smkn19-smr.sch.id

Issued by R3

About this certificate

This digital certificate with serial number 03:17:9f:ae:09:ff:e3:7d:14:3c:04:e8:85:47:c9:65:da:8d was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=smkn19-smr.sch.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:9f:ae:09:ff:e3:7d:14:3c:04:e8:85:47:c9:65:da:8d
Serial Number (int): 269375603148260783465842209149530440850061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:68:3d:2b:4a:bc:9d:ac:ae:e6:a4:e0:cf:ee:0a:16:ee:2e:d0:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:67:cf:01:80:d5:64:36:68:84:31:85:79:dc:87:50:93:1f:0c:b6
Fingerprint (sha256): 3e:fc:ad:87:53:4f:0f:46:03:e6:c4:a0:2d:6e:b8:74:e2:e9:dc:84:7f:7b:67:12:74:3b:da:2f:2e:d6:4e:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate smkn19-smr.sch.id

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smkn19-smr.sch.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lestaritravel.my.id
*.smkn19-smr.sch.id
lestaritravel.my.id
smkn19-smr.sch.id
www.lestaritravel.smkn19-smr.sch.id

Other certificates including the domain name smkn19-smr.sch.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for smkn19-smr.sch.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5l/X3eu5OnoI6VqloQ+
onIMdbOH+BBU5wX4chN3l1muEnRESHcqKkehjVcUAdfxUt4uYT6ahPA+SB8PgaCf
nFwQME12LoGrhKmq60/ERHmuRyGERXdTSLcgQnYLR3x+cx9rY6q0A3mdo5mmu7w8
p04CyaEKRYFVwHZV5W8VojPhUjiyFoJK4SrqXd9JOqWYam4HhOdozeOhVA9VtgBb
uHsWYQA7jpQsBd0EiMdLhzN73K/WWGRV9HXSeP3OIvSepGCkbHD02jK2fogPkQz7
6PiIBjI70zw8od+RyRbX9kkdDv+htFBvnI/wdJL11iYyCybpxKUgzA2qJashEVJO
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269375603148260783465842209149530440850061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 22:57:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 22:57:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smkn19-smr.sch.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24187208711750018896887988655166401262125833051348303514754715150753705594003421006529298809743697848685770151203192547150307819467200486917238646659483688268047830608404336710590015129305126711103980033699512808787458444947204445509449922510015362007169141722415975678231606657527945859685185056367291548677534523729035460016107598330093464752471749989697345789997342594623135133040584006052664024773757535614435273161061489571209234542420357600220714512429405366320050366827213974722795073715153454668902803698451277117451468039301583159081352855418302853871683755654390509346401992474131185072235636395273849294543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d683d2b4abc9dacaee6a4e0cfee0a16ee2ed030
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lestaritravel.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smkn19-smr.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lestaritravel.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smkn19-smr.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lestaritravel.smkn19-smr.sch.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d294eb03b0000040300473045022100f62899416ed3789eafc909b8c85ced79d2a93c978031d30b97e94b7c7d32455802201d6ca4c6d4a62e5c5175ad3cd8ccbd95aa3b8f3e4ce56d934879f7b0ea5b3e1c00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d294eb0880000040300463044022055bf2f801b08db5f6021fd977fe267aa3a12c1dc15aa4f85ffde21a5907c06ae0220143040df4bcc16a62690574d2b7461eab5a51880dfb2663c36db1c323df16cc8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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