www.pas.pa-pasuruan.go.id

Issued by R3

About this certificate

This digital certificate with serial number 03:5a:be:c6:f4:80:7a:42:88:a6:95:66:fb:0c:f7:4e:09:09 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pas.pa-pasuruan.go.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5a:be:c6:f4:80:7a:42:88:a6:95:66:fb:0c:f7:4e:09:09
Serial Number (int): 292215857171229311261748069629696387451145
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:64:81:87:03:9c:af:b7:68:90:a0:55:a0:f8:64:de:11:ee:9c:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:df:88:3a:e5:47:4e:8c:da:26:dd:e5:e2:48:c4:cc:b0:40:36:8e
Fingerprint (sha256): 82:9d:46:fb:88:a4:29:28:4a:a2:9d:81:c9:77:a2:90:be:7b:c3:d2:bc:34:20:0c:fe:d5:f3:8c:6c:91:19:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pas.pa-pasuruan.go.id

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pas.pa-pasuruan.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amp.btklsby.go.id
amp.kejari-bandaaceh.go.id
amp.pa-kabanjahe.go.id
amp.pa-pematangsiantar.go.id
amp.pn-ngawi.go.id
autodiscover.suhu.ac.id
bji.pa-binjai.go.id
bre.pn-brebes.go.id
cdn.iwu.ac.id
cpanel.suhu.ac.id
cpcalendars.suhu.ac.id
cpcontacts.suhu.ac.id
kdr.pa-kedirikab.go.id
krs.pa-kraksaan.go.id
kulku.pa-kualakurun.go.id
mad.pa-kabmadiun.go.id
mag.pn-magetan.go.id
mail.amp.btklsby.go.id
mail.amp.kejari-bandaaceh.go.id
mail.amp.pa-kabanjahe.go.id
mail.amp.pa-pematangsiantar.go.id
mail.amp.pn-ngawi.go.id
mail.bji.pa-binjai.go.id
mail.bre.pn-brebes.go.id
mail.cdn.iwu.ac.id
mail.kdr.pa-kedirikab.go.id
mail.krs.pa-kraksaan.go.id
mail.kulku.pa-kualakurun.go.id
mail.mad.pa-kabmadiun.go.id
mail.mag.pn-magetan.go.id
mail.mal.pa-malangkab.go.id
mail.mat.pa-mataram.go.id
mail.med.pta-medan.go.id
mail.mor.pa-morotai.go.id
mail.pad.pa-padangsidempuan.go.id
mail.pas.pa-pasuruan.go.id
mail.pdn.pa-pandan.go.id
mail.presidenku.pa-pasuruan.go.id
mail.pry.pa-praya.go.id
mail.ras.kec-rasaujaya.go.id
mail.sid.pa-sidoarjo.go.id
mail.suhu.ac.id
mail.sur.pa-surabaya.go.id
mail.tar.pa-tarutung.go.id
mail.teb.pa-tebingtinggi.go.id
mal.pa-malangkab.go.id
mat.pa-mataram.go.id
med.pta-medan.go.id
mor.pa-morotai.go.id
pad.pa-padangsidempuan.go.id
pas.pa-pasuruan.go.id
pdn.pa-pandan.go.id
presidenku.pa-pasuruan.go.id
pry.pa-praya.go.id
ras.kec-rasaujaya.go.id
sid.pa-sidoarjo.go.id
suhu.ac.id
sur.pa-surabaya.go.id
tar.pa-tarutung.go.id
teb.pa-tebingtinggi.go.id
webdisk.suhu.ac.id
webmail.suhu.ac.id
www.amp.btklsby.go.id
www.amp.kejari-bandaaceh.go.id
www.amp.pa-kabanjahe.go.id
www.amp.pa-pematangsiantar.go.id
www.amp.pn-ngawi.go.id
www.bji.pa-binjai.go.id
www.bre.pn-brebes.go.id
www.cdn.iwu.ac.id
www.kdr.pa-kedirikab.go.id
www.krs.pa-kraksaan.go.id
www.kulku.pa-kualakurun.go.id
www.mad.pa-kabmadiun.go.id
www.mag.pn-magetan.go.id
www.mal.pa-malangkab.go.id
www.mat.pa-mataram.go.id
www.med.pta-medan.go.id
www.mor.pa-morotai.go.id
www.pad.pa-padangsidempuan.go.id
www.pas.pa-pasuruan.go.id
www.pdn.pa-pandan.go.id
www.presidenku.pa-pasuruan.go.id
www.pry.pa-praya.go.id
www.ras.kec-rasaujaya.go.id
www.sid.pa-sidoarjo.go.id
www.suhu.ac.id
www.sur.pa-surabaya.go.id
www.tar.pa-tarutung.go.id
www.teb.pa-tebingtinggi.go.id

Other certificates including the domain name pa-pasuruan.go.id

(limited to 100 certificates)
baru.pa-pasuruan.go.id
jdih.pa-pasuruan.go.id
