easyuni.co.id

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:cf:8a:f5:19:aa:b2:35:7a:c5:f8:33:7c:3f:f2:ca:4b was issued on by Let's Encrypt.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=easyuni.co.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:cf:8a:f5:19:aa:b2:35:7a:c5:f8:33:7c:3f:f2:ca:4b
Serial Number (int): 429371936390621242669750779191534852164171
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:67:97:22:d1:a0:7f:b1:4e:10:49:59:68:57:d2:6f:8b:79:c1:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:93:b6:a7:8b:08:8f:4d:c2:5c:94:df:e5:c4:ed:79:24:36:c2:46
Fingerprint (sha256): bc:ab:23:e7:a3:2d:10:ce:54:29:d9:97:e5:c5:db:78:49:91:1c:5a:fb:e1:06:7d:43:e3:75:3d:ba:d0:25:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate easyuni.co.id

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for easyuni.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

easyuni.co.id
easyuni.com
easyuni.com.bn
easyuni.in
easyuni.lk
easyuni.mu
easyuni.my
easyuni.ph
easyuni.sg
easyuni.vn
easyunime.com
highered.easyuni.com
highered.easyunime.com
lingofinder.com
unidash.easyuni.com
www.easyuni.co.id
www.easyuni.com
www.easyuni.com.bn
www.easyuni.in
www.easyuni.lk
www.easyuni.mu
www.easyuni.my
www.easyuni.ph
www.easyuni.sg
www.easyuni.vn
www.easyunime.com
www.lingofinder.com

Other certificates including the domain name easyuni.co.id

(limited to 100 certificates)
staging.easyuni.com
www.easyuni.com
www.easyuni.com
staging.easyuni.com
landing.easyuni.co.id
staging.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
staging.easyuni.com
easyuni.co.id
www.easyuni.com
staging.easyuni.com
staging.easyuni.com
www.easyuni.com
easyuni.co.id
www.easyuni.com
www.easyuni.com
www.easyuni.com
easyuni.com
*.easyuni.com
www.easyuni.com
staging.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
easyuni.my
staging.easyuni.com
staging.easyuni.com
easyuni.co.id
www.easyuni.com
www.easyuni.co.id
staging.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
www.easyuni.com
easyuni.com
easyuni.my
staging.easyuni.com
easyuni.my
easyuni.co.id
www.easyuni.com
forum.easyuni.co.id
landing.easyuni.co.id
www.easyuni.com
easyuni.co.id
*.easyuni.com
www.easyuni.com
forum.easyuni.co.id
staging.easyuni.com
staging.easyuni.com
www.easyuni.com
www.easyuni.com
staging.easyuni.com

Certificate

The complete raw certificate details for easyuni.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0mqyb1Ad+wyOaRxsTW
xlgu9mP90JCvAWmjHwSssWzmYTDWVjYpPVyh0Br17PoMeNh7ILHLSyjOALl5Em11
kY7vlVLrk5rWUNYu6gloSo+X6kH77qtBVgRy7VZzJBwJI029Uo9+wwQaUOa9nwHX
DCMf4XS733U7uFoKUfT4Oj68BUPqyIi74he4TSvNrc7Fun4nMBoeLmDvjEs539O7
1OjWUx8uotKBByDfQjYJIy+jsvO0oY6CQA56sltNyBrAYQaI2eh6Hx8Gvs4a5HPd
mpK54yNQRu04PCE+CEeUHS+f/eCMVbjCkfQu43lHpfvjeapr8FTIBSL6EGIDNHOs
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429371936390621242669750779191534852164171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 01:14:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 01:14:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'easyuni.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21348648457323298788497049867705908522762096037863107417763467456809767102065663387652273712388672705204204452713707124820477038070989456021505442984673356548762142364514129244545109304973046909547672085353055217594473694533559652658803083323885319353712788253259072019640688998812228177501976180971344642479744193512443654850251329538748603717260176358742532711732268147560715589697188736566816588356432132984699795102606777157411433426405163986966889760502960030313373323774580457705253656747181732254085262233155465975018118362908992520478334267253471701090760411380514388063948263685181281139160972205299745401879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1679722d1a07fb14e1049596857d26f8b79c19f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.com.bn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyuni.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyunime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highered.easyuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highered.easyunime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingofinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidash.easyuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.com.bn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyuni.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyunime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lingofinder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189be5343bd00000403004730450220497fc078c22e36e67589efbf7d7c7cc81ccfca1c84b8ad5b9012e2f8e733b8f60221009f1756b85fe156c345b1c89521cfb1509a9eb5ea4429d9ff8b7dc7075e9374a4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189be53443c000004030046304402205ec5f5185fb2c61ebf2856d7c3bce2ee6ed43fe353be4a6d592c2b8c8f05e73302200c3f2559359f35d5bf36372c21bf10fd18675f6dcec36b14fc83c109c5b1d537
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004672c802eeaca8b04052d5167ae8bc550c0c584f7196ae58a7ff47b161761f0a9b449eb453889ea1f1f4f104b6c47ee2aa544af1ce231b286ce28deacb66154a812604111e510fa5ddf408918bd27616d7c98556bc3a5b70ccaec8058e471663368bfd3e590cad9909c07ec6fb6922d0fe8feb2f2140a14d54c63321e9c279f3dcd1351865574dd79d26c3370a1c140b36436c3e65e721c5e45b470913df8171e6d1e428dddb20bda91d8808768a88e71599a9035015bcdb025b018dc257e3ad01534dbfa6f939967d60b91c0ef338148142ddd7d02a642d208889409d9938e4989c2be62f49d16793002835529cfe015e46c212dff220ba8388a016016d87ee