flower.ea-registry-production.elastic.co

Issued by R3

About this certificate

This digital certificate with serial number 04:04:de:3f:21:f7:c3:56:94:1d:c7:42:76:11:11:f3:65:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flower.ea-registry-production.elastic.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:de:3f:21:f7:c3:56:94:1d:c7:42:76:11:11:f3:65:0b
Serial Number (int): 350105689613440406763797956762106470819083
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:91:71:40:1e:5f:2b:79:db:79:26:25:fd:73:12:a3:48:b1:c0:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:8d:06:17:ad:65:44:bf:d0:ac:6a:e3:a1:e1:51:62:3b:b6:cc:ca
Fingerprint (sha256): 04:bb:07:d9:45:ad:30:9c:5f:38:77:dd:e3:95:12:48:93:bb:1e:d8:88:4c:22:67:0c:01:fa:cf:da:53:20:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate flower.ea-registry-production.elastic.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flower.ea-registry-production.elastic.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flower.ea-registry-production.elastic.co

Other certificates including the domain name elastic.co

(limited to 100 certificates)
license.elastic.co
email.staging-alerts.elastic.co
flower.ea-registry-production.elastic.co
govcloud-status.elastic.co
apm-ci.elastic.co
oss-dependencies-dev.elastic.co
search-ba-demo.elastic.co
bistatus.mplatform.ch
ems-logs.elastic.co
us-east-1-staging-cloud-monitor.elastic.co
test-cert.spf.elastic.co
*.elastic.co
broadcaster-service.elastic.co
canvas.elastic.co
link.elastic.co
apm-agent-versions-staging.elastic.co
elastic.co
r2.shared.global.fastly.net
beats-ci.elastic.co
s.ssl.fastly.net
stag-static-www.elastic.co
godaddy-status.elastic.co
secrets.elastic.co
aws-eu-central-1-monitor-staging-cloud.elastic.co
govcloud-status.elastic.co
download-stats-staging.elastic.co
infra-ci.elastic.co
clients-ci.elastic.co
r2.shared.global.fastly.net
artifacts-staging.elastic.co
*.elastic.co
govcloud-status.elastic.co
au.credential.getsmarter.com
abemcertified.abem.org
ibm-dal-p00-metrics-staging-cloud.elastic.co
jobs.elastic.co
jenkins.elastic.co
eu-west-1b.secrets-test.elastic.co
r2.shared.global.fastly.net
aws-eu-central-1-metrics-staging-cloud.elastic.co
demo-staging.elastic.co
green.demo.elastic.co
cloud-test-stats.elastic.co
cloud-status.dimensiondata.com
tiles.maps.elastic.co
swiftype-ci.elastic.co
tiles.maps.elastic.co
business-systems-ci.elastic.co
dns-vetting1g.map.fastly.net
cloudstatus.protel.net
business-systems-ci.elastic.co
abemcertified.abem.org
infra-stats.elastic.co
docker-auth.ea-registry-production.elastic.co
artifacts-no-kpi.elastic.co
flower.ea-registry-production.elastic.co
r2.shared.global.fastly.net
email.elastic.co
tiles.maps.elastic.co
j.ssl.fastly.net
artifacts-staging.elastic.co
swiftype-ci.elastic.co
internal-ci.elastic.co
flower.ea-registry-production.elastic.co
cds3.cvent.com
build-stats-test.elastic.co
jvm-catalog.elastic.co
customer-test.ssl.fastly.net
registry.ea-registry-staging.elastic.dev
email.staging-ess.cloud.elastic.co
a3.shared.global.fastly.net
kibana-ci.elastic.co
r2.shared.global.fastly.net
support.elastic.co
license.elastic.co
beats-ci.elastic.co
support-hub.elastic.dev
sa-demo-kibana.prod.sa.elastic.co
cloudstatus.protel.net
r2.shared.global.fastly.net
groove.elastic.co
kibana.telemetry-staging.elastic.co
artifacts-staging.elastic.co
dns-vetting1g.map.fastly.net
s.ssl.fastly.net
aonhrlearningcenter.credentials.aon.com
govcloud-status.elastic.co
auth.elastic.co
flower.ea-registry-production.elastic.co
maps.elastic.co
aws-eu-central-1-logging-staging-cloud.elastic.co
artifacts-no-kpi.elastic.co
telemetry.elastic.co
aonhrlearningcenter.credentials.aon.com
r2.shared.global.fastly.net
artifacts-no-kpi.elastic.co
staging-deepthought.elastic.co
clachecker.elastic.co
oss-dependencies-dev.elastic.co
flower.ea-registry-production.elastic.co

