nupragaan.or.id

Issued by R3

About this certificate

This digital certificate with serial number 03:9a:aa:b5:7b:b6:a1:f1:e8:3e:4d:2c:a1:8e:ef:25:9c:38 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nupragaan.or.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9a:aa:b5:7b:b6:a1:f1:e8:3e:4d:2c:a1:8e:ef:25:9c:38
Serial Number (int): 313967253375326120176619417697009086602296
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:51:fa:e0:61:07:6f:0e:cb:76:76:72:44:7d:2f:1f:34:8c:8e:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:10:03:ab:7a:59:6f:a9:a3:f7:9f:d4:1e:ea:7a:03:08:a6:b1:6c
Fingerprint (sha256): 5a:fd:8f:98:26:66:9b:fa:39:1a:f7:d1:20:07:97:33:d7:f6:f5:11:34:89:27:7c:e4:db:cb:fe:ce:46:29:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nupragaan.or.id

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nupragaan.or.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ac.id.esofthmd.masuk.id
*.alhamidiyah.ac.id
*.nupragaan.or.id
*.puncakdarussalam.net
*.steimadani.ac.id
alhamidiyah.ac.id
lib.pasca.instika.ac.id
lib.pasca.instika.ac.id.esofthmd.masuk.id
nupragaan.esofthmd.masuk.id
nupragaan.or.id
puncakdarussalam.esofthmd.masuk.id
puncakdarussalam.net
steimadani.ac.id
www.alhamidiyah.ac.id.esofthmd.masuk.id
www.lib.pasca.instika.ac.id.esofthmd.masuk.id
www.nupragaan.esofthmd.masuk.id
www.puncakdarussalam.esofthmd.masuk.id
www.steimadani.ac.id.esofthmd.masuk.id

Other certificates including the domain name nupragaan.or.id

(limited to 100 certificates)
nupragaan.bumiaswaja.com
*.nupragaan.or.id
dev.nupragaan.or.id
bumiaswaja.com
dev.nupragaan.or.id
lubab.sch.id
bumiaswaja.com
nupragaan.or.id
terkininews.com
bumiaswaja.com
keprisatu.com
keprisatu.com
nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id
bumiaswaja.com
dev.nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
*.esofthmd.masuk.id
steimadani.ac.id
dev.nupragaan.or.id
nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
klinik.nupragaan.or.id
nupragaan.or.id
terkininews.com
alhuda.sch.id
lib.pasca.instika.ac.id.esofthmd.masuk.id
nupragaan.or.id
klinik.nupragaan.or.id
lubab.sch.id
bumiaswaja.com
klinik.nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
yapphit.sch.id
ma.dev.nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id
nupragaan.or.id
nupragaan.or.id
nupragaan.or.id
dev.nupragaan.or.id

Certificate

The complete raw certificate details for nupragaan.or.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZlBg2UQRCHvF0aiwUKk
CYZ0aGw6szq/lydyVMjlX3IHtdMqJwQqyw3UXjndAyDu5jCVbo2ztTEvfEiVqKc0
nikNiG7fh4wya8SwD4F1ddXLggGC/JRrchwvtrFDewx5aouTwRM2DNIW4uz9/Q17
BlyPJDYWswm61cB5WJVpNXajrhYIZdLXCjrCVPpGY461KZ5zvGZl1J/Z2kt4cqid
FtaVAF9BVoJGR+OMMx+UD7HJ3hBW/LbkBpDfZNJ5Gy2p+99TDVnt8O8LBJlzT6d+
eYYwxeaqQlpKB8P66QWUlcyw+VDtyp5OU1sSc+aPZPdN5snZcx7fmRtxAWgHIVRl
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313967253375326120176619417697009086602296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 04:33:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 04:33:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nupragaan.or.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28479191923819397292566839630477439048360196717634676912749958016936784069614466509458750457623252555025958161144165029156538520330595826451221366710085448759918867610784200619026419474478116886510401464745634827702877411179609338189556904620578996635639611635397583485776437471242808484518204426742283763550774776521223783335972594301328738272929755750270587063316270182043364814029298433055139290999299770396249183201296079903296192100100471860782189829165856555876354290104278213944215579735282529698457754095389598439556538680176524945087873446446566878722295119307362260169747432707703764316085370355877848311173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2651fae061076f0ecb767672447d2f1f348c8ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (525 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ac.id.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alhamidiyah.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puncakdarussalam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steimadani.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alhamidiyah.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib.pasca.instika.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib.pasca.instika.ac.id.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nupragaan.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nupragaan.or.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puncakdarussalam.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puncakdarussalam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steimadani.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alhamidiyah.ac.id.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lib.pasca.instika.ac.id.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nupragaan.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puncakdarussalam.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steimadani.ac.id.esofthmd.masuk.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fae3d137d000004030047304502202f73272a3dd07830c4108a97fc31a763610871eb2ccf07f3b9355cae713d3395022100be557f830f542d4cb299125607b677a735c177d3fa07b838e5b76b0863b7f06d007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fae3d1420000004030046304402205d80fb0fc2cee7dfecc5666f74e9bc7ecace9f4d33f758cd90529b5480a4427f02203b4c61fc820eecabf99d686af376b25f66d9d428b49dba69c5997e9db0769245
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00138978db3a5b9e6da77563fb09cf8414b4061e6ccefd3b6274b930015d046bb751e5a92e4123a1525343f7c4c24fa95bc7bb6ff44360d2d82a14d7ad17560003dc93a25479f3756238674287023b9c2bbf31ea285edbba6674e9516ec7465d213449423eadbbe0ece85ceb4d19629e29798e6e5ce6921973130ffafa07953cdd872751bcff0f46e6e6e4b5c614980046945139f923750e7b6f7cc1508113ea9105a3223dee55722d2698ef955ca34377d0b798f4f6e3623ce3ad3b012f20387389e4fc05f8beea8d53f7122e01f93f23b3a8b48aeb6a9e6a7b42b302ee1a1ed9e5e82c85fb10b3ae844b2c7d6ada474bfe4e38d3868140b1b1d114eb72c69193