jubri.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:65:d0:f9:83:8f:94:cc:10:96:51:66:2f:e1:d9:63:dd:cf was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jubri.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:d0:f9:83:8f:94:cc:10:96:51:66:2f:e1:d9:63:dd:cf
Serial Number (int): 383095437759468144868500056355535650545103
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:13:02:f4:18:5c:d5:a4:3b:db:6a:01:f9:f9:5b:92:54:a5:9a:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:6e:5a:80:c5:14:2c:60:7f:17:27:5e:ae:9e:bc:95:2b:df:8c:6b
Fingerprint (sha256): 92:35:cc:19:8b:8d:15:5c:f2:9b:98:70:59:33:36:a5:84:6e:a9:a3:8f:34:ef:68:3b:5b:ee:a1:72:ec:b5:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jubri.net

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jubri.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alimron.bumiaswaja.com
alimron.sch.id
autodiscover.alimron.sch.id
autodiscover.jubri.net
cpanel.alimron.sch.id
cpanel.jubri.net
cpcalendars.alimron.sch.id
cpcalendars.jubri.net
cpcontacts.alimron.sch.id
cpcontacts.jubri.net
jubri.bumiaswaja.com
jubri.net
mail.alimron.sch.id
mail.jubri.net
webdisk.alimron.sch.id
webdisk.jubri.net
webmail.alimron.sch.id
webmail.jubri.net
www.alimron.bumiaswaja.com
www.alimron.sch.id
www.jubri.bumiaswaja.com
www.jubri.net

Other certificates including the domain name jubri.net

(limited to 100 certificates)
jubri.net
jubri.net
jubri.net
jubri.net
jubri.net
jubri.net
jubri.bumiaswaja.com

Certificate

The complete raw certificate details for jubri.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU8oea4eP4T4xhJbJ0hh
L2zq7XYPbNWupSNsodKlEplYaaui5yUK5OnWLaRVFVjE0WfGKKzac8iGCkt0dhlK
8x7cPQ1HtVHqQNwyIkypkYCaV5Mh7tFLVTJv9Bn2jAuKhL75TQs2hhOWyt0OXUdR
QMiSYMe7xstpefEdS6nRC7g+7qZY1f/H10bQBDkuuPNuC9h1FRJp+MtIkFgzQGv7
ziW9vjScsLpeqsmN73l9ADvrlnlHSxcpoeuErPzDIMkCmJdej1wpXjfWzx8nfELx
KQ6XYTp6JWBi97LMoBDeYthhIr3BDYpXrtDLcIKWDelucZQ5aaUDvIj1ZUJyr3YD
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383095437759468144868500056355535650545103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 18:50:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 18:50:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jubri.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22383214296230993699185653561582391291976249620930172076979034347040746613706726447111476412587954785885598619528052243731115795301061822440764675635105340420048285367896920169656368977791039735462555362887139543208696969838054593742474308684259977786091715602101731712519270048109267960920506904985168600104655613315778261260765726863710215539276844616506047145000245002741780429517685441695722922811725331185386798423663708249572087781116002367277914086734516700145268136446929796580692709331744185348294825062965762771491840028944788616527846148041512788679692839719224536634709048200787499984209161401260070798259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							251302f4185cd5a43bdb6a01f9f95b9254a59a23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimron.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubri.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.jubri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alimron.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alimron.sch.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubri.bumiaswaja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubri.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017097a66aea0000040300473045022100b6d27040214e7849978d3c378d6879044499533f7d04a2a25124f72456ac6e87022060719c99fb86ed63a10b682c7aac1a940b3781ba5bdd61dbe8b31abb4fc3f00700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017097a66b150000040300473045022100e547d6ab14937c30520f597a99a1185b0c353ea75fb6871ccd21281169d2020b022047a2a1eed1a48806b15669c3113fc77b91fa220428c8bd587ad177f686083c94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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