opengrok.libreoffice.org

Issued by R3

About this certificate

This digital certificate with serial number 04:81:8f:84:84:93:df:9e:64:02:f3:a0:80:e3:46:83:a6:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opengrok.libreoffice.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:81:8f:84:84:93:df:9e:64:02:f3:a0:80:e3:46:83:a6:de
Serial Number (int): 392536336735418432151721242401160713971422
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:12:2b:33:dc:e3:dc:8f:84:79:84:08:00:04:e7:68:78:01:08:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:17:15:72:f7:fd:59:40:1b:7f:ad:48:a3:d3:ed:3d:b2:27:ad:6e
Fingerprint (sha256): 04:79:b9:06:e5:79:5d:ea:cc:53:8d:02:6d:bb:bc:ae:c9:0d:af:a8:af:69:a7:a0:61:e7:b3:58:98:94:9e:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate opengrok.libreoffice.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opengrok.libreoffice.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opengrok.libreoffice.org

Other certificates including the domain name libreoffice.org

(limited to 100 certificates)
extensions.libreoffice.org
bugs.documentfoundation.org
newdesign.libreoffice.org
devcentral.libreoffice.org
dev-www.libreoffice.org
bugs.documentfoundation.org
survey.documentfoundation.org
devcentral.libreoffice.org
survey.documentfoundation.org
bibisect.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
docs.libreoffice.org
help.libreoffice.org
opengrok.libreoffice.org
opengrok.libreoffice.org
api.libreoffice.org
ask.libreoffice.org
update.libreoffice.org
dev-downloads.libreoffice.org
opengrok.libreoffice.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
libreoffice.org
wasm-test.libreoffice.org
hub.libreoffice.org
api.libreoffice.org
newdesign.libreoffice.org
translations.documentfoundation.org
manual-test.libreoffice.org
docs.libreoffice.org
downloadcounter.libreoffice.org
update.libreoffice.org
devcentral.libreoffice.org
docs.libreoffice.org
jenkins.libreoffice.org
devcentral.libreoffice.org
libreoffice.org
translations.documentfoundation.org
devcentral.libreoffice.org
docs.libreoffice.org
helponline.libreoffice.org
wasm-test.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
jenkins.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
crashreport.libreoffice.org
newdesign.libreoffice.org
newdesign.libreoffice.org
listarchives.documentfoundation.org
dev-downloads.libreoffice.org
ask.libreoffice.org
devcentral.libreoffice.org
update.libreoffice.org
translations.documentfoundation.org
stats.documentfoundation.org
devcentral.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
gerrit.libreoffice.org
perf.libreoffice.org
docs.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
gerrit.libreoffice.org
hub.libreoffice.org
docs.libreoffice.org
crashreport.libreoffice.org
registration.libreoffice.org
stats.documentfoundation.org
jenkins.libreoffice.org
dev-www.libreoffice.org
dev-www.libreoffice.org
hub.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
translations.documentfoundation.org
update.libreoffice.org
bugs.documentfoundation.org
update.libreoffice.org
manual-test.libreoffice.org
help.libreoffice.org
hub.libreoffice.org
manual-test.libreoffice.org
translations.documentfoundation.org
dev-downloads.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
newdesign.libreoffice.org
docs.libreoffice.org
api.libreoffice.org
helponline.libreoffice.org
perf.libreoffice.org
gerrit.libreoffice.org
bugs.documentfoundation.org
wasm-test.libreoffice.org

Certificate

The complete raw certificate details for opengrok.libreoffice.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392536336735418432151721242401160713971422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-01 02:07:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 02:07:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opengrok.libreoffice.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776847989075585366778004418289693960483961906370954724963961584239627016843937407278835759896160750508175507688055898617058330388632553958967725539706362209556369979567185191132444707569952346242966562295950638846789948573802722328300559304492784921562340410117799644089880253183071093131237992600199021998794608860047909958023654918653253937509649181093084009686189904479657574396733398719136571232672677247148515977137315673203532318177222471120907481875718635193621135529404530267551393815359262085357386792815885201710842578876517510206185649894084807292445671953329052205297626705513968072109440371107604080714542427946672409529801518988369294455909577944743991044569775137838300006913600982261930276711541646278235057311583979424482461850506010330608782867897404732196488103235522932911344720349327528546092331481668338025772533464578090534240139631953818027674476481441266130209226755711306492478740181673850378285767383609033080917074056625838945809463252415383296960043474217614711107844739903322291079560519959114959905929155168678477654580427782681135866923869898195520210615789604195829497533583062402296235926626765576972065535147606629972097298266208099655912183268433467227343217562123155906099352063515985299742782693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff122b33dce3dc8f847984080004e7687801086f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opengrok.libreoffice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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