perpustakaan.fk.ui.ac.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:ff:96:3d:e7:2d:d5:db:c1:e4:05:68:39:39:87:a4:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=perpustakaan.fk.ui.ac.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:ff:96:3d:e7:2d:d5:db:c1:e4:05:68:39:39:87:a4:6c
Serial Number (int): 262016873401198488903033231786937198027884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:d9:8d:cf:16:5d:05:3f:e1:be:8b:a6:27:4f:8b:fd:be:7a:fb:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:c2:b6:2a:17:70:d2:3e:5d:a9:e6:e9:32:1e:a9:7b:0e:4e:d9:f5
Fingerprint (sha256): 02:9b:62:ba:9f:4b:ab:e5:97:39:55:f4:b2:d7:ee:d5:1c:48:57:e7:03:cf:de:c7:c9:fa:5b:d1:a6:7d:a5:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate perpustakaan.fk.ui.ac.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perpustakaan.fk.ui.ac.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perpustakaan.fk.ui.ac.id

Other certificates including the domain name ui.ac.id

(limited to 100 certificates)
staff.blog.ui.ac.id
pio.farmasi.ui.ac.id
anthropology.fisip.ui.ac.id
ppkb.fib.ui.ac.id
ssl.todo.ui.ac.id
bpm.farmasi.ui.ac.id
openhouse.fkg.ui.ac.id
prototype.law.ui.ac.id
bem.nursing.ui.ac.id
psb.feb.ui.ac.id
ictl.fib.ui.ac.id

ppaa.fisip.ui.ac.id
ikseda.fib.ui.ac.id

scele.fia.ui.ac.id
salam.ui.ac.id
phase.farmasi.ui.ac.id
psdk.ui.ac.id
akuntansi.feb.ui.ac.id
hmiks.fisip.ui.ac.id
staff.blog.ui.ac.id
pascaadm.ui.ac.id
himakrim.fisip.ui.ac.id
bpm.farmasi.ui.ac.id
rfs711.rs.ui.ac.id
huawei.ui.ac.id
icapps.ui.ac.id
rcbe.eng.ui.ac.id
prototype.drrc.ui.ac.id
intermediate-ca.infralabs.cs.ui.ac.id
psysummit.psikologi.ui.ac.id
konsultasi.psikologi.ui.ac.id
hmp.fkm.ui.ac.id
prancis.fib.ui.ac.id
ppaa.fisip.ui.ac.id
anthropology.fisip.ui.ac.id
iser.sci.ui.ac.id
dipi.fib.ui.ac.id
perpustakaan.fk.ui.ac.id
apps-kepk.fk.ui.ac.id
sijadik.fkg.ui.ac.id
jepi.fe.ui.ac.id
psb.feb.ui.ac.id
criminology.fisip.ui.ac.id

ssl.todo.ui.ac.id
mhs.blog.ui.ac.id
economics.feb.ui.ac.id
bem.fk.ui.ac.id
bpm.fia.ui.ac.id
lsd.law.ui.ac.id
biomedik.eng.ui.ac.id
parlemenremaja.wphost3.ui.ac.id

