support.flock.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:3c:f0:7f:56:df:b2:50:bd:4e:2c:0f:63:47:a1:a5:18 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.flock.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:3c:f0:7f:56:df:b2:50:bd:4e:2c:0f:63:47:a1:a5:18
Serial Number (int): 401614195380449402565043426894542473897240
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:9e:b7:93:4d:9f:14:f8:ef:4a:a5:8a:8c:1b:46:f6:41:04:c7:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:17:7d:94:a4:c1:3e:17:3f:a1:1d:60:80:97:01:e8:17:95:26:28
Fingerprint (sha256): 82:6f:05:3c:0c:9c:80:08:3c:da:60:86:be:26:ff:2f:4b:5c:48:63:33:7f:6d:78:97:25:4d:10:cd:51:c4:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.flock.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.flock.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

help.neo.space
partner.flockmail.com
support.flock.com
support.flockmail.com
support.neo.space
support.titan.email
tso.flockmail.com

Other certificates including the domain name flock.com

(limited to 100 certificates)
corporatestatus.tyro.com
support.flock.com
support.flock.com
pages.flock.com
webinar.flock.com
corporatestatus.tyro.com
pages.flock.com
enomstatus.com
corporatestatus.tyro.com
ent.flock.com
kb.flock.com
*.internal.flock.com
*.flock.com
corporatestatus.tyro.com
ent.flock.com
*.flock.com
support.flock.com
*.flock.com
faq.internal.flock.com
webinar.flock.com
blog.flock.com
corporatestatus.tyro.com
*.flock.co
blog.flock.com
corporatestatus.tyro.com
*.ops.flock.com
faq.internal.flock.com
corporatestatus.tyro.com
enomstatus.com
enomstatus.com
corporatestatus.tyro.com
*.flock.co
*.flock.com
support.flock.com
*.flock.com
enomstatus.com
*.flock.com
corporatestatus.tyro.com
webinar.flock.com
api.flock.com
enomstatus.com
ent.flock.com
www.flock.com
bugzilla.flock.com
kb.flock.com
*.flock.com
support.flock.com
monumentstatus.mambu.com
ent.flock.com
blog.flock.com
enomstatus.com
enomstatus.com
*.flock.com
corporatestatus.tyro.com
blog.flock.com
www.flock.com
enomstatus.com
staging.mail.flock.com
support.flock.com
*.flock.com
enomstatus.com
*.flock.com
enomstatus.com
*.i.flock.com
enomstatus.com
support.flock.com
*.flock.co
extensions.flock.com
corporatestatus.tyro.com
*.flock.com
enomstatus.com
vpn.flock.com
my.flock.com
enomstatus.com
corporatestatus.tyro.com
corporatestatus.tyro.com
enomstatus.com
blog.flock.com
update.flock.com
support.flock.com
enomstatus.com
ent.flock.com
corporatestatus.tyro.com
www.flock.com
ent.flock.com
corporatestatus.tyro.com
ent.flock.com
*.flock.co
*.flock.com
blog.flock.com
*.flock.com
support.flock.com
corporatestatus.tyro.com
support.flock.com
*.flock.com
webinar.flock.com
www.flock.com
pages.flock.com
support.flock.com
*.flock.com

Certificate

The complete raw certificate details for support.flock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAochG6RDM37IQj4z6cCUp
aB8dcyHcxBF29ghkMkUHt/C4TbTW7WDvrWFlaYAovm37Y7CCFWdf+rWH6pqRu0GG
W1caWTg3dACWwIh/5h+yV7I87TkF5O7bm7HFm877dQnCIFaXn+ZBZTTtQD1ZKfsj
2hrGxinDKxFTsVGGpeV3fxV4fyqDMlAp0rXhLZ7+H0o6qv0hN/59Rgr4Rx2fPZln
ArQazR68SC9w66f8USmYo120VjcU30837MX8JlRv3lPpFMJXlks4Z6/5FWwsRU00
fLFtBUJbod1VgVuPlwp1f4G7GqOHwruZayfcUbTEV5ACzVGPykysh9iwTj/TqTm0
tWJWTiYqRD/tScCnZctU6aYDqvMem/2AMBiERiABo038BCvgUDTGZ6SuXZ288WB4
Xk9fjabQkaFfbwc5LzPZnnPsvOwOyzBJydI/oLBX/1f2wiIwj1ZphzWNrYciUc7v
liJi+lKK1aL6Zpl0W4k5qCXzo2G63IVx9puR0cy8Rttfz91J0FjVv/Z7aCEfXku/
f9K3WnMkouKNDxqhxVsv5cukWNBxNst9dNHfp4Vh49MvFSKQFu2tlQm7ZvvgJDZ4
0Gyi7iOkynFGNR47wpKFAepxIAtLJ2njEqQTpiISgBM421x6A/SeElbyeT8BiZp4
JsngX7rqw3LJ5oOZRGyX47cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401614195380449402565043426894542473897240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 23:39:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 23:39:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.flock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660014331082935440878401116907338575928766443397928930087045447703689833745217409784455964157605506376349644952892717487909428783134723003089091715051590370049275335980617813088904944922363822657627285296008731625551142898230257006425220164969503511310434741479412717988141771302139475879309379671327057302863160216068818969829839669274787548295711251257142326673455084817130632424894221990410047305057439429802608656334096440665555628997354886311808223960024870037642400495215883034226173673083934214717775168611675339831062087039481184216498926338765623462213622392606491661477054777905548865394213625049305980274931368869047706865608112703186955001918741363368977767884370551331888764762977043783896437012749282187892221759797577373196265840490734675074265212414072560390034561737042735393537781283648561093755331324227690729322660054897027930894683592698019903362276677074212557410558275030975830012480840184551014521858172496975800210806120957262649234746940475803970750300157722955084770977541068173203303293436638314776581655417328612403901493652637741993594087413558477239167435217342528825577521630403714016826610727632554679480444515976332040677574388936661927659474334008590638190329051956249818697534898406539871521334199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							709eb7934d9f14f8ef4aa58a8c1b46f64104c7e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.neo.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.flockmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.flock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.flockmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.neo.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.titan.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tso.flockmail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189c8489a11000004030046304402207115d6d32325e6fd2eb9be5fa366c3d96dbfb20ab0f0b0bfaf0a973a11b83a19022073a549d9445a74496c1046a003ed9b57900465285f8601bc107f9dba6344b219007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189c8489a10000004030046304402207d965a1f9579fa0bba3dcedcdb6d28ce4b7e0219893d9c3a28513e8a2e39d6d502201106ef1f866cc2bffaec56866afc6fa823c833f03376698258f05dabbaa17e40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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