www.sipp.pn-sampit.go.id

Issued by R3

About this certificate

This digital certificate with serial number 04:a0:b6:7a:4a:f4:e4:06:50:7b:a5:d8:8c:2a:bd:d9:d7:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sipp.pn-sampit.go.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a0:b6:7a:4a:f4:e4:06:50:7b:a5:d8:8c:2a:bd:d9:d7:d8
Serial Number (int): 403136876910141289218043221519466688534488
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cb:0b:32:9b:16:23:d1:18:5a:cd:c6:aa:00:a6:93:84:33:79:f3:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:a5:c6:dd:b5:2c:8f:f1:06:68:e9:6a:e1:45:e4:60:dd:1c:4c:9a
Fingerprint (sha256): 27:22:cb:bb:52:9a:75:da:3a:f6:ed:b0:cf:b8:57:57:55:24:15:59:26:46:78:f3:f3:20:7b:ba:11:ce:5a:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sipp.pn-sampit.go.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sipp.pn-sampit.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sipp.pn-sampit.go.id
www.sipp.pn-sampit.go.id

Other certificates including the domain name pn-sampit.go.id

(limited to 100 certificates)
pn-sampit.go.id
pn-sampit.go.id
form.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
slot-server-thailand.pn-sampit.go.id
pn-sampit.go.id
www.sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
form.pn-sampit.go.id
pn-sampit.go.id
mahjong-slot.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
form.pn-sampit.go.id
server-luar.pn-sampit.go.id
pn-sampit.go.id
pn-sampit.go.id
slot-deposit-seabank.pn-sampit.go.id
www.form.pn-sampit.go.id
sipp.pn-sampit.go.id
gesitplus.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
pn-sampit.go.id
gesitplus.pn-sampit.go.id
www.infopegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
gesitplus.pn-sampit.go.id
www.gesitplus.pn-sampit.go.id
sipp.pn-sampit.go.id
infopegawai.pn-sampit.go.id
pn-sampit.go.id
pegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
pg-slot.pn-sampit.go.id
form.pn-sampit.go.id
sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
pegawai.pn-sampit.go.id
pn-sampit.go.id
form.pn-sampit.go.id
perpus.pn-sampit.go.id
pn-sampit.go.id
perpus.pn-sampit.go.id
webmail.pn-sampit.go.id
form.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
olympus-slot.pn-sampit.go.id
form.pn-sampit.go.id
infopegawai.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
www.infopegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
pn-sampit.go.id
pegawai.pn-sampit.go.id
www.infopegawai.pn-sampit.go.id
www.form.pn-sampit.go.id
sipp.pn-sampit.go.id
slot-thailand.pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pegawai.pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
perpus.pn-sampit.go.id
www.sipp.pn-sampit.go.id
pn-sampit.go.id
form.pn-sampit.go.id
sipp.pn-sampit.go.id
www.sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
pragmatic-slot.pn-sampit.go.id
perpus.pn-sampit.go.id
pegawai.pn-sampit.go.id
pn-sampit.go.id
pn-sampit.go.id