pa-pasuruan.go.id
sipanjoel.pa-pasuruan.go.id
cpcontacts.pa-pasuruan.go.id
www.sipp.pa-pasuruan.go.id
jdih.pa-pasuruan.go.id
sipp.pa-pasuruan.go.id
smsbisa.com
jdih.pa-pasuruan.go.id
jdih.pa-pasuruan.go.id
dwitura.com
webdisk.pa-pasuruan.go.id
www.sipanjoel.pa-pasuruan.go.id
jdih.pa-pasuruan.go.id
sipp.pa-pasuruan.go.id
www.pas.pa-pasuruan.go.id
www.sipp.pa-pasuruan.go.id
pa-pasuruan.go.id
baru.pa-pasuruan.go.id
anwardjaelani.com
sipp.pa-pasuruan.go.id
pa-pasuruan.go.id
firman-its.com
jdih.pa-pasuruan.go.id
*.pa-pasuruan.go.id
mail.pa-pasuruan.go.id
cpcontacts.pa-pasuruan.go.id
hanif-im.com
www.pa-pasuruan.go.id
www.pa-pasuruan.go.id
mi.pa-pasuruan.go.id
jdih.pa-pasuruan.go.id
dwitura.com
jdih.pa-pasuruan.go.id
sipp.pa-pasuruan.go.id
smsbisa.com
anwardjaelani.com
mail.pa-pasuruan.go.id
jdih.pa-pasuruan.go.id
pa-pasuruan.go.id

Certificate

The complete raw certificate details for www.pas.pa-pasuruan.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN9TCCDN2gAwIBAgISA1q+xvSAekKIppVm+wz3TgkJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDIwNjA1MTRaFw0yNDA3MzEwNjA1MTNaMCQxIjAgBgNVBAMT
GXd3dy5wYXMucGEtcGFzdXJ1YW4uZ28uaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC04dwgBM/U8WAEOKdmaLImF25XMwcZrqKMOOmFxOaiwn3MaILc
BMrtQl9CwprxKwUSoyTD8IPycugktEReBdHLODcqMVIjP9QRVZ1BsqptZcF2dKPD
O/+Lf0z1+R/ZJuDeLamCVkaknWvRiEGsxtKBnRCik7Yduiw7Jbl+okwNH+dIxXZR
JCdxOlabv1DL9vNUPzM60WZdxHD0M1jFEEZ2kjPbtDo4T7pCdF+s9fIEadrcks8g
Grw5WXCJeN47GtsU1TzxPaIZ1ZVJdyTrGvX6HWdeQp41PVp/6J+h7s58GKoTYVZo
MsqzXNopM/YNbLh5giM2vfpkszZ6iah10Bq3AgMBAAGjggsRMIILDTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFEtkgYcDnK+3aJCgVaD4ZN4R7py9MB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIJGAYDVR0RBIIJDzCCCQuCEWFtcC5idGtsc2J5LmdvLmlk
ghphbXAua2VqYXJpLWJhbmRhYWNlaC5nby5pZIIWYW1wLnBhLWthYmFuamFoZS5n
by5pZIIcYW1wLnBhLXBlbWF0YW5nc2lhbnRhci5nby5pZIISYW1wLnBuLW5nYXdp
LmdvLmlkghdhdXRvZGlzY292ZXIuc3VodS5hYy5pZIITYmppLnBhLWJpbmphaS5n
by5pZIITYnJlLnBuLWJyZWJlcy5nby5pZIINY2RuLml3dS5hYy5pZIIRY3BhbmVs
LnN1aHUuYWMuaWSCFmNwY2FsZW5kYXJzLnN1aHUuYWMuaWSCFWNwY29udGFjdHMu
c3VodS5hYy5pZIIWa2RyLnBhLWtlZGlyaWthYi5nby5pZIIVa3JzLnBhLWtyYWtz
YWFuLmdvLmlkghlrdWxrdS5wYS1rdWFsYWt1cnVuLmdvLmlkghZtYWQucGEta2Fi
bWFkaXVuLmdvLmlkghRtYWcucG4tbWFnZXRhbi5nby5pZIIWbWFpbC5hbXAuYnRr
bHNieS5nby5pZIIfbWFpbC5hbXAua2VqYXJpLWJhbmRhYWNlaC5nby5pZIIbbWFp
bC5hbXAucGEta2FiYW5qYWhlLmdvLmlkgiFtYWlsLmFtcC5wYS1wZW1hdGFuZ3Np
YW50YXIuZ28uaWSCF21haWwuYW1wLnBuLW5nYXdpLmdvLmlkghhtYWlsLmJqaS5w
YS1iaW5qYWkuZ28uaWSCGG1haWwuYnJlLnBuLWJyZWJlcy5nby5pZIISbWFpbC5j
ZG4uaXd1LmFjLmlkghttYWlsLmtkci5wYS1rZWRpcmlrYWIuZ28uaWSCGm1haWwu
a3JzLnBhLWtyYWtzYWFuLmdvLmlkgh5tYWlsLmt1bGt1LnBhLWt1YWxha3VydW4u
Z28uaWSCG21haWwubWFkLnBhLWthYm1hZGl1bi5nby5pZIIZbWFpbC5tYWcucG4t
bWFnZXRhbi5nby5pZIIbbWFpbC5tYWwucGEtbWFsYW5na2FiLmdvLmlkghltYWls
Lm1hdC5wYS1tYXRhcmFtLmdvLmlkghhtYWlsLm1lZC5wdGEtbWVkYW4uZ28uaWSC
GW1haWwubW9yLnBhLW1vcm90YWkuZ28uaWSCIW1haWwucGFkLnBhLXBhZGFuZ3Np
ZGVtcHVhbi5nby5pZIIabWFpbC5wYXMucGEtcGFzdXJ1YW4uZ28uaWSCGG1haWwu
cGRuLnBhLXBhbmRhbi5nby5pZIIhbWFpbC5wcmVzaWRlbmt1LnBhLXBhc3VydWFu
LmdvLmlkghdtYWlsLnByeS5wYS1wcmF5YS5nby5pZIIcbWFpbC5yYXMua2VjLXJh
c2F1amF5YS5nby5pZIIabWFpbC5zaWQucGEtc2lkb2Fyam8uZ28uaWSCD21haWwu
c3VodS5hYy5pZIIabWFpbC5zdXIucGEtc3VyYWJheWEuZ28uaWSCGm1haWwudGFy
LnBhLXRhcnV0dW5nLmdvLmlkgh5tYWlsLnRlYi5wYS10ZWJpbmd0aW5nZ2kuZ28u
