bugs.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 03:21:6f:98:58:1f:00:e6:f9:89:76:25:d6:66:06:ce:2b:fc was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bugs.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:6f:98:58:1f:00:e6:f9:89:76:25:d6:66:06:ce:2b:fc
Serial Number (int): 272714511227634729580487594528491824884732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:8b:b6:22:7a:97:97:86:d5:21:68:23:de:70:21:e2:ac:51:80:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:26:d5:3a:68:af:1c:f7:21:45:ab:c2:1e:69:72:a3:d7:02:de:2c
Fingerprint (sha256): 01:55:38:07:a0:1d:23:5b:39:dd:69:67:5c:3a:91:fa:94:fd:d2:59:fd:6c:6a:d1:54:c5:2d:18:68:45:06:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bugs.documentfoundation.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bugs.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bug-attachments.documentfoundation.org
bugassistant.libreoffice.org
bugs.documentfoundation.org
bugs.libreoffice.org
bugs.tdf.io

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for bugs.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272714511227634729580487594528491824884732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 02:07:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-07 02:07:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bugs.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862613070941235836354577842385698680268749892274023298987053706317520813998066272926704145581863028241654683123687034337908108836980525920877457023647560368003315450450964667646795844044881182211994809740596036685185854470037129709683582676666723672038046359288066229602900953963867218135370462725187345472227729294828617202426405082465675825420181910913723718891081403515114780199773658235266864385046943452717355907158444495276941229108649269435280289988878012112930725825861444803873729919090741000008623797338755222907484865662040806753569514761816009454988856943998026182218250128488760533829889181212840642415460436323479633753957795160216565793841355480020486418841472795754755812463681393587808789240100771578398323863973959208181120434359702234533954902028745063841934806389303961291236336816003980838053468057176770040185344550016183255167885352724937159973092731715994745564151786353846181639158218054188521348700723402640118145594881772743504303501506003235826133051252711865270014223503118156089327000782470667708901890939230467520482949552630379190634112809881945994706218313770654503552220302568695030577622008343982122660735636643301634638238859534686657928323101810109937140206854814786744167347465935770832969298763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							868bb6227a979786d5216823de7021e2ac51800f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bug-attachments.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugassistant.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.tdf.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e328145380000040300473045022100d819ffa8a14abbaa75341d5236b4b4e9c153cd94b3cb731cf91c250c5be9ca9b02203119715c41999978e69a507539c0c3fc2aff35581fc3b422aa53e8ce836f7fe700770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017e3281456900000403004830460221009c397908038dc41f7d0361c04e66259cbc91f75af64e39398d5615e199f22fa5022100c38495fbf432af86f9de84c5b1011a1424e2ff3922367a8632ba6446346b068e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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