pn-sampit.go.id

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:67:4f:9c:6a:c2:a4:ff:74:3f:be:d8:01:6b:4f:48 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pn-sampit.go.id

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:67:4f:9c:6a:c2:a4:ff:74:3f:be:d8:01:6b:4f:48
Serial Number (int): 7182561258346429147925201278368173896
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 81:26:1b:24:94:2a:b3:e4:23:5f:29:9d:2e:b5:0a:6c:1e:14:a9:84
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): e5:21:cd:f7:5f:85:74:8b:04:ca:c4:34:ce:7d:a7:47:ae:8d:5b:89
Fingerprint (sha256): d5:6a:bc:d0:e9:52:9e:04:c2:b9:8f:85:61:09:93:b9:ec:96:ae:79:e3:f6:6b:66:fc:12:c2:06:58:8b:e9:11

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate pn-sampit.go.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pn-sampit.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pn-sampit.go.id
www.pn-sampit.go.id

Other certificates including the domain name pn-sampit.go.id

(limited to 100 certificates)
pn-sampit.go.id
pn-sampit.go.id
form.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
slot-server-thailand.pn-sampit.go.id
pn-sampit.go.id
www.sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
form.pn-sampit.go.id
pn-sampit.go.id
mahjong-slot.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
form.pn-sampit.go.id
server-luar.pn-sampit.go.id
pn-sampit.go.id
pn-sampit.go.id
slot-deposit-seabank.pn-sampit.go.id
www.form.pn-sampit.go.id
sipp.pn-sampit.go.id
gesitplus.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
pn-sampit.go.id
gesitplus.pn-sampit.go.id
www.infopegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
gesitplus.pn-sampit.go.id
www.gesitplus.pn-sampit.go.id
sipp.pn-sampit.go.id
infopegawai.pn-sampit.go.id
pn-sampit.go.id
pegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
pg-slot.pn-sampit.go.id
form.pn-sampit.go.id
sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
pegawai.pn-sampit.go.id
pn-sampit.go.id
form.pn-sampit.go.id
perpus.pn-sampit.go.id
pn-sampit.go.id
perpus.pn-sampit.go.id
webmail.pn-sampit.go.id
form.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
olympus-slot.pn-sampit.go.id
form.pn-sampit.go.id
infopegawai.pn-sampit.go.id
pn-sampit.go.id
sipp.pn-sampit.go.id
perpus.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
www.infopegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
pn-sampit.go.id
pegawai.pn-sampit.go.id
www.infopegawai.pn-sampit.go.id
www.form.pn-sampit.go.id
sipp.pn-sampit.go.id
slot-thailand.pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pegawai.pn-sampit.go.id
sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pn-sampit.go.id
perpus.pn-sampit.go.id
www.sipp.pn-sampit.go.id
pn-sampit.go.id
form.pn-sampit.go.id
sipp.pn-sampit.go.id
www.sipp.pn-sampit.go.id
sipp.pn-sampit.go.id
pegawai.pn-sampit.go.id
perpus.pn-sampit.go.id
sipp.pn-sampit.go.id
pragmatic-slot.pn-sampit.go.id
perpus.pn-sampit.go.id
pegawai.pn-sampit.go.id
pn-sampit.go.id
pn-sampit.go.id

Certificate

The complete raw certificate details for pn-sampit.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m7QD34Ay3QWpzOTFayR
E8L0icX9LX63c0aQjuoCXe+IYI8maxM/MvR3j9FFSIKXM7lRPNWAzjE+P7m9wIdS
zleW9hzeY68TliZmIuZxU9KUiGPHKXgewy/k2Tl6kmCQOgmGibd4a7NACkp5PlGS
0XhK6tySrIrfOfdchtIWxgbU0DkZfZY0vElHUnvSbbhomtIa7U1Km1hcdygIdAwa
DahhBr+ZE5Vccq2teJCANRVCXGwk3snbODH+bQifeCdWU9Qh+x//hzgNokh7UC1y
W84isPofym+ZdCBYydq1Mb0tpxq5Db01IjaVEQ5gOvC5fWfcynhHEREBd9TA0z1y
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7182561258346429147925201278368173896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pn-sampit.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28079547499382212547339975756260351124475997162381553636097225681409360069653552363575715121813447481151936256784798708660900673156742802265244567247179202323584736518993931745479822674745526135454377393491327373153207701209019094033370589286194537681970839856646957834849887494242269736622508372901284128666762245347638076468707112746092743030418688765569885704163720634874904571601072867459177823031870014683034343699929562682202281959689189229712878138550098664419004506555027240545296295960588282622078127446817673859910095798914651878693417054392621860584323204406557753072540751921215393614683272378803025703539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81261b24942ab3e4235f299d2eb50a6c1e14a984
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pn-sampit.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pn-sampit.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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