stats.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 03:91:c1:76:a6:9e:77:c5:bb:94:d7:b9:2d:d8:a4:83:d5:3e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stats.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:c1:76:a6:9e:77:c5:bb:94:d7:b9:2d:d8:a4:83:d5:3e
Serial Number (int): 310934958072467724659006072732084666094910
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:94:eb:1b:d2:a4:75:8d:c2:12:60:68:1a:c6:2a:76:4d:70:51:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:65:cc:a2:32:73:e0:4c:c3:6a:1a:af:c9:88:d1:2b:e6:79:73:03
Fingerprint (sha256): 10:12:a4:75:5f:b3:f4:b0:86:63:60:63:86:17:28:d7:cd:c8:59:4b:f4:93:57:16:b5:4d:44:41:3f:60:30:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stats.documentfoundation.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stats.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

downloadcounter.libreoffice.org
stats.documentfoundation.org

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for stats.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310934958072467724659006072732084666094910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 02:07:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 02:07:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stats.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698473721694920968999958648001245401628790606694888729921103988314348601891531098320461867405378718221988397934953931079356205666936021218808335501538735547976010037903290286301893469108344197878952315305952825805968316119392513959543764922443159234110640084803453564655037082901186999408113854583477671747740537587541297279226858667819274794295585710291407192333318287634552129759093790372713521802224964166660557179682306068064669144891997078740776162354863421030013244751858988170448106389213334357449425961513997072381039782451476936471220496130215700196124232060908235968202500557072053188093483395144630622771467406934955914367170873769385454120974012715739021709858095112786485578246520246603566748427286424648363500026028551258048812990535196128012188449280916680946685344654148665173364674960875448865686802077909152322785397269756041404333391157048092724748304159603098467926036260595300195473197805275063083731549260270609760131420463405318089180789637524052132727157141829138451852952255277768739920487564311062004506108685071740029335535123340589808769054606632077839953636207483877600970896295502272033853877651198365870656574607970236170856502635804605256230092686489217266709109514274017530233982991632930987070484203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5594eb1bd2a4758dc21260681ac62a764d7051bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadcounter.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.documentfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181f06035a30000040300463044022015243ef4094802bf1ff1efe9da4fdb8f3ed16bf5ca8789ccefdc1ce59274431702200e9e4e98ceb8e143e84b00f2ca23d6b9b30bb545802c16eb6cdf7ae4df0fcb8f00770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181f06035c90000040300483046022100b3002b4629e4d671fd829b178a347d53b44251deb0a6f4ed34903fbcfa2c9a98022100ce877919c32d292b2a55128142e063d71468db562476651fe0c61822dcca5e4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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