ecflow.app

Issued by R3

About this certificate

This digital certificate with serial number 03:57:6f:2c:f0:47:85:fd:bf:49:55:7b:92:7a:10:84:46:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ecflow.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:6f:2c:f0:47:85:fd:bf:49:55:7b:92:7a:10:84:46:9e
Serial Number (int): 291089201359441260138270308614946303526558
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:da:ef:c1:24:e2:3f:00:67:e8:fb:d1:6c:36:39:89:8f:9b:c2:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:a4:7c:4f:bb:9f:04:69:3e:92:2c:54:3a:08:8f:90:79:e7:30:1f
Fingerprint (sha256): 60:b6:fc:a1:e1:06:9a:8c:5d:da:a7:5b:5b:b4:87:a2:ce:a3:a5:80:e9:43:66:8f:82:07:97:7d:58:74:43:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ecflow.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecflow.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecflow.app

Other certificates including the domain name ecflow.app

(limited to 100 certificates)
life.ecflow.app
docs.hipspec.com
gjorchestra.it
www.sigmastac.com
ecflow.app
entelechia.net
dev.lct-prime.de
ecflow.app
www.cityphil.com
www.buffalowater-dev.promise-pay.com
www.amaisbelezaesaude.com.br
giftpointscalculator.com
mediclinic.ecflow.app
www.kubalatransport.pl
weareforms.xyz
jamesstuddart.co.uk
www.orthodoxicons.co.uk
eventovirtual.co
saiasqueamo.com.br
www.splashweave.com
sriharsha.dev
tapzisolutions.com
ecflow.app
funkandschuster.art
evelynogvegard.no
www.splinters19.be
link.woov.to
api.blackwolffitnessonline.com.au
www.amaisbelezaesaude.com.br
app-link.nexquare.io
superscanpt.zed.link
www.ticaba.app
staging-student.rlabsu.org
eightplus.com
filler.opti-q.com
www.sharedmystic.com
app.escobadges.eu
www.sketchthat.com.au
ecflow.app
cuanto.com
personalityfrictionpointquiz.com
focus.fulcher.io
www.haoandxiaoye.com
pomgi.com
www.softwarelc.com
www.jelinekpetr.com
gater.livneh-iot.xyz
www.12mamis.com
login.riapay.co.in
js-adt.cafetextual.com
ena.marksteve.com
nasraldin.com
phyideas.com
todo.solarsail.work
staging.investhumber-netzero.com
www.larico.net
www.agamemedia.us
www.ecflow.app
evelynogvegard.no
pomgi.com
www.getcryptograph.app
app.infinityswap.one
staging.loogarify.com
ecflow.app
app-link.nexquare.io
ptmate.net
dystopiagame.com
mascontigo.com
links.almanabir.app
www.dimpdigital.com
www.vennsmith.com
triangledrycleaners.com
chefericardo.com.br
farmwatch.jp
staging.maslo.ai
ptmate.net
jamesstuddart.co.uk
oriyahrs.com
www.safike.com
puntounolab.lernit.app
webveer.com
dancehonolulu.com
www.garricklam.com
www.splashweave.com
grapher.life
webdotsupport.com
api.blackwolffitnessonline.com.au
www.12mamis.com
weareforms.xyz
www.kubalatransport.pl
staging.loogarify.com
www.alexistoledo.dev
dev.woo.network
www.placetell.com
beta.yopen.pro
www.drivedy.com
www.greenmenu.app
bchealthstaffingcentre.ca
www.rewards-dev.pocketpoints.com
dev.woo.network

Certificate

The complete raw certificate details for ecflow.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI5uHwl6HsrVzmeyYDEz
r0c2yKgsPg0jdcnPSPkVZ9vASzWkcgyZ2mTg0pscHFzAmGmmHh4JxF8IJrE31/nj
csk2I4PrnsMgphtp4w71bdNJ3Y2/TOxm/o/q9f5JgdsN7Vu3TtpIhY2nl/mj2ulz
MlelZ78FbDMh0OBQ8Pt/0XhssnSMlw5Ewu+l8/bB84EK8MdVd90EqbGuFBA7imcx
QpmW+Q6M3qOfrSXNYTL+VIi1437qhT5wIhvaF987YC1CLUaQRuD0zeAQ0PJphTyw
WY79AwXsyIZBaq8M107SojoE9tKtNnbeQ/U5In7XTjnxRk+S3pLVxuCr0cO3g7Xr
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291089201359441260138270308614946303526558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 06:06:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 06:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecflow.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20268363724693238892516389335418100974530424037616558193759325222356688066762524864510690730952630734952745333887601673083213327363172417079710509100031477254352616240981295408728270981486167971572135091806513086752442178709945208700611043629324004720958907717198075269197704023322197462971466986138355301914163014398877042615455629936254336882538558824990969143164045616440235483394295877060411793524011657315450367271600002966866319362601062223682302271968491252959731473393609079965660793651729933841300150645280652404664119148452359056020856909884313699962155675949787774377098068806128715219647877960532325952399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7daefc124e23f0067e8fbd16c3639898f9bc20d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecflow.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e36a1ea710000040300473045022100c634eed9c9a29ca0068c74dd1cfc0aa0eedbe35a4e4e7ad1cbd43c22ea364086022057d3c9c462940890290e9949e9b178b496fd7e3a45a37d89945678738553c558007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e36a1ea78000004030046304402205452cd0eee48e1dd74fc7599f4902814bf8d5244ff27b0c4eb141be96fe7698502202671bc1cbf7f76af62fe09389b578838518619d05b7f77ff55342585a6ca789a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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