aWSCFm1hbC5wYS1tYWxhbmdrYWIuZ28uaWSCFG1hdC5wYS1tYXRhcmFtLmdvLmlk
ghNtZWQucHRhLW1lZGFuLmdvLmlkghRtb3IucGEtbW9yb3RhaS5nby5pZIIccGFk
LnBhLXBhZGFuZ3NpZGVtcHVhbi5nby5pZIIVcGFzLnBhLXBhc3VydWFuLmdvLmlk
ghNwZG4ucGEtcGFuZGFuLmdvLmlkghxwcmVzaWRlbmt1LnBhLXBhc3VydWFuLmdv
LmlkghJwcnkucGEtcHJheWEuZ28uaWSCF3Jhcy5rZWMtcmFzYXVqYXlhLmdvLmlk
ghVzaWQucGEtc2lkb2Fyam8uZ28uaWSCCnN1aHUuYWMuaWSCFXN1ci5wYS1zdXJh
YmF5YS5nby5pZIIVdGFyLnBhLXRhcnV0dW5nLmdvLmlkghl0ZWIucGEtdGViaW5n
dGluZ2dpLmdvLmlkghJ3ZWJkaXNrLnN1aHUuYWMuaWSCEndlYm1haWwuc3VodS5h
Yy5pZIIVd3d3LmFtcC5idGtsc2J5LmdvLmlkgh53d3cuYW1wLmtlamFyaS1iYW5k
YWFjZWguZ28uaWSCGnd3dy5hbXAucGEta2FiYW5qYWhlLmdvLmlkgiB3d3cuYW1w
LnBhLXBlbWF0YW5nc2lhbnRhci5nby5pZIIWd3d3LmFtcC5wbi1uZ2F3aS5nby5p
ZIIXd3d3LmJqaS5wYS1iaW5qYWkuZ28uaWSCF3d3dy5icmUucG4tYnJlYmVzLmdv
LmlkghF3d3cuY2RuLml3dS5hYy5pZIIad3d3Lmtkci5wYS1rZWRpcmlrYWIuZ28u
aWSCGXd3dy5rcnMucGEta3Jha3NhYW4uZ28uaWSCHXd3dy5rdWxrdS5wYS1rdWFs
YWt1cnVuLmdvLmlkghp3d3cubWFkLnBhLWthYm1hZGl1bi5nby5pZIIYd3d3Lm1h
Zy5wbi1tYWdldGFuLmdvLmlkghp3d3cubWFsLnBhLW1hbGFuZ2thYi5nby5pZIIY
d3d3Lm1hdC5wYS1tYXRhcmFtLmdvLmlkghd3d3cubWVkLnB0YS1tZWRhbi5nby5p
ZIIYd3d3Lm1vci5wYS1tb3JvdGFpLmdvLmlkgiB3d3cucGFkLnBhLXBhZGFuZ3Np
ZGVtcHVhbi5nby5pZIIZd3d3LnBhcy5wYS1wYXN1cnVhbi5nby5pZIIXd3d3LnBk
bi5wYS1wYW5kYW4uZ28uaWSCIHd3dy5wcmVzaWRlbmt1LnBhLXBhc3VydWFuLmdv
LmlkghZ3d3cucHJ5LnBhLXByYXlhLmdvLmlkght3d3cucmFzLmtlYy1yYXNhdWph
eWEuZ28uaWSCGXd3dy5zaWQucGEtc2lkb2Fyam8uZ28uaWSCDnd3dy5zdWh1LmFj
Lmlkghl3d3cuc3VyLnBhLXN1cmFiYXlhLmdvLmlkghl3d3cudGFyLnBhLXRhcnV0
dW5nLmdvLmlkgh13d3cudGViLnBhLXRlYmluZ3RpbmdnaS5nby5pZDATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjzgfH8QAAAQDAEgwRgIhAPpUI1sn
TQjQCeaq/b32BxXD7W0h1NJ4t5SBVdp2mnnOAiEAhVhhIa//2+AF9R1HXeXIEQL0
xT9N8LuyP/tvii0v5tsAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1
mwAAAY84Hx/WAAAEAwBGMEQCIARhSSaP3oAuUkEEUlk7W3d4NOV3gEe9jjV6+sj1
srmCAiBJOzsLB2SJKrDIoNb7XgRuatCpaLT/5oAoAqMlQEu3qDANBgkqhkiG9w0B
AQsFAAOCAQEATK5TVisHUciP8BqOZX0qN5hRZNPiVAFwG//+Y64ARyLCZVOmDY7s
hEWsf3oOpknXCdfNygtUGQ+pwj97L3TMQ8/Kb5ADutEnxNixYsJfQf3CkOoDofDk
jSSZJCfSYFTlWP7ip9f6b3+tuGCpPOLb8R+m/mJpu2pxNhgXwOoGnFzOz4fgnme4
6l0bSzJuSYE0O4gxQX8NtbDMMROit9Ba4kv1zWoimJ7IYZJ8/hJ2KNHJqiFQHCFm
/u9xv2wuwJV0Z+kTxUDr9y2P/TGi6G1ZWIgFqPvA2uxPB980ST+UCE6xcO2pP963
9kc4DbdAps9/of6f+szeHeoee0/+DC6WeA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOHcIATP1PFgBDinZmiy
JhduVzMHGa6ijDjphcTmosJ9zGiC3ATK7UJfQsKa8SsFEqMkw/CD8nLoJLREXgXR
yzg3KjFSIz/UEVWdQbKqbWXBdnSjwzv/i39M9fkf2Sbg3i2pglZGpJ1r0YhBrMbS
gZ0QopO2HbosOyW5fqJMDR/nSMV2USQncTpWm79Qy/bzVD8zOtFmXcRw9DNYxRBG
dpIz27Q6OE+6QnRfrPXyBGna3JLPIBq8OVlwiXjeOxrbFNU88T2iGdWVSXck6xr1
+h1nXkKeNT1af+ifoe7OfBiqE2FWaDLKs1zaKTP2DWy4eYIjNr36ZLM2eomoddAa
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292215857171229311261748069629696387451145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 06:05:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 06:05:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pas.pa-pasuruan.