simposiumjai.ui.ac.id
perpustakaan.fk.ui.ac.id
ies.eng.ui.ac.id
aprish2016.ui.ac.id
ahs.ui.ac.id
shn.law.ui.ac.id
raccoonreborn.ui.ac.id
lk2fhui.law.ui.ac.id
anthony.sisdis.ui.ac.id
innovationgallery.ui.ac.id
class.ee.ui.ac.id
cilsconference.ui.ac.id
linguistik.fib.ui.ac.id
sima.ui.ac.id
aditya.sisdis.ui.ac.id
icspi.ui.ac.id
bem.fkg.ui.ac.id
ppgt.ui.ac.id
registry.infralabs.cs.ui.ac.id
himakrim.fisip.ui.ac.id
admission.ui.ac.id
gov2.cs.ui.ac.id
kubernetes.dgx1.infralabs.cs.ui.ac.id
pdib.fk.ui.ac.id
prodiarab.fib.ui.ac.id
www.fkm.ui.ac.id
ars2016.ui.ac.id
dipi.fib.ui.ac.id
hosting.marmutreborn.ui.ac.id
halalcenter.ui.ac.id
dpa.ui.ac.id
uicash.infralabs.cs.ui.ac.id
perfilma.law.ui.ac.id
pdib.fk.ui.ac.id
nursing.ui.ac.id
bem.fkm.ui.ac.id
fk.ui.ac.id
wijaya.sisdis.ui.ac.id
ristek.cs.ui.ac.id
disabilitas.fkm.ui.ac.id
wa.infralabs.cs.ui.ac.id
i-mam.metal.ui.ac.id
omisego.infralabs.cs.ui.ac.id
bem.fkg.ui.ac.id
sntmt.eng.ui.ac.id

Certificate

The complete raw certificate details for perpustakaan.fk.ui.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoNFiiMnILL2hdcjFUNI
PCoBc+4fYjNXkmFJX08gV3YdvqJXKSKfCnzAz/MZ/b8vdkLnYKp8yyyxZ76yRcAH
UGaPwX7NgGoeGJZXJeYeCQWXQdDNY9al7peUV8VuILPO1xSvqI8eL/dmSSdNUkK9
/ExlQn3PPdYiQE8splHnSIT+gMCDAiKBEJdVlgoCT2ukzK4Sh+4LhDYYHjafSR1q
gBlx7MkHP/JHEK2SPaLjeTVnJF/3pQSeAZbt26vJcMWNHUJSJpyDBxs0PuC4wh3b
0xg7/HGvO4+OCRQqRtgXOCVK0iFOc3avGQ4TmENIdNGHSWQggKktkHthT/3OJo9w
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262016873401198488903033231786937198027884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 16:19:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 16:19:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perpustakaan.fk.ui.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26069823280839399603353579995829290570273916143405675502404910915157822617674211720821855449865272451647063637081353974844199913703945329338067033082772702147626843218749828188134222019240422284690526805449848268258596346258174594620578260114224478564555410496611735572301478683428608589008299112342001375296359552114253590701448857067151089477743264514371389786807168941095463586431697363248399916948401873842416776076427735636017875110217186813234444485877861460920612968814110509176106319965903412816504453405533803748843795897733423616935000313904209048932819562871257204715894069899460692577921013297516530069521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29d98dcf165d053fe1be8ba6274f8bfdbe7afb6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perpustakaan.fk.ui.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001684d6005240000040300473045022026dde1e19904cd633d5575f33a22334b6146365b1d49f5a3bffbccea3540d4dc022100a7b98b158d0b7430deaec275fc4b8a10582449d24de6cf8b085343fb0fba7a9500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001684d6005170000040300483046022100fffb068c05f7183901660676d70c1ab7cb2d059edf38cd27b7220a07fd02bd7b022100c00640b5469841d76af96dc3ab82ea6d1c04b21220013b8e3cce06be05569487
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043991e1b707a3cb3b11664d17c10eceaacd82145c8b5ac89f9ac5857b4d569104e4cfceee235c794e5d02fe3c9ddd0a6227b6670856607e7dc00d51d7620cfb8edffe6219c35cf2143fcf3ea05db408214b8592ea956f9abac8a4d61d1cea591149a3f4444d48f7bc704ccc99d2a18c993172a141fabe95891cd8237331a68f1c2442919631510eb913fe0cd9f17782dcd7edb15fd1e6f029add31d740f15f69351326df99e57214442f016c3ae898ad24b4c203d41fade2e4cefa8acde875becc0c32eb90328652729a3dc4aebc638931ce8ccde1b45b0b52c847dc259d4fd0b5690d32fb5b1181956a4e6169d37405f28a1935533dd7afa6318ee973aa1194