job-flow.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5f:7f:43:80:fe:ef:57:7b:8e:8d:10:7d:b1:e2:f0:ff:7e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=job-flow.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5f:7f:43:80:fe:ef:57:7b:8e:8d:10:7d:b1:e2:f0:ff:7eSerial Number (int): 293832845108470555341613425025692441051006
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4f:d2:61:b2:bc:cc:45:e3:56:6d:f5:19:f8:14:ee:6e:c4:83:94:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): eb:8f:e9:a9:57:bd:1c:94:7b:8c:74:e4:e8:3d:82:a3:1b:ca:93:6e
Fingerprint (sha256): 5d:31:46:aa:0b:27:b7:a6:eb:2b:01:ba:16:ee:92:f0:d6:8c:35:2b:63:29:c4:47:c0:62:a9:97:39:21:a7:d2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate job-flow.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for job-flow.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
job-flow.nl
www.job-flow.nl
www.job-flow.nl
Other certificates including the domain name job-flow.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for job-flow.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISA19/Q4D+71d7jo0QfbHi8P9+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDQyMTM0MjBaFw0x OTEwMDIyMTM0MjBaMBYxFDASBgNVBAMTC2pvYi1mbG93Lm5sMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAsjaNqJXuLajaqWjEY4d6oNYTkhKlNbtHWVSW jWAQP0cBqm713wdBQccdEDO09hvGj3X7tBPzWlt8oAh++j24JztOvWNSQSntkT10 EM7siwUTOa9e7GU40o1h3vJnTB1OZYMzoCcN4dln5XUyT9kJQm5yHRLdEO4OARLG v9JL8lTXTp+yAOKNtbI86Hk53HGFsI1Gr547Z97HeYmXUY3Y6hG+mFV0272/sQDR m84Gxh+uAYGCQb5Jvd6PJzyQRcqhQ2XcvkGITlUwQeVN2ZL60C++WfFgtdlD/kz9 zBdtyb5T1/DxvR1sy3UKmTatbP3AmZPDdLUkh0OxVdH9xFtM4xNvjmHEX6F1OgcQ zOo7aGrZRncOB4cpZ+7EMOvltswoM3GTxoVfPBUYpTjf4p6OAnZ7AGkYJXMP662u cz78zoZ1XGopoTDsXWAHuWuLgTh7mUhx/TXCB6nWgG/HI1MRzAfd8dgVkdEIKuPs GiHCABiTMc6ZzmCX6wryF4SRIv4j6N97Tt8Qnzee9JM6iofss299jssnOYZCnaHV bhskn7U0zur6HC+tA9SRr1yCmE+zZ3NjQPZGMARtit9aEYwwt+gGdbr/H4pgLSd4 wOlhtVmGAdIHq06vQeP1AiLj9VZU21EyIsZiEUBmRNlg9+88Xi/ENRk1OTY5A4kl tzqK96sCAwEAAaOCAm8wggJrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUT9JhsrzM ReNWbfUZ+BTubsSDlMgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtqb2ItZmxvdy5ubIIPd3d3Lmpv Yi1mbG93Lm5sMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYB BAHWeQIEAgSB8wSB8ADuAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x 2/4AAAFrvx/NXwAABAMARjBEAiAIxeLR4rDXCWGK0dfK/vgaWNfC4Z0L4/bK2RLf hIyHngIgcLlIKzbdvPZklwGaYNRbIFsr1XcN4YzAj2KImEPBTVIAdQApPFGWVMg5 ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWu/H8z2AAAEAwBGMEQCIDeyZChu LOifXhO2Ub1o6JjcpaFs/0T9bpjuwsvnVjhJAiAJVZffd6ya5BP1qTHcLeYcqDx1 IsJY195nYygrcJ3zgDANBgkqhkiG9w0BAQsFAAOCAQEAaXih2II6nSecjC7MgNBQ zptMpSPR512mJCnu7kKXDXCDnCHqS8YOEgG8NdvNZwef8muUVIP2la2ye79FiS8d uSHSTh3Qg4MYjldLmvCl1ubMZA/hMm2dT74kJ0BHjWnPooQyr0TkIar0DwyvtcS4 Z7Tlcu4zB0KmMiwNAVARCd87MH5mk5r8b71SmSGSasEpaAktnl24jNj+19QVCHHX EKAJG4Y3l4JvHptoRbrgz/RnBXc48TJxZOpfcmP4UCE/PEEs8kmCd0PlpZ8ZkhDP 9Ih/+bNAPgYVrearpDzU0GQ7W0TnG8oFiIgz+ZKgE+0TsNb8KLDTLchK7OOBdZ+o jA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsjaNqJXuLajaqWjEY4d6 