1236fb47a6f0e3049604187c94e5cb7eb54a261d2abd02427e7a606a38022001d1524269376e1f7c91fc21f110049ce6c554ed8a978440306891c2bc511f0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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