dekorasi.id
Issued by R3
About this certificate
This digital certificate with serial number 03:60:dc:bb:a0:50:24:3a:75:23:60:94:52:5d:df:89:f3:a3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dekorasi.id
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:60:dc:bb:a0:50:24:3a:75:23:60:94:52:5d:df:89:f3:a3Serial Number (int): 294297369389811061653790028303348575892387
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c2:52:c2:30:7b:8d:9d:6d:c9:9f:48:30:8c:1a:5e:53:ac:75:83:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 98:48:88:90:f5:1b:27:95:c5:3f:61:9d:68:5a:f4:75:83:e9:84:57
Fingerprint (sha256): d6:45:82:75:9a:84:70:02:5b:6a:da:54:3a:40:48:8e:f1:57:0b:7c:4d:04:b6:39:19:e8:4d:5e:57:a7:c6:f6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate dekorasi.id
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dekorasi.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dekorasi.id
www.dekorasi.id
www.dekorasi.id
Other certificates including the domain name dekorasi.id
(limited to 100 certificates)
Certificate
The complete raw certificate details for dekorasi.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISA2Dcu6BQJDp1I2CUUl3fifOjMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MTQxODU4NTNaFw0yMzA4MTIxODU4NTJaMBYxFDASBgNVBAMT C2Rla29yYXNpLmlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqK5 6FojkbkcaMbHFN67r82OLu1+XbDmBXrkbmKO6qF2Ea3HBQR9fwy8BCuwhoxaLeLp yKyblrFyVl11ZengW1NEaESb7MOF9uEci9FtrgEasFSwbB7iUo/W3c5+ilQ5kkAX MrCyf4Qz8NIKNkvOIGtK1FxdWKuKGFf6pYXqFWzURPt17uNY4uKf0HfZew5YmC45 OZu3cqSElzW97q9SBJTKwJ5KPxHfUv5Hz/Oxj/omMHvZv/iegpNQh2PdRq3+Psd6 RE+mmaiy5rpk+l2lqfMMlJUMTojogE0taszmsVLOGD0uO7Bluve6F33l4PG4H5tn yKt/0LK9RgoeHjNAIwIDAQABo4ICWDCCAlQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTCUsIwe42dbcmfSDCMGl5TrHWDJTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAn BgNVHREEIDAeggtkZWtvcmFzaS5pZIIPd3d3LmRla29yYXNpLmlkMEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGIG9gxIgAABAMARzBF AiAzCQcWWviidyKXOo5R0NokmAlBPZPevMZv5/G6Wne2LwIhAO0/K3+7i5SkSZ6j zVuLSIY9qyWgUGhwcmgHJZAxVQGxAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk yoWGNOvcgooAAAGIG9gxQwAABAMASDBGAiEAmaE+f9sSylAZ0YC/jmhcUGUUjrxt wkZ/azXzCoBRxwYCIQCbvLVOvqzeOPpocY1bTVVmJep8/70HDufd3uK3BHASQjAN BgkqhkiG9w0BAQsFAAOCAQEApMxJVQ44lUCWEKG2LMBj+5GWP+LOarEsKXlAdqPj 0OW2FL5YwmDfFUxB2UcJtkTv+l48Yr0NOAfdQ3jSSqWLOnV4yix4Ka2Ll59IQsnF NgpXXi5Z5GtBkOtNdFdwpvmewt+c97TNwcy2zph1q8Vr4kco7VPAN3BbToYfGTJh k5HZ8/xXCaFkImHUbLE/3K5QTJhHakesyKjqU795M5Am4TyFZArtOay+3Gc6Q8Ya RFNd955Po2uLHflRgtofYLO+YXDnam63z1Gx9ev5fC8aooFTrDDH/aljApqpXnsH Ej40WUuw9GOLee7wmI3iqZwCvEIkHhDhz+UbZYqCvI/bLg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqK56FojkbkcaMbHFN67 r82OLu1+XbDmBXrkbmKO6qF2Ea3HBQR9fwy8BCuwhoxaLeLpyKyblrFyVl11Zeng W1NEaESb7MOF9uEci9FtrgEasFSwbB7iUo/W3c5+ilQ5kkAXMrCyf4Qz8NIKNkvO IGtK1FxdWKuKGFf6pYXqFWzURPt17uNY4uKf0HfZew5YmC45OZu3cqSElzW97q9S BJTKwJ5KPxHfUv5Hz/Oxj/omMHvZv/iegpNQh2PdRq3+Psd6RE+mmaiy5rpk+l2l qfMMlJUMTojogE0taszmsVLOGD0uO7Bluve6F33l4PG4H5tnyKt/0LK9RgoeHjNA IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294297369389811061653790028303348575892387 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 18:58:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 18:58:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dekorasi.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25580380883891286557484526277842989305139119796147205674321859097918726524375054076426086210503906675209360662962726585632557338750200029524742295259492854365955208790135045171066534214977636961046298810081191825701251766304544742938239252818704023825664161446619031460920163780597767744612796570339931123113388553781322077832927079095663918722054889331775942110912686883096088966811772477936533377914754947272401710827247081642483255362147251844417538012291857900317986952779303271975710647268758088913045932466521529701658238105479034442679038011302788455732356966922444446906227002248941228155581281251635213058083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c252c2307b8d9d6dc99f48308c1a5e53ac758325 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekorasi.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dekorasi.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001881bd8312200000403004730450220330907165af8a27722973a8e51d0da249809413d93debcc66fe7f1ba5a77b62f022100ed3f2b7fbb8b94a4499ea3cd5b8b48863dab25a05068707268072590315501b1007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001881bd83143000004030048304602210099a13e7fdb12ca5019d180bf8e685c5065148ebc6dc2467f6b35f30a8051c7060221009bbcb54ebeacde38fa68718d5b4d556625ea7cffbd070ee7dddee2b704701242 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a4cc49550e3895409610a1b62cc063fb91963fe2ce6ab12c29794076a3e3d0e5b614be58c260df154c41d94709b644effa5e3c62bd0d3807dd4378d24aa58b3a7578ca2c7829ad8b979f4842c9c5360a575e2e59e46b4190eb4d745770a6f99ec2df9cf7b4cdc1ccb6ce9875abc56be24728ed53c037705b4e861f1932619391d9f3fc5709a1642261d46cb13fdcae504c98476a47acc8a8ea53bf79339026e13c85640aed39acbedc673a43c61a44535df79e4fa36b8b1df95182da1f60b3be6170e76a6eb7cf51b1f5ebf97c2f1aa28153ac30c7fda963029aa95e7b07123e34594bb0f4638b79eef0988de2a99c02bc42241e10e1cfe51b658a82bc8fdb2e