karmayasa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:36:69:a9:eb:2a:53:e7:fa:c5:d6:dc:65:9f:15:4a:ea:ed was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=karmayasa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:69:a9:eb:2a:53:e7:fa:c5:d6:dc:65:9f:15:4a:ea:ed
Serial Number (int): 279852556816457732905080314791983965727469
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:b0:6a:bf:70:e1:32:9b:3c:73:de:3e:3b:c4:68:24:b3:50:3d:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:31:d9:b4:ce:4e:8e:5c:62:42:3f:51:71:46:90:4d:94:28:aa:7f
Fingerprint (sha256): 4b:9e:9d:68:4d:73:21:06:8e:ad:b8:a8:54:84:23:eb:70:12:70:ec:0a:22:f4:f5:a1:af:6c:e2:33:9a:28:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate karmayasa.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for karmayasa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.karmayasa.com
*.mail.karmayasa.com
*.www.karmayasa.com
karmayasa.com

Other certificates including the domain name karmayasa.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for karmayasa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV44HhyMwj4Lcu6v7F5X
V835JUdGLPfuc3yNcx9pZwjOP5cQbzNp5hx8RXNtG3LdgFW/TvHZ4ATEKzJc6jaw
nwgJU3WjoxuScDUSm81hvsA4QLL1/MTLvubCPbAvrVoPT3E5kiVu55387JDTXW8L
x12Fc+4Hf6FuLZY4b46gVL+pTRqRjtKPCj6y3JT/DvNd8WqtATocuwUV4TFC/qEj
QFcmoG47sUBGAEzzHbkptpWpmOmPf3Lms/JdDldwO5glmt3NOSQyQec8BYeqdh3c
IRXAgsaMJx4kWLWiVWxGkq3AEd/WJZZfKccA1w7h+WcgeffDUYnOT5tTamJWxuR4
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279852556816457732905080314791983965727469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 11:43:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 11:43:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karmayasa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25925313741862919718998145807470649853042503860144749474177232293012716669378447226553462374385947206405583524442802773643336644633282023063343707339027542260827681591368622279615892509317298302694180368194207135957100630906279947706274459329243279835817117008093436187200427937859059793604916221845691810124280269182470931694758310547282076532784470499809268635828051686738617353640347414582488642354218617386628943629529202464234554387173578730009563416199585591237752502023785070279829069660761314868243191271822341072385179938569696720007984491895935801554922259296603621835989663980809589771855162677408171325453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86b06abf70e1329b3c73de3e3bc46824b3503d32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karmayasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mail.karmayasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.karmayasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karmayasa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a0385a3e2000004030048304602210091cf70f1b1e8e61f838639c47bb3f39f4c316e27dadb3bb36d1d6f23bc5f1cbd022100f7f9921d1b2e173a9c1a8c03379d61bba1f6b565486ef58a3b3c5edb42cb60d4007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a0385a3d60000040300483046022100f12df834bbee126582c2809417b36aea0e638a42cd5fefde40d33eecf84db988022100f176cca3d25a519b543f96df4a07fe051904945546b9bf2e68aa762d9281c1e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000610321789d13ec5303b7797437cb02d2119020f231e2f5721554ccd3976e6d49a85361670f97775441242ae4374ebda84a3a0e5126474d454181d8b761e03829e38e0b973aaa15cfa359c7789a4369c2028485a69089a9dab946013762bc449b1ecfc543579c65b5b7c53686800338e2fd7d734478f456c44bc6f759203d5e9b53107fd8d87e399b029f9e0125c697b41ae10774a03cf7275d5015dc88fd2a85115f39b0153343842e03f17be680a74cfcd9863cbbdcdc61aff427f783df4fd5f9f46b3aa5505b7fade9aae03c1d0699bf0d618e37c4f1231539206428bbd65753b7de7adee1051d1e62342bf02b4c7feb82347379dafc808107fd56a4df1f3