tokomesinlampung.com

Issued by R3

About this certificate

This digital certificate with serial number 04:58:cb:0a:c5:2b:70:57:fc:6e:82:35:9f:22:d9:d9:59:42 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tokomesinlampung.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:cb:0a:c5:2b:70:57:fc:6e:82:35:9f:22:d9:d9:59:42
Serial Number (int): 378663881221272766238961936868522094844226
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:1b:78:cb:17:1d:75:cc:97:35:fe:bd:fb:de:f5:5b:c3:c3:00:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:a2:e9:78:4e:bc:ed:e3:6e:61:98:5e:39:20:0e:00:3c:b3:5c:2f
Fingerprint (sha256): 8f:18:ba:cc:ad:6c:fb:87:b4:d4:e1:24:c6:61:57:4c:8d:fc:04:86:85:4b:d3:77:c1:6a:9d:3c:f3:18:09:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tokomesinlampung.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tokomesinlampung.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tokomesinlampung.com
www.tokomesinlampung.com

Other certificates including the domain name tokomesinlampung.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tokomesinlampung.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISBFjLCsUrcFf8boI1nyLZ2VlCMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MTAwMzI0MTFaFw0yMzExMDgwMzI0MTBaMB8xHTAbBgNVBAMT
FHRva29tZXNpbmxhbXB1bmcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw0XiPdGIH2UEhZG7IXzcQ0v7zcbkGYmxYX55FDgsvbhzuV0iE+yOGcGh
quy1dtVklzWPiunZhAh+YXkhnwRbdXdwWz4E2sLNNq+qXEZhXxc5iNKJlMicfWNK
+hPlfzptMUWJ1neSOTQsUnkOxQemEra7hUxKAB5SsKUBGUUxPnYlTXoLUH2ru0Lc
UDssGtYI+o69tLSrIpwmenZuBpwRqRHIEAzCeRe8bBnIcWWvMSMR+rXDmgyvh1n+
0Y/5BsftDP5SafseID464j7pLdfseSdCqK55ke3DkxQW+0MAQx++pBOpfkhoz8lQ
BkIEkCPVdZhNxg8pCCNvd986DNoT6wIDAQABo4ICMTCCAi0wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBS1G3jLFx11zJc1/r373vVbw8MAKzAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzA5BgNVHREEMjAwghR0b2tvbWVzaW5sYW1wdW5nLmNvbYIYd3d3LnRv
a29tZXNpbmxhbXB1bmcuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYB
BAHWeQIEAgSB9gSB8wDxAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS
61IAAAGJ3bAUMgAABAMARzBFAiEA4zKFzXLBJL/0mKWuCOMacPBpJQ2EcYw9ROn7
2Fm3lL8CIHdFG/GSShVpsosf3tPrA0kMtm+p5VseBoZlt301IczQAHcAtz77JN+c
Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGJ3bAUIwAABAMASDBGAiEAmi+0
xumZQ+3LbKJpPX9MTpRBvPTWA6K01WB2UFqGGd8CIQCgBm0jfcvVQLwWs/9IXrMR
Cza6Ki36lcxLqsVgdOZkHjANBgkqhkiG9w0BAQsFAAOCAQEAPQByAF3mUun5gb30
/Bs4xFuP/voW2ly3lz7aeZnIi5bzDq74oCoFXyJljXUhLgdiiSdnPjnPUiPqC7u+
NOTa3dTE84z2OZyReBCMsztjnz52j54w9JWMkNJuZcq8fQtl9tP5qf2ZN+l5wXhU
Awl1cEVAlaUAJqs21OjVnqHI0ArHGdDYMy7ICERN2MNqrC6krRAQEX13FAFESf9o
3jQNrSDv+ax3MJUUvGKw0YP+c+y+Z0PHgsEF/bdpcyGb4PqpYrkOFaYCthcFSfTX
X5e1W1MRlb8wBZ+blAIdmNxmBhpBV9Er1grJENSCurAfoCaRAw2zXurtZ/g20Wtq
hQWNiA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0XiPdGIH2UEhZG7IXzc
Q0v7zcbkGYmxYX55FDgsvbhzuV0iE+yOGcGhquy1dtVklzWPiunZhAh+YXkhnwRb
dXdwWz4E2sLNNq+qXEZhXxc5iNKJlMicfWNK+hPlfzptMUWJ1neSOTQsUnkOxQem
Era7hUxKAB5SsKUBGUUxPnYlTXoLUH2ru0LcUDssGtYI+o69tLSrIpwmenZuBpwR
qRHIEAzCeRe8bBnIcWWvMSMR+rXDmgyvh1n+0Y/5BsftDP5SafseID464j7pLdfs
eSdCqK55ke3DkxQW+0MAQx++pBOpfkhoz8lQBkIEkCPVdZhNxg8pCCNvd986DNoT
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378663881221272766238961936868522094844226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 03:24:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 03:24:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tokomesinlampung.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24650930432731911384906308601066009785361767761931897992328266866885328826321267997858558131048732951435660204345625793524025482625988764185860478198198062379639655569219277327239411105470926486525907584810305625085712469618419381072655396580434374350893322218380356352513572433735412005988256120013016240575592068324899304194284024746027595454852116451129754564982434077271562545019230362022414881185248258963896554763300780712693171890717150133894500783323903929923640709791905171308181196766104089804039636816568683644309675902087973987445063779141171424703740330507847682047638456771965363050440014119465721140203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b51b78cb171d75cc9735febdfbdef55bc3c3002b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomesinlampung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomesinlampung.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189ddb014320000040300473045022100e33285cd72c124bff498a5ae08e31a70f069250d84718c3d44e9fbd859b794bf022077451bf1924a1569b28b1fded3eb03490cb66fa9e55b1e068665b77d3521ccd0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189ddb0142300000403004830460221009a2fb4c6e99943edcb6ca2693d7f4c4e9441bcf4d603a2b4d56076505a8619df022100a0066d237dcbd540bc16b3ff485eb3110b36ba2a2dfa95cc4baac56074e6641e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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