tfkhdyt.my.id

Issued by R3

About this certificate

This digital certificate with serial number 04:cc:ba:2c:95:d8:b2:4c:46:d1:0e:95:2e:c5:7e:37:ae:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tfkhdyt.my.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cc:ba:2c:95:d8:b2:4c:46:d1:0e:95:2e:c5:7e:37:ae:93
Serial Number (int): 418114214486437697609512335713452500168339
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:e9:d1:bd:5e:d9:2f:67:1d:90:9d:8a:5b:72:db:85:f6:08:e3:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:08:38:c7:5b:30:32:47:5f:73:94:16:4d:03:65:52:29:f4:db:02
Fingerprint (sha256): d3:6f:7f:c1:1c:73:c6:1d:6a:6f:50:55:17:0f:f3:21:f0:09:92:dd:14:34:b2:8f:5b:fd:66:e6:c1:e6:67:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tfkhdyt.my.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tfkhdyt.my.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tfkhdyt.my.id

Other certificates including the domain name tfkhdyt.my.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for tfkhdyt.my.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1onQVsIh/WlLu4yv/Mgr
Cr19U3hoBdzVWWCVlkn/eGX2LksEaiq2ImtDWlGxec4ue1vM5NSWWruNpbZd1+Rr
XpYOcpjubWpCmbJtA4qB5GvmPKlfGOh3YbDWpZTnuCph6EODNA8OJ1wZT9ls1KFQ
3Lh8OZPbmIVW6vfLn+AHqkNePvwJSwEV7JEP9rS4VDBGe6ZbnEe79fdzOhpz6WZM
zIYJ7SfL2m4JGzozWvKFPPfgzGBuJwtkbGnxuwEdArOEHKRgXHuMHJ24kNuneodH
saIIK0AQ51UNahpHu38++44XvN1xvqUc8luRXvGkGipxPil6eUic9zM6oC+LeQFp
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418114214486437697609512335713452500168339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 05:04:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 05:04:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tfkhdyt.my.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27082955792114751758661894586807122806337689040944944172344735521454485101033388626826822359191378662573746353142111236259458746693753589329389302519817922484013538707883015786831914320132293054065292619328706794007043479033066098516612885498913292817835018094164040083887837226618216327199739248769622110160147570875545557519077154131573419955380864657809766622415572155162152223889979682789136654112678518012223294847663127672425565724750780146368892550331580888674508993631664319594578400567675172939697835779789766926658125743958519010732057302468644957143303502479327614759780384150211754685288121909870208313691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42e9d1bd5ed92f671d909d8a5b72db85f608e3db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfkhdyt.my.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab130759b00000403004630440220012edb7e99b817e4d53b7dd219f8802d92a7d09a23e51af226d79e8b197388ae022061ce5442fecea33914d830cdfc47b7e889b5226c5032a89df62f758d13e8bced007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab13075c70000040300473045022015294109000e4a4d2cf2a1f07697e0cdda12047f43ec97958a6fdab1a10a36ef0221009d38c410875c45aa371b2035e1b0ed562e80302cba41902a2f010c029416382d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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