niaga.tv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:b0:09:89:17:69:81:5e:7f:e3:00:e4:bf:4e:ef:80:6e was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=niaga.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:b0:09:89:17:69:81:5e:7f:e3:00:e4:bf:4e:ef:80:6e
Serial Number (int): 298661629428137920226289700112006288212078
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:f2:c4:89:3e:b9:34:8b:08:e9:8e:06:c5:54:2b:3d:64:0e:49:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:ba:6c:58:24:ce:6f:87:9d:46:68:b5:6a:08:52:d2:2d:96:a5:21
Fingerprint (sha256): 9b:f3:ac:cb:74:87:ce:6b:8a:06:be:75:ea:15:c8:72:c8:a2:d8:62:d9:12:cf:52:1d:29:83:fe:bd:70:87:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate niaga.tv

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niaga.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.niaga.tv
cpanel.pakjingarwana.com
cpanel.tokomesinpalembang.com
mail.niaga.tv
mail.pakjingarwana.com
mail.tokomesinpalembang.com
niaga.tokomesinbali.com
niaga.tv
pakjingarwana.com
pakjingarwana.tokomesinbali.com
tokomesinpalembang.com
tokomesinpalembang.tokomesinbali.com
webdisk.niaga.tv
webdisk.pakjingarwana.com
webdisk.tokomesinpalembang.com
webmail.niaga.tv
webmail.pakjingarwana.com
webmail.tokomesinpalembang.com
www.niaga.tokomesinbali.com
www.niaga.tv
www.pakjingarwana.com
www.pakjingarwana.tokomesinbali.com
www.tokomesinpalembang.com
www.tokomesinpalembang.tokomesinbali.com

Other certificates including the domain name niaga.tv

(limited to 100 certificates)
niaga.tv
cpcalendars.tokomesinbali.com
niaga.tv
niaga.tv
niaga.tv
www.niaga.tokomesinbali.com
www.travelumroh.tokomesinbali.com
niaga.tv
niaga.tv
pakjingarwana.com
niaga.tv
*.tokomesinbandung.com
mesinbakso.com
niaga.tv
niaga.tv
niaga.tv
mesinbakso.com
mesinbakso.com
carabisnis.com
pakjingarwana.com
niaga.tv
www.cetakanwaffle.tokomesinbali.com
niaga.tv
www.tokomesinlampung.tokomesinbali.com
tokomesinbali.com

Certificate

The complete raw certificate details for niaga.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L7SsgB5LMUvTYFRZrUM
Do2eF2gyd/cvzG1Rim6AZ1EE/V9BSrOrd39GV6T9Ds4xxoROexK2Oh7EvjqiNX+W
NXn3KXyWqZKfzqpj906R3XLuLwxKWAqogXLtnBooIrc1IYvcHPdi14fEFZ9djm1L
hn4beg/kYHMQ7Z2Xl9unrOJl5PtsV5hLiaz4wki8aYYHObm7PNKJ67+7i6WHzoI+
tp9N4AleklEx/EuJdeJj8BCJsI/q/krRCzqXuiBv582jQxuyDONFZjVOBHBN1+Ic
NdPKPtJujIifn47yS4IgWDBLl8l0BxFwalUJAIQk3eZF5P9tIFXabul/SCh4ttGd
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298661629428137920226289700112006288212078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 17:36:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 17:36:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niaga.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30896244754210600470647844197837915058129819821726373731070175213397594251714630645035329411159112998180683563781375283640116179948422024234942865633195428387925618536335509913862064034364611550333345723848412984977347392356364854033310436095328894134978346748713243562892484055030977026635966464511823594502534670427704552369555286001775629805868460397560179369217478389156221489104797569174950387522600175609857207708093858124523085789511991400928450033827188460455032193734373423274354694483703671659635242588908464187090750642752248440789227643396455650132930203236924939051038134088545284056528504092805028748767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3f2c4893eb9348b08e98e06c5542b3d640e4916
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niaga.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakjingarwana.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomesinpalembang.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niaga.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niaga.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakjingarwana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakjingarwana.tokomesinbali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomesinpalembang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomesinpalembang.tokomesinbali.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b28eda1810000040300473045022100e8a72c48a71cd4ada77cf18c78d3ae9023df24c1e2e77d3f0053def35afc1d8a02206759c5ab3b314f0eafb3860efb5f77f881f9fc03d96d92452261c908e658809f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b28eda19f0000040300473045022055cd08e69f827007250bbc49fb6f28d31a934f6274435cfa553cbc975793cb270221009207ed85a0d637c08f8f208fc711864198d00b7a4df1e1983390145187a7e118
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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