blog.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 03:aa:e3:b6:13:52:78:94:d7:ad:a1:e1:e4:9c:67:67:f3:3f was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:e3:b6:13:52:78:94:d7:ad:a1:e1:e4:9c:67:67:f3:3f
Serial Number (int): 319487540316811517906685962032643087790911
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:03:e1:1e:de:e4:6d:05:33:ae:49:f5:3d:7a:28:83:0b:c2:dd:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:76:8f:81:d2:57:2e:a5:70:c0:f5:9e:05:42:5d:90:43:f8:1e:8c
Fingerprint (sha256): 1a:fb:b9:3e:d4:c9:56:0e:ef:e3:7c:63:46:1f:b2:12:3a:a4:fe:25:69:57:78:9d:34:c4:32:53:4d:83:d3:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blog.documentfoundation.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.documentfoundation.org

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.documentfoundation.org
blog.pt-br.libreoffice.org
de.blog.documentfoundation.org
design.blog.documentfoundation.org
design.libreoffice.org
dev.blog.documentfoundation.org
es.blog.documentfoundation.org
fr.blog.documentfoundation.org
ja.blog.documentfoundation.org
pt-br.blog.documentfoundation.org
qa.blog.documentfoundation.org
vi.blog.documentfoundation.org

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for blog.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319487540316811517906685962032643087790911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 02:07:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 02:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3780273665398348968574910033637286361409456556582002716367028791092400291133897405131631438335528812604792113329071299228421796962243690345025205003519983232286435309421481746594004117721457365741149016125058262184122740235560842745352030382528048691775523509065933414148203948852316270350814850871272044689789465087511056829509769389450722853209403148154402510685061473134848196783298480751317977002203463102695611088268255288938457997604978658789204509909253840581354304775520519476351018704411596460039974794362975452704256627269108804059977354330162694518739664232022021044048953151392083141730413613642592550195170578251944251963021863197052315523345444609671242678458277772615655126853540779047918312685849343711192849849764586262353813241944085603112999445948524602834309460464675133796492190018119560239402030358849833753388927292780660982741915952517858580812349037578756436405841667697547491839021649298991083247229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb03e11edee46d0533ae49f53d7a28830bc2dd30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pt-br.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ja.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-br.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.blog.documentfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a72c2199f0000040300463044022024f5873ccfa9a170a7772299892470a6f5bab34c123ec7d7daa5604fe418860202207c165ee0211204ec85a25b137f2e36ab8ad176e6e5ba51717fcdb3b669e1864b007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a72c21a0a000004030046304402202a07f47474766bf66e0159ed1fcd4076489532332cbaaff245b2493ebf8bb76f02204c9f7f281696251802675744b28afbbaeb6b9a520392aaf1ef1be94e77950d2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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