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22834270543643274365543684398669137324662075279786408497277435797747296492742524649649671442182686650710277914323332719254912667506245800684562401308661171686439617228573579382406041387635912915914104304710459148923932842941026788665901893128827528889744284959460045897357261118853657800778751792738988606815684430187855464114363015902769019946651805169428629223545898541595038185206106987088568848732149487469306180858100056324440336654602641421167383417301488765508954305693580543583106959176765194127807080133467872242104008201668825206739039367796753894972201853651103208315055048880211459477079218454514004662967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b648187039cafb76890a055a0f864de11ee9cbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2319 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.btklsby.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.kejari-bandaaceh.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.pa-kabanjahe.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.pa-pematangsiantar.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.pn-ngawi.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bji.pa-binjai.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bre.pn-brebes.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.iwu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdr.pa-kedirikab.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krs.pa-kraksaan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulku.pa-kualakurun.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mad.pa-kabmadiun.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.pn-magetan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amp.btklsby.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amp.kejari-bandaaceh.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amp.pa-kabanjahe.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amp.pa-pematangsiantar.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amp.pn-ngawi.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bji.pa-binjai.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bre.pn-brebes.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cdn.iwu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kdr.pa-kedirikab.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.krs.pa-kraksaan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kulku.pa-kualakurun.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mad.pa-kabmadiun.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mag.pn-magetan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mal.pa-malangkab.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mat.pa-mataram.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.med.pta-medan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mor.pa-morotai.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pad.pa-padangsidempuan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pas.pa-pasuruan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pdn.pa-pandan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.presidenku.pa-pasuruan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pry.pa-praya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ras.kec-rasaujaya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sid.pa-sidoarjo.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sur.pa-surabaya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tar.pa-tarutung.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.teb.pa-tebingtinggi.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mal.pa-malangkab.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mat.pa-mataram.