ipick.com.my
Issued by R3
About this certificate
This digital certificate with serial number 04:0e:00:c9:3e:d3:71:a5:25:5b:c7:92:6a:86:3a:67:32:a3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ipick.com.my
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0e:00:c9:3e:d3:71:a5:25:5b:c7:92:6a:86:3a:67:32:a3Serial Number (int): 353214141789864399747540161318053984285347
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e2:60:33:06:eb:9e:77:62:b8:4d:89:55:db:75:54:9c:0d:f2:b6:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6c:f9:77:09:fd:85:1f:8c:bc:33:20:27:ca:b3:93:ec:06:a5:27:35
Fingerprint (sha256): 69:a1:b1:5e:5b:0b:f6:20:2f:30:08:c4:6a:75:2a:00:b1:91:5b:a6:f0:75:c8:0c:aa:9f:05:e3:57:5f:e3:d6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ipick.com.my
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ipick.com.my
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ipick.com.my
www.ipick.com.my
www.ipick.com.my
Other certificates including the domain name ipick.com.my
(limited to 100 certificates)
vodras.com
www.mbvidro.com.br
easytalent.co.za
www.tracking.sb-group.dk
workers.skyloft.nu
r42.ch
www.tracking.sb-group.dk
www.cvmax.online
ipick.com.my
kwickly.app
shop-eu.beryl.cc
customer.ipick.com.my
ipick.com.my
www.gaudtech.com
phonepad-v2-pro.bop-tech.com
ishtaenergy.co.in
v2.hiepsi.donbosco.cc
www.nkslearning.com
www.gaudtech.com
aiegfeedback.online
r42.ch
r42.ch
doitdude.app
ipick.com.my
jarborist.pl
www.mbvidro.com.br
easytalent.co.za
www.tracking.sb-group.dk
workers.skyloft.nu
r42.ch
www.tracking.sb-group.dk
www.cvmax.online
ipick.com.my
kwickly.app
shop-eu.beryl.cc
customer.ipick.com.my
ipick.com.my
www.gaudtech.com
phonepad-v2-pro.bop-tech.com
ishtaenergy.co.in
v2.hiepsi.donbosco.cc
www.nkslearning.com
www.gaudtech.com
aiegfeedback.online
r42.ch
r42.ch
doitdude.app
ipick.com.my
jarborist.pl
Certificate
The complete raw certificate details for ipick.com.my in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgISBA4AyT7TcaUlW8eSaoY6ZzKjMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMTgyMTAwNDJaFw0yMzA2MTYyMTAwNDFaMBcxFTATBgNVBAMT DGlwaWNrLmNvbS5teTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANSk rDisRba6yYhhsLNNqkrh+CeDxIBM7QlHTlgUW1yH/l+SourkgV3rwMcsObYwzZvO 2T7gytzmFw6Byhi9wyeyhW3FiqxSWD6UdOSPamsg1iIeF1in0iodQPgPXmTqUSNx Y9opLTHlUBoDI/q6Do+xtFQgywtD2lOQScL8Q7EPQvITkRkKs1AVbEa4AC4hgk0a DC5TbmZTOKryyIEEKN/uTxQjmlkNJmiwRLEnJg9INoSk09i+9n4NaQRy97j7CgDJ x7z9QJiRZWAXthUGsUU/7twLy8yVubba/l9q9AtJbllSEgh5B3rc4q+ykJtICs9/ HmYo/KapK272Um89/zVsKiCKYSBcPo34PDi1ClpkMeAVjCaCa9d8oK08+IVxSAe7 3p71z/2miuh4vyGFERCKVFUb6Br7+cBRzTilmuvA8DyI175JRtCdHMKq7tfW/T0y P3mxmaVastBSsFwvuGHDYq0NbvkxxUQUNpaa7On1EQwAVI2WXp65shx/l0CEgKNz 9JlLs8uz871sTelM3lt5tsog1QmhG0fX3Vym/Adqb3vHdcjNiV1iGV7l+gPULj7X ktnLBTr9MGFb1IxLt5AgN1aq0UBC8Eu2hcnOo5UyBKzWHuZgEcMjZd6NMtUJ1BlX g4n0bHnMfcYfEgl09ncXZsD0451OGqdWUV27CFnxAgMBAAGjggJYMIICVDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFOJgMwbrnndiuE2JVdt1VJwN8rZdMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDGlwaWNrLmNvbS5teYIQd3d3Lmlw aWNrLmNvbS5teTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl 7bSZAAABhva9PDkAAAQDAEYwRAIgbWg1tppjDLsXZz2k8N2Y+GBbclOU0/JKMSlR gx/Snk0CIC97w+b2acsaURb3px0V8nVZtP8KyVgAgaYD0gMcimJaAHYArfe++nz/ EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGG9r08ZQAABAMARzBFAiBRNq2q hYgx5ciRtltQtE3ix1AwQPUEglsNPuEedCZs6QIhAKEARmgHM/FlBrqyzj1dC0lL PcqBKx/HVgSgmrPivPe7MA0GCSqGSIb3DQEBCwUAA4IBAQAXTWLEET4fI31uoNDB