Certificate

The complete raw certificate details for flower.ea-registry-production.elastic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISBATePyH3w1aUHcdCdhER82ULMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MDQwMTEyMDJaFw0yMzExMDIwMTEyMDFaMDMxMTAvBgNVBAMT
KGZsb3dlci5lYS1yZWdpc3RyeS1wcm9kdWN0aW9uLmVsYXN0aWMuY28wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDof22J/GgemYirOctfhsXfZIMz53Ko
IQPWSmjwC7Sbx5HHcMEs1HOEOXr26wHfH6Bsd0tEMpq8gy2wd1b6co3plZM9DKsN
ZnBSxjPWvTzp4OpIcc90zd+u07YoRo4FWaPvxnDXxmuEiNC9eJKhW+WhnXm+u+dh
49Fgsr7YbFGmfeWOas7eK4Sgp/kHvk8V6l32uR/x9fG9An7V5LDuzuqFGDOZtjHK
bvYO9whKHM9VVhYe4FzvrXMHCISRMypMSO6ng28PoSFbJjNAPrgAo3PV1qp23dxd
hsKh82mBae6gxcjDQi3Rtx/XrexIcSRPyM49DCU/roKwxCTQSBnQ+fQnAgMBAAGj
ggIsMIICKDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLWRcUAeXyt523kmJf1zEqNI
scDrMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB
BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF
BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDMGA1UdEQQsMCqCKGZsb3dlci5l
YS1yZWdpc3RyeS1wcm9kdWN0aW9uLmVsYXN0aWMuY28wEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwB6MoxU2LcttiDqOOBSHumE
FnAyE4VNO9IrwTpXo1LrUgAAAYm+UPFbAAAEAwBIMEYCIQC3s30b0y+CJ5nuVEVb
1mfMMbY5X2QqplUucrWraq5B8QIhAKoal4fdLrBNnb+0k0oEGT6HQLwFQF/2P3DQ
u2Ow3wb2AHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGJvlDx
aQAABAMASDBGAiEAjFJbDXKJTLq4vAcwkmWg3NJJJoJ9MK0HD6AzI+SLAcACIQCN
GBwrY0ZPxCUlXpJLBXEPDfZSiehKO6NlaUPFu0dZBTANBgkqhkiG9w0BAQsFAAOC
AQEAFNtdkPuzQ/qu48qIMwvmsTL/JG4BRtJ6BxlgLB61wvQQGjmzKZPiAzhVxid2
2TGxohMQSmmf7dYgaME0JBrfUdkAJ/RosjrNfbm+EQ2kbdOYHRtY03WwThwEBqPr
SNBkiKY0e8e94d3QGVuyJOAH99NqAr5wo9g8DBhXbpcaUGjxSdPjIu0TBCD4FEOx
XHBtbKtDUiOIWRe2mt/IyiUrMeIfNzWNpUPEznk++QGcvVkyaIa/2vOK2kEXJ8W8
1UEcgQbuqvcnz80rkJfnblGBQV8xH2Gik5xWBJ9Qhj624pMJDJNWBVQchsyifYbJ
Zjn2b3UY9e9OjtJLF0rOEr6voQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H9tifxoHpmIqznLX4bF
32SDM+dyqCED1kpo8Au0m8eRx3DBLNRzhDl69usB3x+gbHdLRDKavIMtsHdW+nKN
6ZWTPQyrDWZwUsYz1r086eDqSHHPdM3frtO2KEaOBVmj78Zw18ZrhIjQvXiSoVvl
oZ15vrvnYePRYLK+2GxRpn3ljmrO3iuEoKf5B75PFepd9rkf8fXxvQJ+1eSw7s7q
hRgzmbYxym72DvcIShzPVVYWHuBc761zBwiEkTMqTEjup4NvD6EhWyYzQD64AKNz
1daqdt3cXYbCofNpgWnuoMXIw0It0bcf163sSHEkT8jOPQwlP66CsMQk0EgZ0Pn0
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350105689613440406763797956762106470819083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 01:12:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 01:12:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flower.ea-registry-production.elastic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29350123785049680723579936019467159598800774099478341288905045119232178092405620952545814442220465783419454301768438484953876034116551527810700589700712234795948564652754091958800119118868462034014033608175572997921722397076537137122594286995904687053712585163802661450189294039580948769563726535321132286800371890746024655625970327862623207362342970693299661520429385928090738064777715524809108628235214262326848695537514630648631653527487013167247656895212470988396279070332518343245601192062943579235456630889746686511128582495629078271501537345052590719545158964767285242532772234479273950134404813829414942536743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b59171401e5f2b79db792625fd7312a348b1c0eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flower.ea-registry-production.elastic.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189be50f15b0000040300483046022100b7b37d1bd32f822799ee54455bd667cc31b6395f642aa6552e72b5ab6aae41f1022100aa1a9787dd2eb04d9dbfb4934a04193e8740bc05405ff63f70d0bb63b0df06f6007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189be50f16900000403004830460221008c525b0d72894cbab8bc07309265a0dcd24926827d30ad070fa03323e48b01c00221008d181c2b63464fc425255e924b05710f0df65289e84a3ba3656943c5bb475905
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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