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'med.pta-medan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mor.pa-morotai.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pad.pa-padangsidempuan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pas.pa-pasuruan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdn.pa-pandan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidenku.pa-pasuruan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pry.pa-praya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.kec-rasaujaya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.pa-sidoarjo.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sur.pa-surabaya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tar.pa-tarutung.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teb.pa-tebingtinggi.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amp.btklsby.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amp.kejari-bandaaceh.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amp.pa-kabanjahe.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amp.pa-pematangsiantar.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amp.pn-ngawi.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bji.pa-binjai.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bre.pn-brebes.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.iwu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdr.pa-kedirikab.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krs.pa-kraksaan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kulku.pa-kualakurun.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mad.pa-kabmadiun.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mag.pn-magetan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mal.pa-malangkab.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mat.pa-mataram.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.med.pta-medan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mor.pa-morotai.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pad.pa-padangsidempuan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pas.pa-pasuruan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdn.pa-pandan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presidenku.pa-pasuruan.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pry.pa-praya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ras.kec-rasaujaya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sid.pa-sidoarjo.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suhu.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sur.pa-surabaya.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tar.pa-tarutung.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teb.pa-tebingtinggi.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f381f1fc40000040300483046022100fa54235b274d08d009e6aafdbdf60715c3ed6d21d4d278b7948155da769a79ce02210085586121afffdbe005f51d475de5c81102f4c53f4df0bbb23ffb6f8a2d2fe6db007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f381f1fd600000403004630440220046149268fde802e52410452593b5b777834e5778047bd8e357afac8f5b2b9820220493b3b0b0764892ab0c8a0d6fb5e046e6ad0a968b4ffe6802802a325404bb7a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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