creativeflow.net

Issued by R3

About this certificate

This digital certificate with serial number 04:de:67:d4:d4:de:66:aa:8d:3a:f7:7c:6d:bb:0c:2f:78:c0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=creativeflow.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:67:d4:d4:de:66:aa:8d:3a:f7:7c:6d:bb:0c:2f:78:c0
Serial Number (int): 424129844751480442901384444449137259149504
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b1:24:6b:b0:bd:e2:19:19:d9:32:6a:90:37:63:1a:89:dd:5e:7c:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:68:53:f3:ec:f1:73:df:5e:e6:1d:20:66:51:8d:2e:33:e9:ff:bb
Fingerprint (sha256): aa:c9:00:16:aa:98:f8:e7:c9:27:a6:60:27:3a:11:da:9b:47:28:20:3d:cf:f7:c6:b2:85:85:75:84:3b:6b:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate creativeflow.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for creativeflow.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

creativeflow.net
www.creativeflow.net

Other certificates including the domain name creativeflow.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for creativeflow.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424129844751480442901384444449137259149504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 13:43:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 13:43:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'creativeflow.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661673886037459116593127335276715320911642572568417539932032981440129634510688848515677449901470195305383069301328770126558388445373697723556677589797482876938172928409922343174670186245890063643128959303468223194261470872102597397635037238010708253580746845406588881870405521153027480523324492631454436942919360544541589416329197095324926450910292467984704931893979676048258677679970729797771783440776687907050437227034394513433513264991288739159016273592400061916449610515151661849173880388174176115864737592234744122790041606485209067316568785919060793323191871893251610968978073822995354200212256342455031000216204032531833343293865828056889987983505033427579962514244982258504758882795288814127267039828342109904481059832703700397709431579884631928519446117072594552890701323460226918548627868201320840741214822816356485877782248283703108818856700605733576279678623753155811770140606137330779655899637309438790456203597798574926683284139189462417232285390820692152055010252723462312780439769412983307158742651238899856914649058094015791841504002427652553709701007437088140235445955773756023094864764548110986057261818372877400024329415208108142289701566640059903254147107410166692056576643381988134983185276326387517722190634629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1246bb0bde21919d9326a9037631a89dd5e7cf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creativeflow.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7d61f8020000040300483046022100b85f5cfda140508dc3311fff2f6873e65868ecb239fa5e7fa50ab80bdc7821b8022100dc002dd028d4d6e5d462a973e4ca2ad6f0d72b813806b46de63c02280800f5b90074003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7d61f7f7000004030045304302202e808169a398455f4c396cad1706cc27de0c062922012cd2f143bedeccf22cf9021f1cb8512a8b992b2dcfd3e87fe51b6da01c517f39973135c40f260a2d663245
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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