pakjingarwana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:0e:71:0c:db:a5:88:90:40:77:b8:05:80:fc:3b:a2:46 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pakjingarwana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:0e:71:0c:db:a5:88:90:40:77:b8:05:80:fc:3b:a2:46
Serial Number (int): 342683539671662148921546823280064301081158
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:08:e8:1a:6a:fd:44:6a:57:cd:83:20:aa:fe:63:43:ab:0e:b9:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:42:86:ed:05:bc:09:73:51:38:d8:2d:d8:96:16:f3:dd:c1:e8:e2
Fingerprint (sha256): 8b:ca:df:39:8d:a0:45:17:24:c5:0d:4f:38:5e:1c:0a:76:f8:7e:51:e1:b5:3d:3b:49:ea:9f:81:2a:3f:91:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pakjingarwana.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pakjingarwana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.niaga.tv
cpanel.pakjingarwana.com
cpanel.tokomesinpalembang.com
mail.niaga.tv
mail.pakjingarwana.com
mail.tokomesinpalembang.com
niaga.tokomesinbali.com
niaga.tv
pakjingarwana.com
pakjingarwana.tokomesinbali.com
tokomesinpalembang.com
tokomesinpalembang.tokomesinbali.com
webdisk.niaga.tv
webdisk.pakjingarwana.com
webdisk.tokomesinpalembang.com
webmail.niaga.tv
webmail.pakjingarwana.com
webmail.tokomesinpalembang.com
www.niaga.tokomesinbali.com
www.niaga.tv
www.pakjingarwana.com
www.pakjingarwana.tokomesinbali.com
www.tokomesinpalembang.com
www.tokomesinpalembang.tokomesinbali.com

Other certificates including the domain name pakjingarwana.com

(limited to 100 certificates)
pakjingarwana.com
pakjingarwana.com
www.pakjingarwana.com
pakjingarwana.com
pakjingarwana.com
www.niaga.tokomesinbali.com
www.tokomesinbandung.com
tokomesinbandung.com
*.tokomesinbali.com
pakjingarwana.com
niaga.tv
niaga.tv
pakjingarwana.com
pakjingarwana.com
*.tokomesinbandung.com
niaga.tv
pakjingarwana.com
pakjingarwana.com
pakjingarwana.com
pakjingarwana.com
cetakanwaffle.com
www.cetakanwaffle.tokomesinbali.com
tokomesinpalembang.com
pakjingarwana.com
pakjingarwana.com

Certificate

The complete raw certificate details for pakjingarwana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprL0WkcQzuQtl909R0aO
MbnW8DNsFtYRrNDqsmGvDUFZne6uUfdIE+S01QBnk605zPx4C5uNM71iBPol8t8K
q71fnOAetntiG6o0XDc2wL8dOcQCPcwIMs+ZIJRdLGComNkVe0KJ8hWgBf55mK34
iYijx7UOct8rWkCCXwGQZ+u1CTJ4x6T+rBYD5DNOgqpET1rRVb+gKxxGjkNFZpXd
aSryoC9SeE8dqnDwy+j9p2wLbRPCL2mBpxBKKN2miSgp1jVCJBvaUi8Uuy/eKlp4
8q/Ex4/pUg9zI7kQ8+c+8Nrx+6BgJWjY9D/Srl8kmXiUuKG5IP7i/+Qto/a7HS6g
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342683539671662148921546823280064301081158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 18:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 18:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pakjingarwana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21043804378526023941903516795523656671723681550788234779423432464255776633940738846149058973737613228909262871131828991600828623838546917756850242155155121041320351156482669548775891606230200905901900132295465015538532692966603084281957609095701171532516189726373533978750523527482840644684384476245372953721357300940192329712595285733747279596911417236524859221817661699220403579163377566325335991046755454377361602248114752082475289953266871385752486804358170807252188884837988869533908299540457895028885710799774880580228307452994415340404808984905200428663848818596299647577873059017092415823872957692918400721041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b508e81a6afd446a57cd8320aafe6343ab0eb91a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niaga.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakjingarwana.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomesinpalembang.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niaga.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakjingarwana.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomesinpalembang.tokomesinbali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007400e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016775a69a35000004030045304302200a225cee169466c642cdb60ef63e7f2c2f355cd97765e51d5116e232aa032870021f4fa9167e62fe00fa9b5df9ab11bc7773421f782d8eb26855e22abfe166f151007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016775a69a350000040300483046022100bb06ede0389995b2c8dc8d6d64dcee7688d646557e4db61e6018537ed3acc09f022100b8655c281009881b59302feb5701823a933e76418166bda72af44233fb59ff99
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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