jikn.go.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:f6:09:6c:03:f7:b8:0a:4e:34:74:11:24:aa:c5:48:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jikn.go.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:f6:09:6c:03:f7:b8:0a:4e:34:74:11:24:aa:c5:48:3c
Serial Number (int): 330400934921759712648022533174220279859260
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:9e:2d:12:dd:2c:9e:0b:9b:94:63:86:aa:c5:cf:6f:e7:22:b1:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:42:1f:70:ff:e9:5f:1a:61:8c:6e:99:3b:39:f9:96:d0:da:82:95
Fingerprint (sha256): 17:f9:c8:b2:f8:20:69:b0:95:bb:21:d1:87:f3:db:1a:f5:ed:4d:03:ef:95:e4:df:3b:dc:30:6c:30:4d:11:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jikn.go.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jikn.go.id

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jikn.go.id

Other certificates including the domain name jikn.go.id

(limited to 100 certificates)
support.lazycoupons.in
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.netixsolutions.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.wrightwaytech.org
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
www.jikn.go.id
testkb.infasme.org
diklat.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
helpdesk.avoxis.com
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
helpdesk.avoxis.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
support.netixsolutions.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.detect-measure.com
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
www.jikn.go.id
sni207491.cloudflaressl.com
service.binmanager.com.au
www.jikn.go.id
www.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.nxtgentech.uk
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com

Certificate

The complete raw certificate details for jikn.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330400934921759712648022533174220279859260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 06:53:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 06:53:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jikn.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747063049683211298743363897249685840701163661411531541580194523951155102780408243945385623648648845274946484291541039253430016943846928971688280334127120738029069390089460491587427674421548518252450732051860244267211327776548787347017933327084565889502290052160368395935388906513106719192933477071052393481149727647341669666016365966469328860571740254424813624401796394056209450095320568016427250411078502798362301177757555181580791975494548160479510395014996009539076543366751261755305599142734647687098760310067304559670501521277714384220388452562388746109758119361564247279092828690964710397647941463558068053514922319483988515916664062054056745809353953002674113446448996736274597494389482977672134891656634032451089645577437180116116870167665148871037336987418480012324758358120261666547124908239406909572428560322420146443540916974473195479649524395903371553220847172889068377870569235198969803237535349305786799592871724662501980553057475888915381497332596712148256582893107261513155761713546554661519783685322946047725789026052492354411695430919333115913183034199373390610019615546770899821504048921815632288369617066041920320524932459775827234065603639483235908243975607065435063691548417206296973737200214590588374415589569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							739e2d12dd2c9e0b9b946386aac5cf6fe722b1f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jikn.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ffa9714500000040300473045022100be4d10c9bfe16535c44548d2a63e71f0b6cc237e2b47e7ba15c8f2c24ec3b50c022024996a14c5afea8a0d88981e9e8a0cb2fb6efecd45bc151cb45e2359ea02403e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ffa9714890000040300473045022100f9e1ed48be78e68d9a26c29c55f0405eef92defc66778fb13953cddeeeb9b592022006b60de825c69a792d80096a4d747c4248f712cb2207ba1f94fa25edcfe34a25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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