jenkins.libreoffice.org

Issued by R3

About this certificate

This digital certificate with serial number 04:bf:ab:dd:40:a8:25:85:07:ef:70:4b:85:0b:b4:53:d1:fb was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jenkins.libreoffice.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bf:ab:dd:40:a8:25:85:07:ef:70:4b:85:0b:b4:53:d1:fb
Serial Number (int): 413671522605221347625246747559302509351419
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d7:29:6c:07:48:08:88:3d:2c:62:2c:7e:62:5d:08:cf:26:b5:04:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:c5:b0:43:4d:80:a5:28:d9:ff:fd:ae:3d:c8:9b:f1:db:c7:2d:5a
Fingerprint (sha256): 0a:37:d5:9f:7d:8e:63:3f:dd:fc:58:99:d0:0b:9c:ea:5b:65:ec:f3:69:e0:0e:5b:72:8c:39:3f:ba:5e:5a:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jenkins.libreoffice.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jenkins.libreoffice.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-test.libreoffice.org
ci.libreoffice.org
jenkins.libreoffice.org

Other certificates including the domain name libreoffice.org

(limited to 100 certificates)
extensions.libreoffice.org
bugs.documentfoundation.org
newdesign.libreoffice.org
devcentral.libreoffice.org
dev-www.libreoffice.org
bugs.documentfoundation.org
survey.documentfoundation.org
devcentral.libreoffice.org
survey.documentfoundation.org
bibisect.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
docs.libreoffice.org
help.libreoffice.org
opengrok.libreoffice.org
opengrok.libreoffice.org
api.libreoffice.org
ask.libreoffice.org
update.libreoffice.org
dev-downloads.libreoffice.org
opengrok.libreoffice.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
libreoffice.org
wasm-test.libreoffice.org
hub.libreoffice.org
api.libreoffice.org
newdesign.libreoffice.org
translations.documentfoundation.org
manual-test.libreoffice.org
docs.libreoffice.org
downloadcounter.libreoffice.org
update.libreoffice.org
devcentral.libreoffice.org
docs.libreoffice.org
jenkins.libreoffice.org
devcentral.libreoffice.org
libreoffice.org
translations.documentfoundation.org
devcentral.libreoffice.org
docs.libreoffice.org
helponline.libreoffice.org
wasm-test.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
jenkins.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
crashreport.libreoffice.org
newdesign.libreoffice.org
newdesign.libreoffice.org
listarchives.documentfoundation.org
dev-downloads.libreoffice.org
ask.libreoffice.org
devcentral.libreoffice.org
update.libreoffice.org
translations.documentfoundation.org
stats.documentfoundation.org
devcentral.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
gerrit.libreoffice.org
perf.libreoffice.org
docs.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
gerrit.libreoffice.org
hub.libreoffice.org
docs.libreoffice.org
crashreport.libreoffice.org
registration.libreoffice.org
stats.documentfoundation.org
jenkins.libreoffice.org
dev-www.libreoffice.org
dev-www.libreoffice.org
hub.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
translations.documentfoundation.org
update.libreoffice.org
bugs.documentfoundation.org
update.libreoffice.org
manual-test.libreoffice.org
help.libreoffice.org
hub.libreoffice.org
manual-test.libreoffice.org
translations.documentfoundation.org
dev-downloads.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
newdesign.libreoffice.org
docs.libreoffice.org
api.libreoffice.org
helponline.libreoffice.org
perf.libreoffice.org
gerrit.libreoffice.org
bugs.documentfoundation.org
wasm-test.libreoffice.org

Certificate

The complete raw certificate details for jenkins.libreoffice.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413671522605221347625246747559302509351419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-04 02:07:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-02 02:07:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jenkins.libreoffice.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917308734614770558183840518507026519713086641805544202581101514824758194896175573318024726542883638838241718151297053611119326732955117548477306788719366857113197261108346619359835445115625664537026753194636789908670790766949493132551454434974385402893631138508715117455923701855990116757133039860028073075459934883523697565361959010351618109422938347860445746600793769997707061456861208592626647852580122485949320166455662710782771392990540507658294667769809302042574824217503697173428667365421605061236199370334851055838776743678304601147246509167452415755900861857816767025837514299899223901467094990190375545133426512761022095010386868397823695184200594747960127819320107265463717394362641119403252112997325250081517258785197632243599920515284711235001924903945433441569832496107057698851684102462136683429610331630578483623134692333345796540846502307406317763967948711059729814247398271583614298010962908442130034703077666174696955576864274106826999278990037674264099820506818075348174592650096234496986282580920531900906309430791318899065428827172794188218631797958952596536899442822287123974198504559087973492828442885181874156066207240401014022670662546011537974874409779767761111624872616136972324447782018154285515573030147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7296c074808883d2c622c7e625d08cf26b50489
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-test.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.libreoffice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184409b5053000004030047304502207186341d850a482cd4f8bd2237f506a99f3af585dfea3dc49b12e27cb6222550022100cfa00f0d8d48e0da6e30b2c165a87fc8d07a976397a1dd203035da33dfa07be4007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184409b522e0000040300473045022100f7db58272425df21c0d2b683db048af0e53a5aae6d2ad1809bd97a3aa930f59702207cea57798aadb7da35fd3e7920847733f01702a1611127ac9d2f2ca6e10a9d50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a97a630d2bc7040bc9f661d59b63f225bab1efada675cc4d80fc1e8f97ce28faf72c77dc85381cc8b23e70e63559265f540160c00738cb1de10e7932542849153fb37308cd481b6738cbcc2e4cefa7361f108da48367e047fcac4393bff6488c2fcfe8ce830dda8269c889529e7890f9c628477eeebb55f2aaa9033ed240279abfd807d8cbfa1822dd105c7d1e720d989bb03eb86973a848d9de3f0d0a708a87303bd800582db6dca9efcdd2e2bf54a499569909a70908b7a71ede48ca6370e1e0286f5b631c1cb6ecb2fe3dd861f558c0dd830b5d897b942c08b97714c26c48a7fcd8b5279ed322ee2951c4ff78be231b3bd95e8311e5f2c10bf8a1a705184