DV SSL/TLS Certificate for flowdynamo.fi

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the flowdynamo.fi DV SSL/TLS Certificate

This certificate with serial number 06:f1:19:cf:f1:43:a2:42:3d:0a:6c:9b:e2:1b:e4:e2:57:c3 for flowdynamo.fi was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for flowdynamo.fi provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:f1:19:cf:f1:43:a2:42:3d:0a:6c:9b:e2:1b:e4:e2:57:c3
Serial Number (int): 604716076417271207198018462645385590626243
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 83:27:33:75:5d:f0:bc:ed:bb:10:30:79:8e:4a:13:67:30:3e:5f:32
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): be:21:65:72:b6:ee:3b:ae:cb:27:8d:84:d7:ce:75:5e:29:09:c2:49
Fingerprint (SHA-256): 4a:be:29:51:e3:f6:b7:af:a1:d7:72:56:2a:45:88:c3:0c:3e:38:65:ef:83:05:7b:2c:f3:9c:53:c7:45:99:27

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/68.crl

Check the revocation status for certificate flowdynamo.fi
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for flowdynamo.fi

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for flowdynamo.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 604716076417271207198018462645385590626243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 00:08:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-02 00:08:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flowdynamo.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778449928736148817598043536981724491339497313307643102297706719831447642893125699214534018224215500468103217012140470033353528653164536893578231655971963146527234259554129152828173926085483735888408958601405001289296348381464265241878355707441486360510434127178161989030649567765936614556812857187530472703461149493920777513739161001632657252029421589598151673014343344389772936284465316604968319259770081152655311082745239712582037197731085801362107239312834548047398840739494558156377908639133012927386592497181926730388894904587868017724496779617264829174273456876658324895726129439399975173061327809370250472517033276354701969281392375262635938664328882011242153802197366328310660076660146161754693849968008851554993890724011491107110781204994845935492819828012051455831044060460872250419066714582017453311888282486757114999484895533401498086330434013063202355388655895074297570949749279834306655424724246251716751774574917145049709303851314146111688458377803040350382679648585910784151227386271618353054161297234996573327977817277849254027321954018443978326722705664145363770446674950438784086517111326466513901138922668465876934375092659620407304437552303970911945954678364224562600281698553047414859037727062300651333463244171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							832733755df0bcedbb1030798e4a1367303e5f32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowdynamo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flowdynamo.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/68.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197387a4a890000040300483046022100964fabe942dcfc30972d6083dd7220173ca718b084c6b7c44e5b7891389b8e11022100a8963423bd0f1407aa4a00c5fcb98b203af403218a061eb7265baf4036b69e7f007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197387a525f0000040300463044022006fa4261814e7b844df2052f1068329bd605324a1b5004101130584b8d6d4cfa02201a27b643355c0c61c7835062ac91a29a7ba39e90282b163fddc3d20f6baf0aac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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