jepi.fe.ui.ac.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:84:f8:8a:b8:bd:02:92:4f:9a:34:8d:3a:a8:eb:76:c6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jepi.fe.ui.ac.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:84:f8:8a:b8:bd:02:92:4f:9a:34:8d:3a:a8:eb:76:c6
Serial Number (int): 277506877639238376237322424163372809025222
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:e9:5f:74:e4:59:71:48:f4:26:f2:e9:07:f6:fd:41:ad:e7:38:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:dd:e8:34:d6:e4:66:ee:20:59:a2:a8:68:fe:4e:1b:0a:ce:14:33
Fingerprint (sha256): 0b:78:68:8d:9b:80:a1:f9:a6:30:3e:25:0a:fd:9d:5c:79:8f:48:d6:27:c8:55:16:7d:63:b1:4e:c1:5c:f0:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jepi.fe.ui.ac.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jepi.fe.ui.ac.id

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jepi.fe.ui.ac.id
www.jepi.fe.ui.ac.id

Other certificates including the domain name ui.ac.id

(limited to 100 certificates)
staff.blog.ui.ac.id
pio.farmasi.ui.ac.id
anthropology.fisip.ui.ac.id
ppkb.fib.ui.ac.id
ssl.todo.ui.ac.id
bpm.farmasi.ui.ac.id
openhouse.fkg.ui.ac.id
prototype.law.ui.ac.id
bem.nursing.ui.ac.id
psb.feb.ui.ac.id
ictl.fib.ui.ac.id

ppaa.fisip.ui.ac.id
ikseda.fib.ui.ac.id

scele.fia.ui.ac.id
salam.ui.ac.id
phase.farmasi.ui.ac.id
psdk.ui.ac.id
akuntansi.feb.ui.ac.id
hmiks.fisip.ui.ac.id
staff.blog.ui.ac.id
pascaadm.ui.ac.id
himakrim.fisip.ui.ac.id
bpm.farmasi.ui.ac.id
rfs711.rs.ui.ac.id
huawei.ui.ac.id
icapps.ui.ac.id
rcbe.eng.ui.ac.id
prototype.drrc.ui.ac.id
intermediate-ca.infralabs.cs.ui.ac.id
psysummit.psikologi.ui.ac.id
konsultasi.psikologi.ui.ac.id
hmp.fkm.ui.ac.id
prancis.fib.ui.ac.id
ppaa.fisip.ui.ac.id
anthropology.fisip.ui.ac.id
iser.sci.ui.ac.id
dipi.fib.ui.ac.id
perpustakaan.fk.ui.ac.id
apps-kepk.fk.ui.ac.id
sijadik.fkg.ui.ac.id
jepi.fe.ui.ac.id
psb.feb.ui.ac.id
criminology.fisip.ui.ac.id

ssl.todo.ui.ac.id
mhs.blog.ui.ac.id
economics.feb.ui.ac.id
bem.fk.ui.ac.id
bpm.fia.ui.ac.id
lsd.law.ui.ac.id
biomedik.eng.ui.ac.id
parlemenremaja.wphost3.ui.ac.id

simposiumjai.ui.ac.id
perpustakaan.fk.ui.ac.id
ies.eng.ui.ac.id
aprish2016.ui.ac.id
ahs.ui.ac.id
shn.law.ui.ac.id
raccoonreborn.ui.ac.id
lk2fhui.law.ui.ac.id
anthony.sisdis.ui.ac.id
innovationgallery.ui.ac.id
class.ee.ui.ac.id
cilsconference.ui.ac.id
linguistik.fib.ui.ac.id
sima.ui.ac.id
aditya.sisdis.ui.ac.id
icspi.ui.ac.id
bem.fkg.ui.ac.id
ppgt.ui.ac.id
registry.infralabs.cs.ui.ac.id
himakrim.fisip.ui.ac.id
admission.ui.ac.id
gov2.cs.ui.ac.id
kubernetes.dgx1.infralabs.cs.ui.ac.id
pdib.fk.ui.ac.id
prodiarab.fib.ui.ac.id
www.fkm.ui.ac.id
ars2016.ui.ac.id
dipi.fib.ui.ac.id
hosting.marmutreborn.ui.ac.id
halalcenter.ui.ac.id
dpa.ui.ac.id
uicash.infralabs.cs.ui.ac.id
perfilma.law.ui.ac.id
pdib.fk.ui.ac.id
nursing.ui.ac.id
bem.fkm.ui.ac.id
fk.ui.ac.id
wijaya.sisdis.ui.ac.id
ristek.cs.ui.ac.id
disabilitas.fkm.ui.ac.id
wa.infralabs.cs.ui.ac.id
i-mam.metal.ui.ac.id
omisego.infralabs.cs.ui.ac.id
bem.fkg.ui.ac.id
sntmt.eng.ui.ac.id

Certificate

The complete raw certificate details for jepi.fe.ui.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277506877639238376237322424163372809025222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 04:08:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 04:08:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jepi.fe.ui.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 956873559029638106848547497176826867767424034721693296768447336972348416552508059097337087936925191619863493823434907799592802634273880081938194095956672144120353922369971961734337772024232767662764296158978288181290006811436585936036844959206001601081829674098416859422856901733534893276854148926853045448732835249117272894537442574682530237285034891919737766782232766616676549607636810700196200755776455832793933033805443960963017893132308967104191852804060638429498822601937778376218172761127498834366909349987676097473695517727297138865283162630670579190482660421766416278422446449949441442688519331724014898702396465956712344325372566843735177580454119257126510878913979249931039680265785907715007197515338745733310628450686070468941684021760154015974210038311522059469598509695067449490754893513580983722147274472124813620596498550797648901502184900779976121393643427469832547536792801191774508971713181370477208676169331734321556147978868999193419614262314658879040805779459867013073060844220435819121210166816243297826364431695282848255616014101211001865068958893818344832904708713032754702695368104962406708675615624612176794554955222890673141935944469357781982896058842228655534881366864596149677689078999688925205641516559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ee95f74e4597148f426f2e907f6fd41ade7387b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jepi.fe.ui.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jepi.fe.ui.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e8c5cca000000040300483046022100a92f94285b5123053a752051b00c7016e3ebc0f9950d45a5ed407b4b7403b0aa022100e8738adc70d2d9ca299193d45cca4deba913b34f0897a70803e43d1930383dd1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e8c5cc9f10000040300473045022100a8354f00dddd8babaf073a2b1060d5e3eebaad7ed8ccf5fd7b3299b7e7b3cff8022008bddae7f1c985a2c7d94efd8b1c85b8b614d8083d49117edc9321074b65ef29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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