oNYTkhKlNbtHWVSWjWAQP0cBqm713wdBQccdEDO09hvGj3X7tBPzWlt8oAh++j24 JztOvWNSQSntkT10EM7siwUTOa9e7GU40o1h3vJnTB1OZYMzoCcN4dln5XUyT9kJ Qm5yHRLdEO4OARLGv9JL8lTXTp+yAOKNtbI86Hk53HGFsI1Gr547Z97HeYmXUY3Y 6hG+mFV0272/sQDRm84Gxh+uAYGCQb5Jvd6PJzyQRcqhQ2XcvkGITlUwQeVN2ZL6 0C++WfFgtdlD/kz9zBdtyb5T1/DxvR1sy3UKmTatbP3AmZPDdLUkh0OxVdH9xFtM 4xNvjmHEX6F1OgcQzOo7aGrZRncOB4cpZ+7EMOvltswoM3GTxoVfPBUYpTjf4p6O AnZ7AGkYJXMP662ucz78zoZ1XGopoTDsXWAHuWuLgTh7mUhx/TXCB6nWgG/HI1MR zAfd8dgVkdEIKuPsGiHCABiTMc6ZzmCX6wryF4SRIv4j6N97Tt8Qnzee9JM6iofs s299jssnOYZCnaHVbhskn7U0zur6HC+tA9SRr1yCmE+zZ3NjQPZGMARtit9aEYww t+gGdbr/H4pgLSd4wOlhtVmGAdIHq06vQeP1AiLj9VZU21EyIsZiEUBmRNlg9+88 Xi/ENRk1OTY5A4kltzqK96sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293832845108470555341613425025692441051006 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 21:34:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 21:34:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'job-flow.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727046012332826000461737878168555197170063795089087934428799188711624984384742234020155779583150247894700075401858566146653121725099722640274883274084180326361405314957337580690781473303822285803133567273802958224109822977476735064780369307151034729156928540373579618096875252963856148392189571627767940045814266660549752424702035757157588666872825585922689408586290552466800598944343749907261779907023880439900034343284787056479526265649574141578616537314391452526210031465553251011866121370815264336099895184368397447588400902917036136225865667270363451466261212445253011916457698420474163372102915836372332074508707111856103408739183287637409305717871661539917689567963330417999810857893501461748177721901564598618971210162619495190362849078685113275828007533902524538983957830372118420239217202178803474860002508794392521773292826172927590631260767399812725732028196942228109172528620758098452267984667332824665341603974025684483084917400348512026924386468586455314141160860318810467393170686525488616340193577088566625073692883302528412603003666984620422669264505361785378316347739785047482635873689140285451604652685035301692076034027286486247290571172188695642668470112972624246397368311753236115571812979827947366775951914923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4fd261b2bccc45e3566df519f814ee6ec48394c8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job-flow.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.job-flow.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bbf1fcd5f0000040300463044022008c5e2d1e2b0d709618ad1d7cafef81a58d7c2e19d0be3f6cad912df848c879e022070b9482b36ddbcf66497019a60d45b205b2bd5770de18cc08f62889843c14d52007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bbf1fccf60000040300463044022037b264286e2ce89f5e13b651bd68e898dca5a16cff44fd6e98eec2cbe75638490220095597df77ac9ae413f5a931dc2de61ca83c7522c258d7de6763282b709df380 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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