DV SSL/TLS Certificate for en.job-flow.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the en.job-flow.nl DV SSL/TLS Certificate

This certificate with serial number 05:a5:59:66:71:e8:f4:a8:29:b6:a3:5d:c6:00:56:76:f9:a4 for en.job-flow.nl was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for en.job-flow.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:a5:59:66:71:e8:f4:a8:29:b6:a3:5d:c6:00:56:76:f9:a4
Serial Number (int): 491826853417029444324551149361883747121572
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 04:65:2b:95:a6:df:c6:22:7e:9c:93:3b:0b:94:b3:04:b7:bd:69:f8
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 4a:87:e5:f9:aa:ec:bf:38:50:90:65:0c:b6:2b:62:65:fe:30:23:e6
Fingerprint (SHA-256): b5:fc:f6:df:b7:31:39:87:43:db:2f:46:3a:00:7f:cf:28:7e:8b:6c:2f:b3:f0:ba:44:fe:a8:41:f4:1c:05:bc

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/37.crl

Check the revocation status for certificate en.job-flow.nl
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for en.job-flow.nl

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for en.job-flow.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgISBaVZZnHo9KgptqNdxgBWdvmkMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTIzMDkzOTExWhcNMjUwODIxMDkzOTEwWjAZMRcwFQYDVQQD
Ew5lbi5qb2ItZmxvdy5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AKInzXWG3lYUaAE8wCql89OSFW8ydEZ0FUYM1sNXzcI2GXKx7Ppr5aSdm6WQoN+r
NVveok0cepcmgoWaflJANbFpI87FOf/rNn8+bW2phgYnmn8PYq95dnPbp/5zPNxj
xnCl0QLlAbTOnNM3ba8v6bbrdubiyjqkcgzjaqU6kcF/MsKGufOz+HNkIC5yugml
GMN82P/e1dWBaibo/1HaB4LdoVu468Y+L5deC/lb8Q+auLNS7XJAlMPuJdviWhL+
qLxZYKq9ozwT2P7VizSnDx+uXGM8i4OmIUgexKGj9JFfn+/k/eSDXppQnMKpLXlp
v0bmKoGameYTUmPDTLv9iVHmSEFPa8SW0s0OBot6fX8I5af/bxl2UeOoCtRP76dK
UFdCB0suffDsKDC3PQMldA10UmdEjLusZb8ZHmvidP0yTZ7MfPAbW8Galld96YfF
Ttl3dpJHX1K91B0hEBBvDUZZa9kzkvoGRxWDNj5G+qa0GQpG6dbXA6EkDeQHmpD1
DwJdE02sk1nEJBJz7ILxoIT1m9tusQuPjYc13+NfWiUiEvYj7l79wgM7JQqzgmRc
407bUdtRT7CCZPbt81Y9Ij12eq3rb3Yc+sqdFlc4qf+B6aj6q0pZLJHguTJxCBy7
vs55XX003KwOlipT1zx8yGFtbn9O3/oI0zC7yR6M0G3TAgMBAAGjggI8MIICODAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFARlK5Wm38YifpyTOwuUswS3vWn4MB8GA1Ud
IwQYMBaAFLu8w0el5LypxsOkcgwQjaI14cjoMDMGCCsGAQUFBwEBBCcwJTAjBggr
BgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9yZy8wNwYDVR0RBDAwLoIOZW4u
am9iLWZsb3cubmyCC2pvYi1mbG93Lm5sgg93d3cuam9iLWZsb3cubmwwEwYDVR0g
BAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMC5jLmxl
bmNyLm9yZy8zNy5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDtPEvW6AbC
pKIAV9vLJOI4Ad9RL+3EhsVwDyDdtz4/4AAAAZb8uFjnAAAEAwBHMEUCIQDl/VJ8
Ozrp7Yt5uyKdfar/uCSc2kwtuHLGWBwsbi/FCAIgGTajDxWxBLkXCkzeS5lBcK8T
KNMwQFXL2eoomkjfAMsAdgAN4fIwK9MNwUBiEgnqVS78R3R8sdfpMO8OQh60fk6q
NAAAAZb8uGijAAAEAwBHMEUCICRqYcEd6rO5jTOxX5bBegrZSWZsyrFcrKmZ0R/t
vaTXAiEAiQai6dAJfWIYnsrYDMu6Zm1WklgAUDO0vSuLucy3XGYwDQYJKoZIhvcN
AQELBQADggEBAFHPNpgrQ1/UcOGCdTLvj21VT+RH82ae/knfTPR1Zd/VgiSS1myZ
g8Pt2mwxMymLgrtVanLnaktgi8/PkTgSG6AMH+0IdCMD+8ZhheTpD8lSr4D1QBbT
5/qdgWRi63yQ6ZTtsRI/CBlma12BZ/yyCXYHHbgeISZJdiJ8smdC9e3JsL4jy7me
CWFlk9ZdtVGTsC35BbPffB3wC/ATtfqF8/gNu7BvjIrlnMbEmx8kVwmskN82X4HU
9xIQEuSGE5vQci/DOlKaihOSiE1b3QphPpauFUGEwRHpWt1al9A+UmY9nRbehCdU
+lHliBBEfO7Tc4jamGRCVrFn6vblCJmdvPY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 491826853417029444324551149361883747121572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 09:39:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-21 09:39:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'en.job-flow.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661536637211544307574067225666838567912682536664818099049593453792157897834410317437312377787515968187819649492497154723373008943131300398325102357825921241192777604070060273703313766375636738245454055758601505961466664897408631227936141106459948132658166536859444267530952355841775348542196026457570234859016624347509278236566579984844469244437657317952860172705918721470098403342036296703889815372936627714739283863894971559159437094537165067166304267513600244970835015476210702776696760443022774952832022465027082355895919875296385442826979328347066144442651636136169170555976323768886294401303394953609016933979101321053112602595465719307630562009112104335230521225025344291800134252804884790465543119821592024200990145801492532494263826687300359873380484128447797055996453523205340539403315588447841869411642282078555357198737398806175741989357699454601539301956857813953362792516352942320166808855481235302873418395096058953713421412663551506676176059835607398179778636668363273733095429666442522970907805483197170758518816918253633762271518483117656483104011594517938780155655808827311050908743644368692006032156320509173981907016058984297037456968696200364556999604521782179860088705589439572746130865322182146191900149837267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04652b95a6dfc6227e9c933b0b94b304b7bd69f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.job-flow.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job-flow.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.job-flow.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/37.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000196fcb858e70000040300473045022100e5fd527c3b3ae9ed8b79bb229d7daaffb8249cda4c2db872c6581c2c6e2fc50802201936a30f15b104b9170a4cde4b994170af1328d3304055cbd9ea289a48df00cb0076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000196fcb868a300000403004730450220246a61c11deab3b98d33b15f96c17a0ad949666ccab15caca999d11fedbda4d70221008906a2e9d0097d62189ecad80ccbba666d569258005033b4bd2b8bb9ccb75c66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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