H7x9mbc41milLf0hybB7AvDA+NAfelYmE8/1fJMzmEC0VrWgFtVJekPKnA0Oewke QbhpfVNl7pI3UuQUhORWnqjzOCAEncx+Z8HweuLPLRzSGA8bb6+VTLE0+2BDmrEw SzqQREvIKzouuFEz1MED4v74HkjUz4BBautI9Q72PAo9h7vWj72qhVr/oWbMBSze rFfiPuQy8nkAeHr8KX84pfaUwEe16G7NF2bmXNeRc9DJXY7IoJHvPzbbFW+euu/4 cBFAwTZW1aOWeGqvgx2T69WygxKmFABJ3QgrF2UYnfuGB6z5k3ETkgDy+QR+Gb8u VV/j -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1KSsOKxFtrrJiGGws02q SuH4J4PEgEztCUdOWBRbXIf+X5Ki6uSBXevAxyw5tjDNm87ZPuDK3OYXDoHKGL3D J7KFbcWKrFJYPpR05I9qayDWIh4XWKfSKh1A+A9eZOpRI3Fj2iktMeVQGgMj+roO j7G0VCDLC0PaU5BJwvxDsQ9C8hORGQqzUBVsRrgALiGCTRoMLlNuZlM4qvLIgQQo 3+5PFCOaWQ0maLBEsScmD0g2hKTT2L72fg1pBHL3uPsKAMnHvP1AmJFlYBe2FQax RT/u3AvLzJW5ttr+X2r0C0luWVISCHkHetzir7KQm0gKz38eZij8pqkrbvZSbz3/ NWwqIIphIFw+jfg8OLUKWmQx4BWMJoJr13ygrTz4hXFIB7venvXP/aaK6Hi/IYUR EIpUVRvoGvv5wFHNOKWa68DwPIjXvklG0J0cwqru19b9PTI/ebGZpVqy0FKwXC+4 YcNirQ1u+THFRBQ2lprs6fURDABUjZZenrmyHH+XQISAo3P0mUuzy7PzvWxN6Uze W3m2yiDVCaEbR9fdXKb8B2pve8d1yM2JXWIZXuX6A9QuPteS2csFOv0wYVvUjEu3 kCA3VqrRQELwS7aFyc6jlTIErNYe5mARwyNl3o0y1QnUGVeDifRsecx9xh8SCXT2 dxdmwPTjnU4ap1ZRXbsIWfECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 353214141789864399747540161318053984285347 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 21:00:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 21:00:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipick.com.my' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867508785255923993908840987397582827569605295087603523700766759697900730435629716013446125255955560666097112377257488970951542632472086934763534299841904242804710036972666977857797351272255343595062438176441239531565623262713863712193900972572807112509834605394078917940443040048441982940292045049573530758636148192564527489421430322805693918029344333844297526281102223963730342717539277829073181151370812275559640523314385692590420855442341397662391195645753029293053135039545822576762082244464385508047721236452472122417825763164624174815175912265586182550080334719422119428115018938762747493780479855300083487047207707657922522037594388297062950971561991917243869963031832427926976572286767209662139180054576993909239421584584294372871799000829224935397034018964428203278164478339566518105917546625622653281009888970974921382668311919184844859837732741497531239163002043320198026181451801556995241348162840775584638219298461759787442461526119082781966307193218955468859254826268970391160623497429406996705392526715560478066181429334402370537326440328079007935805345463251244529193395759585323619991327619767231348224791108069748073400209378963497294198728571317649966756294012525428225284949876852013936288481332613017481245121009 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2603306eb9e7762b84d8955db75549c0df2b65d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipick.com.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipick.com.my' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f6bd3c39000004030046304402206d6835b69a630cbb17673da4f0dd98f8605b725394d3f24a312951831fd29e4d02202f7bc3e6f669cb1a5116f7a71d15f27559b4ff0ac9580081a603d2031c8a625a007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186f6bd3c65000004030047304502205136adaa858831e5c891b65b50b44de2c7503040f504825b0d3ee11e74266ce9022100a10046680733f16506bab2ce3d5d0b494b3dca812b1fc75604a09ab3e2bcf7bb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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