*.pabrikfurnitur.com

Issued by R3

About this certificate

This digital certificate with serial number 03:61:a5:78:4e:2f:fc:07:a3:4c:43:32:3b:d1:60:87:96:ed was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.pabrikfurnitur.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:a5:78:4e:2f:fc:07:a3:4c:43:32:3b:d1:60:87:96:ed
Serial Number (int): 294564194667368978373272551703164226082541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:91:ac:fe:cd:c4:91:9a:15:8e:3c:0e:54:e8:f1:29:7d:e4:2c:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:51:aa:d4:92:a5:13:64:8f:4f:c0:e2:46:bd:a6:bc:5f:13:d1:b0
Fingerprint (sha256): 25:03:60:98:d9:25:aa:e4:03:cb:06:71:95:06:19:4f:33:6e:42:e4:99:9a:b1:ce:b7:0e:e5:69:ea:6d:67:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.pabrikfurnitur.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pabrikfurnitur.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bortambang.com
*.furniturelab.co.id
*.pabrikfurnitur.com
*.pabrikmesinmarkajalan.com
*.pabrikrambulalulintas.com
*.primasaranamultindo.co.id
*.primasaranamultindo.com
furniturelab.co.id
pabrikfurnitur.com
pabrikmesinmarkajalan.com
pabrikrambulalulintas.com
primasaranamultindo.co.id
primasaranamultindo.co.id.bortambang.com
primasaranamultindo.com
www.furniturelab.bortambang.com
www.pabrikfurnitur.bortambang.com
www.pabrikmesinmarkajalan.bortambang.com
www.pabrikrambulalulintas.bortambang.com
www.primasaranamultindo.bortambang.com
www.primasaranamultindo.co.id.bortambang.com

Other certificates including the domain name pabrikfurnitur.com

(limited to 100 certificates)
www.pabrikfurnitur.bortambang.com
pabrikfurnitur.com
pabrikfurnitur.com
furniturelab.co.id
*.pabrikfurnitur.com
primasaranamultindo.co.id.bortambang.com
pabrikfurnitur.com
pabrikfurnitur.proukm.id
*.primasaranamultindo.com
www.furniturelab.bortambang.com
pabrikfurnitur.alatpembibitan.co.id
pabrikfurnitur.alatpembibitan.co.id
pabrikfurnitur.com
pabrikfurnitur.com
pabrikfurnitur.com
pabrikfurnitur.com
pabrikfurnitur.com
www.pabrikmesinmarkajalan.bortambang.com
pabrikfurnitur.com
pabrikfurnitur.com
www.furniturelab.bortambang.com

Certificate

The complete raw certificate details for *.pabrikfurnitur.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd2uTJ1GsP7d4GrewSYI
hxBmi0P9C6S1OCBFiee+xbPplzaOrEBvSOC08v9VcudQjrvO+WdK4c/nbcK046/A
Zdv/07W7CMJtdsvCGkIL1yCV7bJwV53vTV5Bpa9V2yGfqxFjsv2fw+D75LBTqbW9
5QvKRL3iHAxcXGnaCyquM/I+fAMB4Lrq/lc2vXB6mD2iMNtU1LsQLvPcsvWHGvPn
QYOsLB/0FCTFrrNGey2gReqBQXrpsBJ6+yGnJR327a6HBaiOnzx7A4XzhpXR2EPR
0kQaunXuPD/F7pCaURrf7ovPe30NDpADNmbD6XhCV5Ve8a3ZBhNQich4mQiVS7Zi
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294564194667368978373272551703164226082541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 00:02:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 00:02:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pabrikfurnitur.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22453494883575701014512240545257600387342158938227709011738477943000703277229354816643237167409357970971936868511805763204394262176860256772489333471575355828158749384463941974159888077243472805115518807691760698134870579865754751965819233432197958455452244464930252414336208958565958365714108440373661512744795916045853156452153072600553506615307842803071199293101200579240051210502508945365170483007306783063941253478228124561324535931940582308446857607117886940318105081439573263007858652043676984965630441256547653429773607938467845522053715425390467590224748401837302865531042154783140109836572883223285687804543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc91acfecdc4919a158e3c0e54e8f1297de42c33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniturelab.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pabrikfurnitur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pabrikmesinmarkajalan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pabrikrambulalulintas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primasaranamultindo.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primasaranamultindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniturelab.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pabrikfurnitur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pabrikmesinmarkajalan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pabrikrambulalulintas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primasaranamultindo.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primasaranamultindo.co.id.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primasaranamultindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furniturelab.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pabrikfurnitur.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pabrikmesinmarkajalan.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pabrikrambulalulintas.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primasaranamultindo.bortambang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primasaranamultindo.co.id.bortambang.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa0a979de000004030047304502203a221437cecb3c4cb0f456afb38b3ab9532c014ea190dadecb8a03084ee9363a022100db93c8fb117205b8627be7c6cf823c5c95061738b4f203a032993c89d1179e61007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa0a97a0b00000403004630440220377e39a3194bd4c7d73d3dbb2e0439adb03d96ac218d92639b678a44e6d0d318022027a1927e563c435060f8ae9902d8c1e3b23388c1015df0e81d14ad78d07f19cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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