Certificate

The complete raw certificate details for www.sipp.pn-sampit.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISBKC2ekr05AZQe6XYjCq92dfYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDEwNDE3MjZaFw0yMzEwMzAwNDE3MjVaMCMxITAfBgNVBAMT
GHd3dy5zaXBwLnBuLXNhbXBpdC5nby5pZDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPXyS1EgyHtFsMxAOQ0wUfaCa2BsUzJz8pju5ySoIm4EK/L1V8f7
kODSx3WZsQBhBpOdKMtrovsnBd+Q16ubpcUjLGq+ekIkr67rPYNVIlNMaCpe6LEO
tCPB6k49iOdi5GYchUHSceR1fFFs3ln+rMyy0efbKSn1eUpvJvIEe8k7DJgOFama
TnCDxtLoGXsh03IG5Pg/YCecdVuq2t0eOInw+421h8syeJ23h36lKOQI43GNvplT
VBD22pAMAU24qI0OoV16vjL1G7FhNG0paaK20d5wysev7PySyXAFyygWnTW09hbb
5lGNJ2qrMeqdRzK7s/9DLQyiPJ46dR0drlcCAwEAAaOCAjAwggIsMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUywsymxYj0RhazcaqAKaThDN586MwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wOQYDVR0RBDIwMIIUc2lwcC5wbi1zYW1waXQuZ28uaWSCGHd3
dy5zaXBwLnBuLXNhbXBpdC5nby5pZDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4d
CYEl7bSZAAABia+HmM4AAAQDAEcwRQIhAKbauGniShz7AC+mxIXwsOiojNmc02Xh
xiMj14yBPcsRAiAXCmxuFDAuz/CkWKqq2mN/clQkvGoIAqoXgoum+bGzygB2AK33
vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABia+HmLAAAAQDAEcwRQIg
c0jpfLiFF2ezA53MvaL6qsrKbUJziQeTcOBgQ5kBCRUCIQC4151SqgvR3a8sMZ2V
Ask1VFJHzvuZqjwXXx4Ce2p/ZjANBgkqhkiG9w0BAQsFAAOCAQEACwSPOE/NmsBR
DW280xbEKwBfVqwv5hNzVI2/l7K5mn+oZQj6Z9ET+xMlMiZ0+9S6aBbSsv+VVMzN
+yMS5eUjskAoExeGC/6g0SQ2gAE5ZrJz06PSwhSwU+YDSTPAwgvGJQh2TxJ9VhOc
hUBL08ysBB1ffk0LSSbh/6iXC/i0ys27Xp0FFipHzuCb0TKiBmWgwLJ3d+iikFP2
czP5nInoIHRqhQEDbn+dsRgdypxIgNKlByFitlZrGG8pn7ECwqRWZvmECkcr7RbT
iloKs7F2WAePyWm3yunEBkiur9iMnRM3cTI/NkTEBsTsqDJSaV9gmxhAO+Sedtu0
EpER4Hu2KA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fJLUSDIe0WwzEA5DTBR
9oJrYGxTMnPymO7nJKgibgQr8vVXx/uQ4NLHdZmxAGEGk50oy2ui+ycF35DXq5ul
xSMsar56QiSvrus9g1UiU0xoKl7osQ60I8HqTj2I52LkZhyFQdJx5HV8UWzeWf6s
zLLR59spKfV5Sm8m8gR7yTsMmA4VqZpOcIPG0ugZeyHTcgbk+D9gJ5x1W6ra3R44
ifD7jbWHyzJ4nbeHfqUo5AjjcY2+mVNUEPbakAwBTbiojQ6hXXq+MvUbsWE0bSlp
orbR3nDKx6/s/JLJcAXLKBadNbT2FtvmUY0naqsx6p1HMruz/0MtDKI8njp1HR2u
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403136876910141289218043221519466688534488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 04:17:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 04:17:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sipp.pn-sampit.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31047864443061722948886279649771078863751782955130991318068549875376275327701140167686373597859304659160942906182976023872797356323520443561032196878179401788772125010273102129771535790456632373544262963144880552665062816498903026179895998609057761632864213420837183678588423613936350259420353854987316397872874738572990998314928838220555865432447212951195820858915710965836311619700733987679496294917555777682748479945686430148593818676594880984067520470940211218468569239277125213824351696343994804860327506635892043112888516181089948551109146119191531760672102262679298152487680019301408795725154091263669691067991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb0b329b1623d1185acdc6aa00a693843379f3a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipp.pn-sampit.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sipp.pn-sampit.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189af8798ce0000040300473045022100a6dab869e24a1cfb002fa6c485f0b0e8a88cd99cd365e1c62323d78c813dcb110220170a6c6e14302ecff0a458aaaada637f725424bc6a0802aa17828ba6f9b1b3ca007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189af8798b0000004030047304502207348e97cb8851767b3039dccbda2faaacaca6d427389079370e0604399010915022100b8d79d52aa0bd1ddaf2c319d9502c935545247cefb99aa3c175f1e027b6a7f66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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