jenkins.koumbit.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:90:c0:5d:11:1d:43:91:46:6e:ff:d8:4f:aa:81:00:6f:b3 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jenkins.koumbit.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:c0:5d:11:1d:43:91:46:6e:ff:d8:4f:aa:81:00:6f:b3
Serial Number (int): 397705499569574164009295694231840237842355
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:76:cf:71:e3:63:b6:d6:9b:50:96:74:00:9d:3d:cd:00:96:25:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:36:c9:e2:2c:49:4e:90:67:ce:f2:8c:fe:8d:a0:44:cf:61:7c:85
Fingerprint (sha256): 02:60:31:bc:3c:d9:97:2e:85:60:6a:67:45:19:55:26:1b:2a:2e:3e:0f:48:df:69:09:ee:ea:65:16:cd:ac:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jenkins.koumbit.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jenkins.koumbit.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jenkins.koumbit.net
stressant.koumbit.net
torride.koumbit.net

Other certificates including the domain name koumbit.net

(limited to 100 certificates)
ledger.koumbit.net
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org

Certificate

The complete raw certificate details for jenkins.koumbit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoha7mh8kPa/u7YfN2SKF
CI1ZYbcglr8pbUNlD1iV81OtDMWq08R4XxjYzRLfwwG5zhUvD6arjUMcmWY4eg53
GXdaCBDsGksoWfGmbbkW4ycR2LCUIM2n05eJoSnFpCskLlupeUDawt+XZGhcEm9i
6uJIbpgw4c0iEuFwvSWj1PyE4CGX021Tgjkg9uCxj6Vtss+Ho2XeYvdlRafVPGBQ
YetpUMolw8izQnsnMZM3inSEPqxlTi0/JLeT1MX3qvaVNGYI8/RLekO8XJ9jguvH
JvXIW4Z6N8sMaEQG0uNLadxoZtD0IBNhybZjOrBJ3Ltc9ZuJUnmnpIprCwguH+oV
QGrYAO9Kn/mXsOEDWVg01KubTjWAzN7kSl/82RIierPXZAaSEDiUNsUqYWdlWZ3V
0loAXfDninsNN4gigo8GWDtXn7sMaYbTnW1BPBYrKKQO99gPTxynYBwIp93eT0EB
RRx2YcpZWm0MXTMU1PxgaFtuDrEErAHKcy3dM/Xg87xDH0mqGDyBRm0Fl79NQCME
0mrgWCaDyp0QHiLFLngMeAvdVQiSY8goSJmUcashPcBtn1JEIXyrgAIXLc3FbaW5
geOr2ggQmXi6JTiclnrOvt08jdte+OdhZSTAtPLwbxaiRjXskg9Zidis5oxc5de/
F/O8XmxO2qWnazSiIJiLNqsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397705499569574164009295694231840237842355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 07:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 07:47:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jenkins.koumbit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661264611738548742411387418403088322011678195393812776683960350408613760361956924821905274493893026685712600777632795168256033182270790157696086635690261478106317113608582982134295446459366749475559300534423683654682258643981675242781341154554395119521503672604262772662921697197835995622257583527756279203764995171226739921310837512750640321330910109761968764427933125808526336284997278052927412492419877746219804236489075771797777015400513110380480932185954331645624350149426028940441851992355600461219492985610517435989155860937046950974867319784152822625275191903051938232077916741810136052923252447061200449549161453813432680428223618402723017287261136078438435096215007277589332760194974669858760933516691799952492057039128814840811909520961349344529767707857083370660451614695864081959739378084454860711521180591388592492829884762858224223279678135799976796629111931349411560401646951744052385593576284089812107815670535621987012156308682324374424777875472322620433803340939173356001251312258884429860264266041822830059531950210955769667352082133196252758155346792950301278121188605589290726805292379568551495351571921851170036807951667493444542033298937116010667955375088709829654753246562872717720268989960763869938810828459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab76cf71e363b6d69b509674009d3dcd0096258a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stressant.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torride.koumbit.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001686f97760e000004030048304602210092fa27143f0a06b7e57a4ca7e1dd348753523fd78e021e3e2e2c59adad5b06ed0221009f342c43ebd543db3a5e8a6b929ce38fae046693bd6a1f2062e72ceae89fa3db00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001686f9775320000040300473045022040efce86aa66ebca655cc2aac6bbb1a2b77f66a3cfc13b4f4b26e63f4f9299ac022100867c37cca306c24120eb7b1f8912e18747665c35b505ae8489388ab47f480997
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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