www.envelove.karmayasa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:19:be:22:80:9d:44:fe:ce:01:40:bb:6c:fc:56:2f:96:5f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.envelove.karmayasa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:be:22:80:9d:44:fe:ce:01:40:bb:6c:fc:56:2f:96:5f
Serial Number (int): 270096649434205129529257112576529605301855
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:73:9b:05:16:8e:ff:de:a2:91:e3:b9:10:e3:3e:37:18:39:e8:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:e9:75:99:fe:6b:0c:40:4a:c9:30:da:c1:3a:77:f3:c3:00:34:00
Fingerprint (sha256): 1f:7f:67:62:32:f4:38:75:59:35:4d:fb:dc:71:e2:3a:62:aa:9c:46:f7:3a:67:da:93:15:ea:72:bb:4e:80:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.envelove.karmayasa.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.envelove.karmayasa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.envelove.id
*.karmayasa.com
envelove.id
www.envelove.karmayasa.com

Other certificates including the domain name karmayasa.com

(limited to 100 certificates)
gis.karmayasa.com
karmayasa.com
*.karmayasa.com
oka.karmayasa.com
www.envelove.karmayasa.com
m.karmayasa.com
karmayasa.com
*.karmayasa.com
fufu.be
oka.karmayasa.com
karmayasa.com
edm.karmayasa.com
karmayasa.com
m.karmayasa.com
sectorswithoutnumber.com
uiuxtutorials.com
gis.karmayasa.com
sraya.karmayasa.com
karmayasa.com
karmayasa.com
gis.karmayasa.com
sraya.karmayasa.com
gis.karmayasa.com
www.cherki-hamza.com
karmayasa.com
oka.karmayasa.com
sraya.karmayasa.com
clementprevot.fr
*.karmayasa.com
oka.karmayasa.com
sraya.karmayasa.com
oka.karmayasa.com
karmayasa.com
m.karmayasa.com
sraya.karmayasa.com
m.karmayasa.com
m.karmayasa.com
gis.karmayasa.com
envelove.id
edm.karmayasa.com
www.envelove.karmayasa.com
karmayasa.com
oka.karmayasa.com
m.karmayasa.com
karmayasa.com
karmayasa.com
sraya.karmayasa.com
gis.karmayasa.com
karmayasa.com

Certificate

The complete raw certificate details for www.envelove.karmayasa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0izRcr4MKBwjt/cW9ML4
jvFA17hOKCUtn0XNs+c1+CYDaIzvt/oqmt3JZ4mpA34bCNhWhlNCIUCbUzF1mX6S
26ChitGJwLZX7mbJgeR0aBCVpvDk0I54wQAcq2KxyjpDyWDJbrBW2RS3ag5shQEg
nUX9L0q0k0VEsuLN8pJniVifiF4YkMKnMNDO66yC91nTwF77W1TmFoNnPfiNrW4L
5cXxradhQ4HMZ7NIOplgRhwnSqw9qehq1vxL1jslq0494zpqph/j9KG7xKVuLdcc
/EK3PqxJgagWFjtZtxK5bijAjYx3rdouOBMi31yswABhzDbxHJjnYz+vdAM5D59E
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270096649434205129529257112576529605301855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 04:22:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 04:22:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.envelove.karmayasa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26532144699831059136845246022691964696914356025101030416456443443519454809696895968912834460758478071694250663943004381480095079157135861936848436579965844224861276492195400601169451798258333053583370458476865732611687947148827262113026823395188123019825336631265661453198773508916702940021014771679650909290084283814001611734104287471766215038362459370694401310444675182185244351451142066409597637360428790904152373937389473939940561455821566455772617466380626542705840032476992425051289461892149393055913195988055698165618501567609063317464159660395769374034953241181930740178271826917025603316732866118635950654571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4739b05168effdea291e3b910e33e371839e89f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envelove.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karmayasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envelove.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envelove.karmayasa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7f086431000004030047304502201cc03495be2ddfc3a6aee7393d96a6c9517fdbd6c6b0f6428d36495efe7cc588022100e85ceb6158c208339ad9158426176eddd7ece6e511511df3f952be2d10717def007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b7f0863cf00000403004730450220275630ecb1440694e3b7a37ce1d9afd4e976700d0488577b137da489bc51500e022100d91501a420b6157a21542edee1d4c76e31a9095cacf05bedcf530a592f974142
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0007331b24795132247350b0033386b9240f75a2516a631bcfdc0e6c21113aeb41a12e4376600242922a22028335935ff41e8bcd0b29344189fee94e23c5d8b95f2c95c45e80f13b8de240a3eb43d9292174fcf75ece03b36f83e04a81e2a3a2d2e0387f6f0d41b86403cae5d13dc9eced01aa7da5ffb581b4bf671b658c2347eee41e57d4948ae66f9fe090776eb1af94ab2928c3649ab772fb8cff5952c388f355bf2abee4d1c43ba6f7c0acea4cf431d5f63e1f81584f5877151ad5c72fc7901b849c9fe1fc4d343754d497b83744951de4cf32e9db24306d9c61f3de95c687c73b1554beee6a09f733e0ba2231cd0354268ab41631edb1923d23b819a3034c