translations.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:fa:68:b3:8d:a0:47:95:80:b1:92:54:a5:95:2b:fb:f8 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=translations.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:fa:68:b3:8d:a0:47:95:80:b1:92:54:a5:95:2b:fb:f8
Serial Number (int): 298079921695412766230223570347973977832440
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:de:85:31:39:0d:ed:90:88:c5:81:0e:fc:70:0c:a3:dd:38:9f:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:23:33:97:84:2a:05:6a:b8:6d:06:4e:f0:70:6f:b7:96:a9:09:05
Fingerprint (sha256): 1f:4c:2b:fb:e2:dc:91:f6:2c:82:9e:69:2a:b8:7c:43:b2:84:20:66:9c:35:97:b6:81:55:c6:90:87:b1:8c:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate translations.documentfoundation.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for translations.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

l10n.libreoffice.org
l10n.tdf.io
pootle.documentfoundation.org
translations.documentfoundation.org
weblate.documentfoundation.org

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for translations.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298079921695412766230223570347973977832440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 00:07:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 00:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'translations.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791626553931703874631792429583721468762107999255810733773144541288050640063992482420759231932353353677544029138179900042669349573170720836637438797909350755492197733421066744406374627298896446182322809526699377987468873932874692370407762576102980240443661247432242621825464747762089229796505451826410824666149740549923538540935419452892104594742153568730496900103898243120420599363399432147096710501486568249467523116928702945775886547897136948661383924848256076498795310173332303418859174936758755845081302043028725715869306061799231330299636714348153035715065639611681557760597599991290061815565950186220288677609889326508227239024382492175765702002922034937399580040328819246438324650487439064967559049935787359054777411489641867527499420824458295222635782783088825098252569312563928515448867674439524793047634438761591097482044689002571637804236076254105620324811575824253655670387219093495470034001950511417459000176519993957640757800015572391578187957907229376102137279609234024744387944877130037159551948801081283961279438770952664965096170696703283547208011715803514168987593232763271818512310480890798058095040982575284734928708930489679895932858084813779444119562991129112657882102749249219623368711723252984862894976212307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cde8531390ded9088c5810efc700ca3dd389f39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l10n.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l10n.tdf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pootle.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translations.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weblate.documentfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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