travelumroh.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b5:bf:91:f2:d9:fc:70:68:b3:0d:81:ca:f2:6d:08:2c:91 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=travelumroh.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:bf:91:f2:d9:fc:70:68:b3:0d:81:ca:f2:6d:08:2c:91
Serial Number (int): 410294892495584016420992600364356198739089
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7a:65:f1:1e:52:ad:4e:66:26:85:8b:86:ca:ed:cf:59:c6:16:a6:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3c:04:1b:7b:6a:8d:1e:52:47:5a:ef:29:9a:ce:64:77:ab:71:b4:a0
Fingerprint (sha256): 41:77:fb:c8:4e:89:78:48:ef:ac:ea:6a:6f:8a:af:ec:2a:7e:51:0f:2b:1c:2b:35:eb:15:c7:43:c6:67:0a:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate travelumroh.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for travelumroh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.travelumroh.com
mail.travelumroh.com
travelumroh.com
travelumroh.tokomesinbali.com
webdisk.travelumroh.com
webmail.travelumroh.com
www.travelumroh.com
www.travelumroh.tokomesinbali.com

Other certificates including the domain name travelumroh.com

(limited to 100 certificates)
pakjingarwana.com
www.tokomesinbandung.com
www.travelumroh.tokomesinbali.com
travelumroh.com
travelumroh.com
travelumroh.tokomesinbali.com
travelumroh.tokomesinbali.com
travelumroh.com
*.tokomesinbandung.com
travelumroh.com
travelumroh.com
carabisnis.com
travelumroh.com
travelumroh.com
travelumroh.com
travelumroh.com
www.tokomesinpalembang.tokomesinbali.com
tokomesinbandung.com
travelumroh.tokomesinbali.com
travelumroh.com
travelumroh.com

Certificate

The complete raw certificate details for travelumroh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISBLW/kfLZ/HBosw2ByvJtCCyRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTMxNzI4MjdaFw0y
MDAyMTExNzI4MjdaMBoxGDAWBgNVBAMTD3RyYXZlbHVtcm9oLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBANZyBZPSgZZpx//wKVE7kn9JLFChCKOb
nZI21gzbOjizySH0pUm4idDg98vpK3kRc1r3NaZ4bL+rV5YuHA6vI0fc5A+JpwUy
rQtbbfwWwvsGqwHHaNiZqe2T3xfHnFXS3F/htqiRDduWXSSLqPrH1KpTzGhPR7yR
ea9ZgFgZObNNRucEyiAzw8F/gq7Z/7HTU1vMpXuJNcrHdwMPIviUgLV7omHqrCPT
uRtlRIz/hjTTxHBxUm7hCrO8PzUp/7Jpmn5DZX92E6lHBpMomxcsOEf4P0upOgdJ
lmi6vE0RZn+4tPy6rSeYX/tucisWQZ2UyKqYNnmYMySE+WMrvqiCS68CAwEAAaOC
Ax0wggMZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUemXxHlKtTmYmhYuGyu3PWcYW
pkMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCB0wYDVR0RBIHLMIHIghZjcGFuZWwudHJhdmVsdW1yb2guY29tghRtYWls
LnRyYXZlbHVtcm9oLmNvbYIPdHJhdmVsdW1yb2guY29tgh10cmF2ZWx1bXJvaC50
b2tvbWVzaW5iYWxpLmNvbYIXd2ViZGlzay50cmF2ZWx1bXJvaC5jb22CF3dlYm1h
aWwudHJhdmVsdW1yb2guY29tghN3d3cudHJhdmVsdW1yb2guY29tgiF3d3cudHJh
dmVsdW1yb2gudG9rb21lc2luYmFsaS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBep3P531bA57U2SH3Q
SeAyepGaDIShEhKEGHWWgXFFWAAAAW5mBh5mAAAEAwBGMEQCIEgmm20WnjNDj3Nc
UF+c00iDmVsreFHOktShx9DGNuT2AiA+SYkV9j139AhHDzZcR+GcqIMHQGTyvYq/
OkmSab3+SAB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbmYG
HlQAAAQDAEcwRQIhAOF7vHsZmD79IWxGH+O4fnoMf5k/FTCUfJOtLW9ttj+SAiBl
Z3CXY2QvnJ5M40FtWfenCEHQTuJRhhoImJvFsBb8SjANBgkqhkiG9w0BAQsFAAOC
AQEALswDaLr2g9TRM2Y4bDqlBJrOcqSbr6NQ+2yBMP0p3FLufbPbFb8CEC6W+5gP
hPnnYUxJVPsXcaf9Uf13kS+2vx3N5LFR0c8Nkml+NsQGw+HDRm1JkrxusFXyc0ib
Hq60JE3U9mxavpRKDns0fIUBV1LDNdDA19buM4KI1JZwGhEwGrQrNZpqRTwIpHJA
niOBlm+ZB1mtn5lI+YG8jp7a/GmVISQcNGE6SWEskL8/U0qCurFtiSjq94dj5L65
qyId0YK6slWn3//7+wTCP6OMJPB6aBWJWm5DUvWy1H1ZvsqNTz4a1zQ+MlLMamKm
x18n+Z3Se3VAHcjndGeLaLfuPA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nIFk9KBlmnH//ApUTuS
f0ksUKEIo5udkjbWDNs6OLPJIfSlSbiJ0OD3y+kreRFzWvc1pnhsv6tXli4cDq8j
R9zkD4mnBTKtC1tt/BbC+warAcdo2Jmp7ZPfF8ecVdLcX+G2qJEN25ZdJIuo+sfU
qlPMaE9HvJF5r1mAWBk5s01G5wTKIDPDwX+Crtn/sdNTW8yle4k1ysd3Aw8i+JSA
tXuiYeqsI9O5G2VEjP+GNNPEcHFSbuEKs7w/NSn/smmafkNlf3YTqUcGkyibFyw4
R/g/S6k6B0mWaLq8TRFmf7i0/LqtJ5hf+25yKxZBnZTIqpg2eZgzJIT5Yyu+qIJL
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410294892495584016420992600364356198739089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 17:28:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 17:28:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'travelumroh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27071223501407538239964463285631873396347937269579510880933070734477538659783774231719406640333423580373180342607120473230933261713849576361252817604202395743849116595396448767736915407983350257215202801018258164172878525024195407676798021302492923489617181065055947050397862819024722349759256159417509242672919366085958566476931711475554058227931161051810642804362423522307020401662295152321508960419038197668746575057914335098082216754808602965341244974836563329676907533497032492205461075935443198894076558231582960061740942710972934528337076473101033656862536312167368550092340512906304763052894525097418896329647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a65f11e52ad4e6626858b86caedcf59c616a643
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.travelumroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.travelumroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelumroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelumroh.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.travelumroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.travelumroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelumroh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelumroh.tokomesinbali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e66061e660000040300463044022048269b6d169e33438f735c505f9cd34883995b2b7851ce92d4a1c7d0c636e4f602203e498915f63d77f408470f365c47e19ca883074064f2bd8abf3a499269bdfe48007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e66061e540000040300473045022100e17bbc7b19983efd216c461fe3b87e7a0c7f993f1530947c93ad2d6f6db63f9202206567709763642f9c9e4ce3416d59f7a70841d04ee251861a08989bc5b016fc4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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