bibisect.libreoffice.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ad:43:f4:4f:88:74:52:40:3c:fb:19:df:ab:a0:e1:4e:a6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bibisect.libreoffice.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:43:f4:4f:88:74:52:40:3c:fb:19:df:ab:a0:e1:4e:a6
Serial Number (int): 320296034081875554467296173226542265093798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:bf:fd:e6:f0:78:1e:7c:08:da:d7:43:23:cf:1e:ae:3c:15:65:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:a9:2a:e4:72:25:fa:6e:0f:99:f8:a7:bc:20:50:a6:99:0c:84:e8
Fingerprint (sha256): 02:81:a4:2d:1b:99:ba:c1:24:fb:2f:0f:32:26:46:d5:e9:c7:57:19:49:3d:2d:bc:41:51:32:72:c0:b3:02:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bibisect.libreoffice.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bibisect.libreoffice.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bibisect.libreoffice.org

Other certificates including the domain name libreoffice.org

(limited to 100 certificates)
extensions.libreoffice.org
bugs.documentfoundation.org
newdesign.libreoffice.org
devcentral.libreoffice.org
dev-www.libreoffice.org
bugs.documentfoundation.org
survey.documentfoundation.org
devcentral.libreoffice.org
survey.documentfoundation.org
bibisect.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
docs.libreoffice.org
help.libreoffice.org
opengrok.libreoffice.org
opengrok.libreoffice.org
api.libreoffice.org
ask.libreoffice.org
update.libreoffice.org
dev-downloads.libreoffice.org
opengrok.libreoffice.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
libreoffice.org
wasm-test.libreoffice.org
hub.libreoffice.org
api.libreoffice.org
newdesign.libreoffice.org
translations.documentfoundation.org
manual-test.libreoffice.org
docs.libreoffice.org
downloadcounter.libreoffice.org
update.libreoffice.org
devcentral.libreoffice.org
docs.libreoffice.org
jenkins.libreoffice.org
devcentral.libreoffice.org
libreoffice.org
translations.documentfoundation.org
devcentral.libreoffice.org
docs.libreoffice.org
helponline.libreoffice.org
wasm-test.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
jenkins.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
crashreport.libreoffice.org
newdesign.libreoffice.org
newdesign.libreoffice.org
listarchives.documentfoundation.org
dev-downloads.libreoffice.org
ask.libreoffice.org
devcentral.libreoffice.org
update.libreoffice.org
translations.documentfoundation.org
stats.documentfoundation.org
devcentral.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
gerrit.libreoffice.org
perf.libreoffice.org
docs.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
gerrit.libreoffice.org
hub.libreoffice.org
docs.libreoffice.org
crashreport.libreoffice.org
registration.libreoffice.org
stats.documentfoundation.org
jenkins.libreoffice.org
dev-www.libreoffice.org
dev-www.libreoffice.org
hub.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
translations.documentfoundation.org
update.libreoffice.org
bugs.documentfoundation.org
update.libreoffice.org
manual-test.libreoffice.org
help.libreoffice.org
hub.libreoffice.org
manual-test.libreoffice.org
translations.documentfoundation.org
dev-downloads.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
newdesign.libreoffice.org
docs.libreoffice.org
api.libreoffice.org
helponline.libreoffice.org
perf.libreoffice.org
gerrit.libreoffice.org
bugs.documentfoundation.org
wasm-test.libreoffice.org

Certificate

The complete raw certificate details for bibisect.libreoffice.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320296034081875554467296173226542265093798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-19 02:07:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 02:07:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bibisect.libreoffice.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4656874512479902767124340830968866461988471051652739288138906781559060249614769419301962077014905749097882678575194253999368328548218145899995684154214945402133050349668573615299039635418924178296676434943156946771412971526677116736863850587126133260618436433929536070367229396770085539916466654624591057152877340555932086238289766128566181726303751018540270915036687996606998488531694834122432511240472914341493620981610587078706239362241069427673249271705565097163090185001115764625429245029046719526100865379393879650195483717779813821953907172044874520840432701173490032374672307962733889320374224928501820271290060547560711029507678385154700685744945164457015321236969632926524480154023228984206126279475777876893014451343614983738105285739793333387705622235486984246092251900704096728533306173847366312201229310435193289505792584972950673140239783314633004320275255452938162630575534063960625302783679589573559431987329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98bffde6f0781e7c08dad74323cf1eae3c15658a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibisect.libreoffice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001848ddaa943000004030046304402201a4793dae263658ba90c6066c89edd42d17f0c61f5187d10be313c959148dc05022056bc9fe53a66a0fe4d1f2ec10686d2b517469e382a88f505785c1c6c8424428e0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001848ddaa961000004030047304502207ee32fb73e6fc1147c8873229c7ce272522c69c325858eefabcb946a14b22a11022100e8441f9d3b0e4b0dbe2b7967873fc5bc596cf26b0abce668deecce555de15c1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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