nextcloud.cumulus.koumbit.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ea:0a:1c:1b:17:34:7b:89:b1:74:bc:22:00:4f:f1:f9:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextcloud.cumulus.koumbit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:0a:1c:1b:17:34:7b:89:b1:74:bc:22:00:4f:f1:f9:35
Serial Number (int): 340976369868513778129251390815097985300789
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:d6:71:c5:28:bb:d6:ce:0f:ce:a9:a3:e9:23:9c:85:12:fa:5f:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:e5:ee:2a:ba:37:71:b9:06:da:17:8c:26:76:8b:e4:90:e6:10:50
Fingerprint (sha256): 00:77:02:fa:d3:83:b0:84:39:de:29:66:ed:00:d5:9d:a7:f7:24:b3:6e:7c:b8:83:0a:72:05:6a:f0:e7:11:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nextcloud.cumulus.koumbit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcloud.cumulus.koumbit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcloud.cumulus.koumbit.org

Other certificates including the domain name koumbit.org

(limited to 100 certificates)
nextcloud.cumulus.koumbit.org
gabrielle.koumbit.org
www.vikinge.koumbit.org
www.koumbit.org
www.apbm.koumbit.org
www.shadowrun.koumbit.org
www.assep.koumbit.org
cmac.gwradio.koumbit.org
lmssop.koumbit.org
www.narchive.koumbit.org
www.johnb.koumbit.org
www.gfilion.koumbit.org
www.adte2254.koumbit.org
pplif.koumbit.org
www.assep.koumbit.org
www.koumbit.org
tnm.koumbit.org
nextcloud.cumulus.koumbit.org
www.assep.koumbit.org
mystic.koumbit.org
www.joasia.koumbit.org
wiki.praec.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
gabrielle.koumbit.org
*.koumbit.org
www.koumbit.org
www.gfilion.koumbit.org
www.koumbit.org
gidget.koumbit.org
www.kepo.koumbit.org
confluetest.kwekwe.koumbit.org
www.joasia.koumbit.org
nextcloud.sdcmp.koumbit.org
www.joasia.koumbit.org
www.narchive.koumbit.org
vikinge.koumbit.org
www.assep.koumbit.org
wb.tnm.koumbit.org
rcentres.koumbit.org
www.assep.koumbit.org
www.shadowrun.koumbit.org
www.koumbit.org
www.koumbit.org
wb.tnm.koumbit.org
www.tnm.koumbit.org
www.narchive.koumbit.org
cmac.gwradio.koumbit.org
www.ktrh.koumbit.org
nuage.ecrinum.koumbit.org
nextcloud.sdcmp.koumbit.org
nuage.ecrinum.koumbit.org
www.philou.koumbit.org
70s.haproxy.koumbit.org
narchive.koumbit.org
www.koumbit.org
www.assep.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
www.koumbit.org
https56.nina.koumbit.org
etcgroup.koumbit.org
www.koumbit.org
www.praec.koumbit.org
www.kepo.koumbit.org
rcentres.koumbit.org
ktrh.koumbit.org
www.joasia.koumbit.org
www.assep.koumbit.org
gretchenk.gwradio.koumbit.org
www.koumbit.org
www.enkerli.koumbit.org
*.koumbit.org
shadowrun.koumbit.org
www.koumbit.org
www.mystic.koumbit.org
www.koumbit.org
www.assep.koumbit.org
www.koumbit.org
www.koumbit.org
www.joasia.koumbit.org
enkerli.koumbit.org
cache.haproxy.koumbit.org
www.largot.koumbit.org
ktrh.koumbit.org
www.enkerli.koumbit.org
www.koumbit.org
vikinge.koumbit.org
gidget.koumbit.org
www.joasia.koumbit.org
www.praec.koumbit.org
tnm.koumbit.org
www.sdcmp.koumbit.org
www.koumbit.org
www.koumbit.org
www.koumbit.org
wp.nina.koumbit.org
www.assep.koumbit.org
81s.haproxy.koumbit.org
www.koumbit.org

Certificate

The complete raw certificate details for nextcloud.cumulus.koumbit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340976369868513778129251390815097985300789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 03:01:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 03:01:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcloud.cumulus.koumbit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854724105943212222242255947509932736098289252286481439126347093400642715671786775276629075265518984311510467177499593164102223661647378863602503479160201429093761977759767856159812505174141889659606697660577539040271816438589980240787026929475188327959325681711401728026193897189763526189582344260959118321800054875515576639298994571806652402920156158496563256572044630031172167304855317374307787812855877958243706811854360777399558820905709536858337907569971354337594628936537893780582375734032304672634385403591211493844301181005339730203004137344033337065095936371108392443265183366174851166200297570772467730941896261910783293614585093536385225702170526914730826574967829282295165021535995254005908128545624023534606235133091653939074775876039781301746942605426486961196400116980821788037330797529716179198132740186184559881170056789008455159179892666611162154641817700818587265426422908540282318118477412451276277679749156377119730758373660722975254625510397577805621405534167948990601494804899751722344494955664817350677295292591024372566686770788001382239218484235224781134518055369466751799849012423985226292570007102616231087436489855679329919308880541924242880735907398935188889189173878678424215236457748146791453295652767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46d671c528bbd6ce0fcea9a3e9239c8512fa5fac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.cumulus.koumbit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188992ac34a000004030047304502204f3e924a9f014cfc2c5cf3b08af61895272481cd3f4bf689df0594bd72435610022100801e71c98170faf831d0e8c5cd0bd620640063d7bc5490d6454deeebd9a2f0920077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188992ac35b0000040300483046022100f7d5af63141d29d7b7c5bd72c2966ffb4c2e713e98300cb0ebf42638e2581ed9022100fdb8d2cb369576dc3cc04d44ace92c1f41343237416be95827ea9960b4d85654
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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