collabora0.koumbit.net

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:99:71:d8:07:a4:f2:d2:36:ff:8c:0d:f2:a5:45:c6:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=collabora0.koumbit.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:99:71:d8:07:a4:f2:d2:36:ff:8c:0d:f2:a5:45:c6:77
Serial Number (int): 275832680200466382590140947404250602129015
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:b1:ba:72:8d:2e:dd:bb:4c:18:88:6c:b2:b9:dd:a5:7f:7f:bf:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:dc:f8:f2:d2:ea:f0:81:cc:19:2c:00:c7:08:47:80:8a:c4:25:58
Fingerprint (sha256): 08:4f:e5:e2:ca:ac:c5:b1:b4:94:1e:43:b8:25:2e:27:ee:87:9d:98:88:d1:dd:ac:94:c8:da:8a:d2:b4:04:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate collabora0.koumbit.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for collabora0.koumbit.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collabora0.koumbit.net

Other certificates including the domain name koumbit.net

(limited to 100 certificates)
ledger.koumbit.net
wiki.koumbit.net
www.etcgroup.org
collectif.koumbit.net
status.koumbit.net
www.munilamacaza.ca
stats.koumbit.net
genquebec.com
exeko.org
nagios0.koumbit.net
studioxx.koumbit.net
nue.koumbit.net
parcolympique.koumbit.net
aegir3.koumbit.net
jenkins.koumbit.net
www.compop.net
chat.koumbit.net
svn.koumbit.net
www.chute-saint-philippe.ca
nagios1.koumbit.net
jenkins.koumbit.net
ababord0.koumbit.net
test-ml8.aegir3.koumbit.net
odoo1.koumbit.net
jenkins.koumbit.net
mail.studioxx.net
ckut.ca
collectif.koumbit.net
www.munilamacaza.ca
www.cdchl.org
svn.koumbit.net
laspq.org
patwhite.com
www.cdchl.org
dev0.aegir.koumbit.net
www.saint-aime-du-lac-des-iles.ca
imap.koumbit.net
www.steannedulac.ca
staging-alternc.koumbit.net
csnconstruction.koumbit.net
studioxx.koumbit.net
www.saint-aime-du-lac-des-iles.ca
ababord0.koumbit.net
lb.koumbit.net
crm.psc-gpc.ca
www.koumbit.org
lettresquebecoises.qc.ca
webmail.koumbit.net
collabora0.koumbit.net
popotes.org
chat.koumbit.net
www.lamereveille.ca
parcolympique.koumbit.net
ecpar.org
piwik.koumbit.net
revuelespritlibre.org
rappels.ca
admin.alternc1.koumbit.net
courriel.alternc1.koumbit.net
revuelespritlibre.org
www.riviere-rouge.ca
redmine.koumbit.net
www.compop.net
www.assep.koumbit.org
webmail.koumbit.net
aegir3.koumbit.net
www.compop.net
nue.koumbit.net
odoo0.koumbit.net
www.riviere-rouge.ca
status.koumbit.net
revuelespritlibre.org
nuage.koumbit.net
admin.alternc1.koumbit.net
ledger.koumbit.net
www.lacdesecorces.ca
arthives.org
wikifarm.koumbit.net
mta-sts.koumbit.net
3e-imperial.org
d8.patwhite.com
vrec.koumbit.net
ecpar.org
stats.koumbit.net
jenkins.koumbit.net
boxes.koumbit.net
laspq.org
3e-imperial.org
claqo.wpdev0.koumbit.net
webmail.koumbit.net
www.saint-aime-du-lac-des-iles.ca
dev1.aegir.koumbit.net
nue.koumbit.net
fsm.wsf2016.org
www.chute-saint-philippe.ca
csnconstruction.koumbit.net
dev0.aegir.koumbit.net
ceres.koumbit.net
fsm.wsf2016.org
arthives.org

Certificate

The complete raw certificate details for collabora0.koumbit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275832680200466382590140947404250602129015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 14:54:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 14:54:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collabora0.koumbit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796030116848891951184677127141195128108336939898130041063332523621289578519041984261950702296506548592983221777751626752221378575858083414716820785398480688275579806276535818277464276194540233123456277110208199315967743774830692632498498946899874461101374754921913863311062610843271548330159363955199455803418969194171041556000333891620126021408702694077010981521434709118117867250389371119160174577317069288550163636678881290019819290998736395583785674562237749143950067113761967503285314672361238440458929818524011079137467160700994193034699937489865108707958500479611213911111245142270476229225391444547415507588919447186565550481107715584067219471385168162959074403760869353981479417034391938641347113465228543901153900692141798096381770608779102221743893823405601433575218173633357691932136687411940581410377042150962096062823852623842362740326000702654865739069035488999887387808886566914470535279449789960524147976700171000269107015146592726705809224736131885396633882162398024317189563358999428996542922918906230697537356355580481155139838979721301426561283128346493439941143444162322653579825622674387019223659537331565217142640826724928179973077031502028724614894170895072566617628050929926250848845919820324575443175288689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33b1ba728d2eddbb4c18886cb2b9dda57f7fbf2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabora0.koumbit.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd8d7021d000004030046304402206cb6abcc65de8692a20723d34c1a3098c759cc2181d9d0a7e758629a635c868902207afe6611078ec1393545f07fbc6f1fab5ccece112a47a1e8790389c55acda5540077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd8d702240000040300483046022100b958edcd7957815504cd6fc9d5f0eb2412bd19d5bdb335449eb1dd27b5dc89bc0221009e95609da15df2c3f687b7c834d05004a084e6788df42df00c8be8957f370897
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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