pn-purwakarta.go.id

Issued by R3

About this certificate

This digital certificate with serial number 03:00:19:5d:d7:56:b4:89:09:be:f6:2a:66:79:bf:04:98:d6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pn-purwakarta.go.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:00:19:5d:d7:56:b4:89:09:be:f6:2a:66:79:bf:04:98:d6
Serial Number (int): 261370575746370766307628668341121869715670
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:93:e8:b7:1c:2c:4f:52:42:38:da:c9:28:7d:fe:ab:68:a3:cc:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:bf:db:39:eb:40:32:ec:bb:c8:6e:3b:fd:f2:96:94:07:ec:f7:9d
Fingerprint (sha256): 17:dd:db:f2:24:36:9a:e3:e3:3b:b2:36:43:02:40:b8:28:e9:6b:f9:53:dd:c6:c2:04:fa:14:31:b4:d3:b7:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pn-purwakarta.go.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pn-purwakarta.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pn-purwakarta.go.id
pn-purwakarta.go.id

Other certificates including the domain name pn-purwakarta.go.id

(limited to 100 certificates)
pn-purwakarta.go.id
pn-purwakarta.go.id
sipp.pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
sipp.pn-purwakarta.go.id
perpustakaan.pn-purwakarta.go.id
pn-purwakarta.go.id
perpustakaan.pn-purwakarta.go.id
sipp.pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
*.pn-purwakarta.go.id
sipp.pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
perpustakaan.pn-purwakarta.go.id
sipp.pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
*.pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
pn-purwakarta.go.id
www.main.pn-purwakarta.go.id
perpustakaan.pn-purwakarta.go.id
sipp.pn-purwakarta.go.id
www.sipp.pn-purwakarta.go.id

Certificate

The complete raw certificate details for pn-purwakarta.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS1UnRtJEKM+6FDlBq2L
0CJqlabvA1LK0GtRWOoS+EYEZ3wptXFCSiQl/EiqzVCP5Enk/rVxYEiAKqCm3ThE
F4qlRMFG/kioackSDJM4Nwuc/gAEmVbH39FETndAhvzZ+oZa27SY6r+bQXdOSxjR
FvTQHtDv7Po06Xz1dRPKtgfBV1E/g+EjKaEi0hI5Zz9Y0Q/55qXH5xP22Z637vf4
ISO2hE8qMWie8VHQo0TN3+HL/BeVKYQY/tJCGt1TmMgOyV0xYZaXJ/xsuDFPyjg5
x//dRxgqtQ8yuUCaz18FUdsmXSawBgB+qLcRS3NbMA27zgSDqKq4mWfU4dEGqoa2
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261370575746370766307628668341121869715670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 08:24:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 08:24:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pn-purwakarta.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25396252611821733884171760470950986922671047751562076924745828854744112220869721997062780942552286754693034301785992518469617962350206917915854360093483143481337674007971024021971587936885062324823058031927668258984590056859498319476426370093620083730369091260177498840355982788484049160405987443244099261407879872258083683460081132276683953033439956910895397254855005482453622774922997908513949357066586405067097337698922744683469205443046744657963581172044359944374184186596421110048471207802972137085619911042905348293919621758624477427435666645556923156783954662924439987379847709789728823778652020758660054955521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3693e8b71c2c4f524238dac9287dfeab68a3cce9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pn-purwakarta.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pn-purwakarta.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3c4735260000040300473045022100e7bdf32613ba21caff83ea50e17fa6f7bbf94927d9068ed180e12c573fcdc56a022028748fb11e3d93648f03eb2da03951f8266191b522518b4478ce6ac00e4ddf8b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3c47352d0000040300473045022100ff2fc261e39fec50a991801df689f91c62e4c1b6665c5269c1ba226eaf879ce602203572f18eb4f3e85c1d923dd6eabe7e7f15dfb71a595a525393bffe6099d0cf8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a22f910c4576aac429338b599f41e663b4c159d53d13a6acb4d545060ed276f06d65d781a2cfe49fb95306c392f226c9e610178b25edaf126cae84f520f20505c81fa0dcfb48b7a931bbcb61cde47000354e0560eb8e2c360f6ad7381355e7bb80d5f720f60f13fa960899309b3433be580bd0c7f184d4d29ce6fbdc50a1dec032dbca9008a7b5c64435503d1ae03f4fa68a59bc4739ee9a4f3969122c3d65c024e3e537983f7cd8531129ef26f5faa43ccae74911f6a286b9e68f0d24df89d2dbe203e55339088ee25c7a2320a870ca234034596d293c3df77e2667d810b17632c3933ca0891a162614387efaf37ff881c8e6b0fbdf87aaf11657ff02512d1c