listarchives.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 04:68:3e:89:f9:89:44:66:ca:54:52:7c:1e:4d:8d:bb:51:c7 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=listarchives.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:3e:89:f9:89:44:66:ca:54:52:7c:1e:4d:8d:bb:51:c7
Serial Number (int): 383921638428422289662486803569585820488135
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:d3:2e:35:ec:ce:e0:7f:0c:bc:fe:7d:33:98:e7:32:ee:a7:49:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:4e:cd:e9:9b:a2:b5:9a:1d:33:ba:5c:55:4c:3a:5e:e1:bd:c7:b7
Fingerprint (sha256): 16:8c:f4:f7:45:22:4e:a8:bd:b9:6c:be:e9:8b:30:16:1f:55:b1:05:5a:9c:d5:2c:f3:0e:cc:1c:13:ab:ff:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate listarchives.documentfoundation.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for listarchives.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

listarchives.documentfoundation.org
listarchives.documentliberation.org
listarchives.libreoffice.org
listarchives.odftoolkit.org
listarchives.tdf.io

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for listarchives.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383921638428422289662486803569585820488135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 02:07:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 02:07:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'listarchives.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672221067267196675423641940660142817436814591131841091733508040067353052615315784920602308573772310453357108176380234262355459482785588238814481156504500050367038851824613875912123877322496664765350863362929814441724425699791285132550076742149644872387748733002852527623333877033506217343731580873485474067192760961394226052855571588321172696451507140005563141083942130680377880095386349567407413049293162933552118904654236472174587659641995781041520398657884372292173856986563474123081428951628197095037926223622887993718427234966025696779174472253656563367136940164494899595494140465748342538976330770209668886175562763663649338266015005910994678787100712043442435731602705839023957317477969381653544974666461040334247599551299790078610525660796508257450756712006643210951687690753432709454535088605138769881603338764307516783615731118346303230966145481031918703141122600718713778625491851291250146465610226529463842526412198983368342627410896425163719757131127216099675093888715014432783447905783965333672840023626682983236209243761356945716845760704700524863856859347535356514724748657209037691899956603239454923662303549308817625888566179318002326292715927699752893306382362959950798150257264828835775251160236515700160731806287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71d32e35eccee07f0cbcfe7d3398e732eea7490b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.documentliberation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.odftoolkit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.tdf.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c23584ba80000040300463044022003240eaebc8222f7c113d9e42a6c1277de257ce75bd34a1072e8eedf4897cc35022001ec7ad989bafb667e104aa114d53ab8d14059b51977d5a3ed7925d07dd2b6b00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c23584ba3000004030047304502205ebc2b8b072720af48879a5937114bad73139d4eaebba49791eba1b957e4e37402210087e1a66d1c8e34b890be1aed56292168ec161caa2af855c9ebdf4499dbf6a301
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ef03daa732056e6e9aa0ec435d02d14e35b377e816040face1f022fcd9daf3c2cae02c4509e42e60177454a87171bafdacb608a8cd8f0a1465c140796c15c983acfae9a92f1a1104b19d2769fcb4c347737a62a452c6fe57da7eb73d3956167d7d85757d018f6318d6fa9ca178488e91543af1ffe7f0e9d940ed9ef3d916de9620c105dae2aaeb4c7c45c8aa0ca89fe79193db38f11d48e7b0c96a61325568eba87b79e1b08a13cb32c0862b67b77559ce0943d755e8600212c51d52550c56e4c29d2fa62d87cd401c0905bed21259ba957a566fe6d3c83a9ad371035ca3f57ef34fcd1f1adaa7e68ad6ec56f36f99952c70953fa4fd3359fa1ca45829beb1d