storybook.flux.ai

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:8d:da:0b:a6:56:0a:26:c2:d4:a3:af:44:bc:4d:0f:6c was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=storybook.flux.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d5:8d:da:0b:a6:56:0a:26:c2:d4:a3:af:44:bc:4d:0f:6c
Serial Number (int): 421117841185606721635379849345359881768812
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:c3:18:3a:a6:bc:3f:e0:32:63:6b:6f:69:0d:3a:8b:06:54:f3:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:35:c1:67:23:a5:b4:0c:31:d8:4d:86:28:5c:50:55:15:7a:93:00
Fingerprint (sha256): 0c:80:46:db:50:0e:6e:ad:9f:61:e6:6a:a9:69:26:43:2d:77:ec:67:d4:3c:c0:5d:ab:20:eb:23:93:51:4f:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate storybook.flux.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for storybook.flux.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

storybook.flux.ai

Other certificates including the domain name flux.ai

(limited to 100 certificates)
analytics.flux.ai
pr-11176.preview.flux.ai
bookmidia.midiacode.app
pr-4947.preview.flux.ai
pr-11183.preview.flux.ai
storybook.flux.ai
pr-11178.preview.flux.ai
payments.flux.ai
pr-11179.preview.flux.ai
pr-11168.preview.flux.ai
planfile.com
pr-10912.preview.flux.ai
centrala.taxi
pr-11192.preview.flux.ai
greendiamond-agvault.sentera.com
dg.gridabyte.com
overlay.acadarena.com
pr-11185.preview.flux.ai
flux.ai
pr-11183.preview.flux.ai
links.pixelcut.app
flux.ai
pr-11175.preview.flux.ai
dl.daleelak-app.com
flux.ai
pr-11180.preview.flux.ai
greendiamond-agvault.sentera.com
royalclever.com
pr-11170.preview.flux.ai
pr-4947.preview.flux.ai
pr-11180.preview.flux.ai
pr-11183.preview.flux.ai
alorica-develop.medgrocer.io
pr-11187.preview.flux.ai
pr-11186.preview.flux.ai
mydashboard.phaseplay.io
auth.flux.ai
pr-11178.preview.flux.ai
3d-cdn.flux.ai
repays.bwks.app
pr-11154.preview.flux.ai
contratar-stg.bllu.com.br
pr-10869.preview.flux.ai
pr-11179.preview.flux.ai
pr-11181.preview.flux.ai
flux.ai
pr-11170.preview.flux.ai
flux.ai
analytics-api.flux.ai
pr-11175.preview.flux.ai
www.onealtin.com
flux.ai
beta.tayyebiqardan.com.au
pr-11181.preview.flux.ai
flux.ai
pr-11179.preview.flux.ai
pr-11164.preview.flux.ai
pr-11194.preview.flux.ai
portal.usrobotech.com
contratar-stg.bllu.com.br
pr-11191.preview.flux.ai
www.punrelated.com
payment.i-kasa.com
auth.flux.ai
royalclever.com
pr-11168.preview.flux.ai
olivercote.com
pr-11170.preview.flux.ai
flux.ai
blouses.sora.my.id
pr-11168.preview.flux.ai

Certificate

The complete raw certificate details for storybook.flux.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421117841185606721635379849345359881768812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 14:43:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 14:43:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'storybook.flux.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 615906532075761190524242823463647559086278997143666241711464841502007823416645635691535375052418390717554670736047260423205343625140133401314449815927324754695948760249034248818648896220352090856555114378102370715029562981378159971537844238686107141096130066359350440622525141079559524576555949755194012276430458622828211210172578810157594943810324644357680505361004608764432623238156138496241855797169005594518934423074435948634541174262671045714352427977446124703331826330084832977212797945938109040696136399940150942122551546639799492710181022671809963637116503619396780925388878251154381885322129821251909767324097831852241676836859507252546108442184767559250991144982582020313688125711535544135179205785007660905501318796976039671373749023446227633055644478775978419958667128183008950688490172790565490194757630231258593657665985148457004086927366448113013926025020864427754269355231161353499280928671873686816037625289830965942814662662173461768698746821068976748187112120538706639751095280896895820259523319721892611182239412529643726734683117815958323808790067938940503022813453797034739804289176131809488944506792237371324082523604353510629469823827655925066924049710267259824599672640836476863102366980710388663608130882509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5c3183aa6bc3fe032636b6f690d3a8b0654f395
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storybook.flux.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e146eb9ff000004030047304502207c79a7b2e4ec836aea466804917f92ab9a0b391531d401554487b909e13babf10221008e3c64163bdc389c761dbf5554fc042fc7d6c6e6874f7a4c87486bea992f0ec6007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e146eba020000040300473045022060a028917e750431e506e4c806d05e397b98d6e015fbd165d437685089a02f38022100cb3a3f16fddd0670defe594ddb6f7ed8502ba176d7d3bc53e8349782458052c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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