denpasar.xyz

Issued by R3

About this certificate

This digital certificate with serial number 03:a3:4a:97:bc:53:ce:c8:3f:6d:6d:a7:16:6a:bf:90:1b:91 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=denpasar.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a3:4a:97:bc:53:ce:c8:3f:6d:6d:a7:16:6a:bf:90:1b:91
Serial Number (int): 316902034331640370989881333912263269030801
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:3f:81:d8:3e:18:39:fa:0a:a3:6f:ae:33:d3:e4:f9:47:be:38:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:4f:2a:bd:3d:2a:9e:4a:20:c2:f4:70:bb:0e:0f:1f:81:03:e4:19
Fingerprint (sha256): 8d:d0:06:42:6e:e3:e7:15:81:a7:64:dd:e3:00:92:35:47:2d:1a:b6:8b:35:17:33:61:81:b8:3a:a8:5f:7a:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate denpasar.xyz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for denpasar.xyz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

denpasar.xyz
www.denpasar.xyz

Other certificates including the domain name denpasar.xyz

(limited to 100 certificates)

Certificate

The complete raw certificate details for denpasar.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316902034331640370989881333912263269030801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 21:09:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 21:09:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'denpasar.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973779628240620454415688636872490121264220016713562279696717281308478485241287401103970197205849866959966823484148647060931709272519672442050527719857299251069568093657589711521264789787814603520843962681155686773204844523905802691257964813883507402379377221413121766607590902393682415274394902653337006868401761818142265411166545636413172732095189418965688157096904188856214459938094300638003158469011889571524080661158293895423429687927414904424557718213941519495190851115383011996856420692837230990484839951636724707665719963236211551747701702292525282750638309042544641368180676055677942000399266249064902219487075932946265198457423210670748206327132503852785752743419924049563341975820571930352641522263197204081613474820486541538313151342610284278454665638283227871946867844087333920051451844662322268429331617998344854970775081888988105033782509020099132453181537592484316642759397203306141901194132763276865571635320881513459063013768317105957911962613133502750469272068682605069940273097124804674344437014112224177596205177148790887654645050218363774752787851261924085302255006461488799722910436996155508478313738682222187264295242790526999666228960831908659683245314933153362504434194567813239660873977292881852537421121849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d3f81d83e1839fa0aa36fae33d3e4f947be38ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denpasar.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denpasar.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5a414c310000040300473045022100a6ab99755f700cd23fbee4ed69f8cbd94ca3169719942653d38f7d1562838e9002206b89203064fed719ea86168d18dedfe150e953deb40950ee800569e8debcf1460076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f5a414d390000040300473045022074883b7db048563deeaa2c55b0c96b39e57b996978975609e91cf3ea7605b8ba022100e2874705a50ae2606816a65520d76b8c2db0941a6fe340d09ad8f9c02e1b6712
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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