mail.kedai.space

Issued by R3

About this certificate

This digital certificate with serial number 04:65:35:f9:ba:5e:f7:87:65:04:f1:a5:ba:7b:1c:f3:0e:a2 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.kedai.space

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:35:f9:ba:5e:f7:87:65:04:f1:a5:ba:7b:1c:f3:0e:a2
Serial Number (int): 382889408531802387144653120298116780854946
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:b6:9a:94:da:1b:7f:f0:c6:bb:7b:0f:0b:ce:f7:82:d4:f0:0c:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:25:75:82:75:c0:36:d8:6c:16:e0:a7:d9:ae:0a:f1:ac:53:34:f0
Fingerprint (sha256): 3a:42:fe:cf:d3:fc:81:cc:97:48:cb:7e:62:00:93:05:e2:dd:82:5b:70:c1:0b:b5:86:01:ac:51:97:08:f6:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.kedai.space

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.kedai.space

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.daihatsumedan.id
*.toyota-depok.net
autodiscover.kedai.space
cpanel.kedai.space
cpcalendars.kedai.space
cpcontacts.kedai.space
daihatsumedan.id
daihatsumedan.id.kedai.space
honda-bogor.kedai.space
kedai.space
mail.kedai.space
sanro.kedai.space
toyota-depok.kedai.space
toyota-depok.net
toyota.kedai.space
webdisk.kedai.space
webmail.kedai.space
www.daihatsumedan.id.kedai.space
www.honda-bogor.kedai.space
www.kedai.space
www.sanro.kedai.space
www.toyota-depok.kedai.space
www.toyota.kedai.space

Other certificates including the domain name kedai.space

(limited to 100 certificates)
*.suzukipontianak.co.id
makassardaihatsu.com
*.mobiltoyotabanjarmasin.com
hyundaibsdcity.co.id.kedai.space
honda-palembang.co.id
mail.kedai.space
*.dealertoyotabekasi.co.id
toyotabanjarmasin.net1.kedai.space
www.hyundaibsdcity.co.id.kedai.space
www.hondacikarang.id.kedai.space
toyota-depok.co.id.kedai.space
www.hondacikarang.id.kedai.space
*.benellimakassar.co.id
*.hyundaidepok.net
toyota-depok.co.id
www.infotoyotariau.com.kedai.space
www.suzuki.kedai.space
*.infotoyotamakassar.com
dealertoyotabekasi.co.id
toyotakallamks.id.kedai.space
mobiltoyotabanjarmasin.com.kedai.space
toyotabatam.co
*.hyundaimakassar.net
www.toyota-medan.kedai.space
www.infotoyotariau.com.kedai.space
www.baliarmadarentcar.kedai.space
dealerhondamakassar.id.kedai.space
www.dealerhondamakassar.id.kedai.space
suzukipontianak.co.id
*.suzukitangerang.id
mitsubishibanten.com
honda-palembang.co.id.kedai.space
dealertoyotabekasi.co.id
*.toyotakallamks.id
www.makassardaihatsu.com.kedai.space
dealertoyotabatam.com

Certificate

The complete raw certificate details for mail.kedai.space in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykUcWLBq2tOQ1Vf0xwOi
jdNbxL2O0nHGi6L8PsAXtBsZDroFTh5zxLk58hmMGiAV1INcS8XDbIzp46IVuMAe
WdgRxf0Ac3KeI17As27ZT5VmQjrJ+9B9v2kZQDnskHYTJKrZinkQhTj/v+v987Og
Zd6Gb46fMgGUckCp+TTOUOKLjlIq0Ak8HisERmj3Luk2QNeh2l+opbagr/6dnpT4
kEF1umyIbkK7SxU6V2LXR5JZsuc56XWLVKjfEZUs6gqsqvP+zvTeVqcxQjvYg/Or
wYEIARRAvQkCdos0MHq4udQpNC/83OWu6SqK7zim0exfZ7PDMzYHzDBsKMrMgSsV
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382889408531802387144653120298116780854946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 23:58:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:58:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.kedai.space'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25534217373433449603515439801192685113097735733593055200505074236711680670907933057003849345235014969141996232730107992860146345803095395516757601588782011171567175407935314479104024259117431260939857317156309092379187636076939077943194820817339248221257645992271222907522599485990985042285649758210209604292657495597983854677662180090555811071296687579238772861303877981884117005820207419539420287989091460332024118613544256447022211833921148225330896918883561322938964473342311805988466827357732415993886821565210400300507133104692533279874907062803218040576369342134634449344462693161706557228404520914295469053357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1b69a94da1b7ff0c6bb7b0f0bcef782d4f00ce7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (525 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daihatsumedan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyota-depok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daihatsumedan.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daihatsumedan.id.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honda-bogor.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanro.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota-depok.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota-depok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daihatsumedan.id.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honda-bogor.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanro.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toyota-depok.kedai.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toyota.kedai.space'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5a0a8d6d0000040300473045022100e9cc1dae21843f62c9a3861f4352fc64c12372480388ddae3b780ddcfb52799e0220519e968c4083a7496343b53647aec05ffdc853ddd7747bce01da17395ee6ac13007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b5a0a8d69000004030047304502202c52069c6b0a16413cd3c56b7f2a5624a2a4c25db9f60c4177a453b18647132f022100f8f6486b9b7c474ac8541b5614c5a79a9d02862f7c57d9c5a8cc433f1cacc2c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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