spectrumflow.net

Issued by R3

About this certificate

This digital certificate with serial number 04:21:3e:ed:c3:81:65:cb:77:29:8b:5b:5b:bf:58:a4:8b:89 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spectrumflow.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:3e:ed:c3:81:65:cb:77:29:8b:5b:5b:bf:58:a4:8b:89
Serial Number (int): 359762108510847903056132097350872653400969
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:51:14:ba:ca:39:64:2c:4c:9e:1d:a3:e9:cc:cc:49:74:18:95:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:d8:e8:a4:2a:2e:de:97:6e:6d:c0:58:13:53:60:23:38:3e:db:c0
Fingerprint (sha256): d1:22:0e:dc:c8:97:54:35:f0:d2:17:0a:69:d5:d5:8f:a9:00:8c:a3:54:9c:30:47:ef:be:4c:fc:22:ab:6d:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spectrumflow.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spectrumflow.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dev.spectrumflow.net
*.gitlab-pages.spectrumflow.net
*.idm.spectrumflow.net
*.spectrumflow.net
*.test.spectrumflow.net
*.vie.spectrumflow.net
spectrumflow.net

Other certificates including the domain name spectrumflow.net

(limited to 100 certificates)
rancher-waf-test.spectrumflow.net
spectrumflow.net
pagebuilder.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
spice.spectrumflow.net
dynamic-experience-prod-distillery.argo-cd.spectrumflow.net
*.spectrumflow.net
rancher.spectrumflow.net
testrodeo.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
dte-stage.argo-cd.spectrumflow.net
spectrumflow.net
spectrumflow.net
rancher-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
dm-nonprod-eks.argo-cd.spectrumflow.net
backend.testrodeo.spectrumflow.net
*.spectrumflow.net
distillery.spectrumflow.net
uat-business.pci.spectrumflow.net
tdcs-dev.spectrumflow.net
clusters-stable.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvrnew-eks.argo-cd.spectrumflow.net
gitlab.spectrumflow.net
spectrumflow.net
best-slate.spectrumflow.net
rancher.spectrumflow.net
vsi-specflow-entitlements-capiv4.argo-cd.spectrumflow.net
lineups.vsi.spectrumflow.net
fosd.spectrumflow.net
sspp-web-preprod.spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
ipvs-dev-eks-blue.argo-cd.spectrumflow.net
leo-metadata.argo-cd.spectrumflow.net
epgs-loadtest.argo-cd.spectrumflow.net
slate-tve-engprod.spectrumflow.net
rancher-test-upgrade-argocd.spectrumflow.net
pci.spectrumflow.net
jdtest-cluster-3-capi.spectrumflow.net
rancher.spectrumflow.net
v2.spectrumflow.net
rancher-next-argocd.spectrumflow.net
lantern-dev-capiv5-sf.argo-cd.spectrumflow.net
spectrumreach.ncs.spectrumflow.net
prod.spectrumflow.net
emu.spectrumflow.net
cdvr-mc1.argo-cd.spectrumflow.net
*.qa.mds.spectrumflow.net
rancher-next.spectrumflow.net
transition-meta-toolbox-flow.meta.spectrum.net
rancher-test-upgrade.spectrumflow.net
spectrumflow.net
*.meta.spectrum.net
settings-vhs-capi.spectrumflow.net
nns-search-eks-cluster.argo-cd.spectrumflow.net
vsi-specflow-ipvs-new.argo-cd.spectrumflow.net
ecd2.spectrumflow.net
rancher-argocd.spectrumflow.net
figaro.spectrumflow.net
spectrumflow.net
spicecdvr-eks.argo-cd.spectrumflow.net
slate-tve-engprod.argo-cd.spectrumflow.net
ipvs-mc1.argo-cd.spectrumflow.net
focus-stage.argo-cd.spectrumflow.net
dte-stage.spectrumflow.net
pltvspecflow-1-29.argo-cd.spectrumflow.net
testrodeo.spectrumflow.net
neel-test.spectrumflow.net
backend.testrodeo.spectrumflow.net
best-cluster.argo-cd.spectrumflow.net
ipvs-dev-purple.argo-cd.spectrumflow.net
spectrumflow.net
rancher.spectrumflow.net
cewga.spectrumflow.net
cewga.ncs.spectrumflow.net
settings-vhs-poc-capi.spectrumflow.net
grafana-it-dev1.argo-cd.spectrumflow.net
rancher-argocd.spectrumflow.net
cewga-ncs-lowers.argo-cd.spectrumflow.net
metadata-epgs.argo-cd.spectrumflow.net
*.tvsdk.spectrumflow.net
rancher-test-argocd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
spectrumflow.net
clusters.spectrumflow.net
*.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
pdetube.spectrumflow.net
cewga.spectrumflow.net
*.pltv.spectrumflow.net
sspp-web-preprod.spectrumflow.net
*.pinxt-sdk-docs.spectrumflow.net
settings-mc1.argo-cd.spectrumflow.net
neel-test.argo-cd.spectrumflow.net
gitlab-sf-geo-a.spectrumflow.net
*.meta.spectrum.net
best-eks-capiv5-sf.argo-cd.spectrumflow.net

Certificate

The complete raw certificate details for spectrumflow.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359762108510847903056132097350872653400969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 18:33:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 18:33:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spectrumflow.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 544169619892239803786894883888678375619085303960399740542730134840252081660598109970487598587344863731892978780734926147861723491353459875620029447231903035167646353061166111382628349544536806588528773651935403343748168937458258818332420352001944846937725726522674859115659725684188240873601595981074941254539520117123895309089996440515697577726399689586607968756172445522593944311154318413848396485161269011060327097771779116911604342719167057739334904303995325616863733695605264243685871143770979096208474506348648908158537217906010350454774115227807930935129963792426227932697866556222169455807215408171925087157203045038972126977660549276698139263994539081960027126704649714505585433084056362564252279011024810091381461600394776724329126702203732608170017864899236376898882170012719318224784130145713884276826143202029621010618503664025807562371611210480030998754124428575511319650677356104421905646990266907222763689558282790321682031680052785223602584485940607872436791521351166149343132222532810096831712284688299326253205217857376679790928010828579782682662510883918281470940984356272334908530010735337751238768885973724323502000349850832825424506732013590083219325020761412738571447893227096376801261426214350387280792065929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c25114baca39642c4c9e1da3e9cccc49741895e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitlab-pages.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idm.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vie.spectrumflow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumflow.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cb1eb44950000040300473045022021ed3aa2016c94c6bfb06243e899625564562edf1d9104b4866a7fa204d78998022100ec40162bf36d5f638dda2c5b0ce20b70a38adfb4de77b9b97cc91898d114c98700760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cb1eb455b00000403004730450220018c82714bcc9495c13199b25bb3b6739361eebdb4598662d05c5ec7d46914700221008e8d816b2f1d3be72db6aa9d3cda81a6962f976be5afc2a8c276d6b65b7c50e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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