extensions.libreoffice.org

Issued by R3

About this certificate

This digital certificate with serial number 03:fc:78:97:7d:9d:3d:87:01:25:8d:e6:dc:38:af:57:fa:b1 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=extensions.libreoffice.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:78:97:7d:9d:3d:87:01:25:8d:e6:dc:38:af:57:fa:b1
Serial Number (int): 347248308203436125163560639668043445172913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:08:20:5a:12:61:52:51:06:9d:c2:95:ab:e6:c0:80:e2:a7:c9:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:35:bc:29:3b:03:60:ab:be:72:35:d7:32:d9:33:d8:1c:a2:86:b9
Fingerprint (sha256): 20:68:2e:16:48:f0:2a:dd:98:bb:d3:f0:5b:8a:3d:4c:c3:fa:60:a0:66:e5:88:76:b2:64:dc:55:8e:62:1a:cc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate extensions.libreoffice.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extensions.libreoffice.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extensions.libreoffice.org
templates.libreoffice.org
updateexte.libreoffice.org
vm135.documentfoundation.org

Other certificates including the domain name libreoffice.org

(limited to 100 certificates)
extensions.libreoffice.org
bugs.documentfoundation.org
newdesign.libreoffice.org
devcentral.libreoffice.org
dev-www.libreoffice.org
bugs.documentfoundation.org
survey.documentfoundation.org
devcentral.libreoffice.org
survey.documentfoundation.org
bibisect.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
docs.libreoffice.org
help.libreoffice.org
opengrok.libreoffice.org
opengrok.libreoffice.org
api.libreoffice.org
ask.libreoffice.org
update.libreoffice.org
dev-downloads.libreoffice.org
opengrok.libreoffice.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
libreoffice.org
wasm-test.libreoffice.org
hub.libreoffice.org
api.libreoffice.org
newdesign.libreoffice.org
translations.documentfoundation.org
manual-test.libreoffice.org
docs.libreoffice.org
downloadcounter.libreoffice.org
update.libreoffice.org
devcentral.libreoffice.org
docs.libreoffice.org
jenkins.libreoffice.org
devcentral.libreoffice.org
libreoffice.org
translations.documentfoundation.org
devcentral.libreoffice.org
docs.libreoffice.org
helponline.libreoffice.org
wasm-test.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
jenkins.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
crashreport.libreoffice.org
newdesign.libreoffice.org
newdesign.libreoffice.org
listarchives.documentfoundation.org
dev-downloads.libreoffice.org
ask.libreoffice.org
devcentral.libreoffice.org
update.libreoffice.org
translations.documentfoundation.org
stats.documentfoundation.org
devcentral.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
gerrit.libreoffice.org
perf.libreoffice.org
docs.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
gerrit.libreoffice.org
hub.libreoffice.org
docs.libreoffice.org
crashreport.libreoffice.org
registration.libreoffice.org
stats.documentfoundation.org
jenkins.libreoffice.org
dev-www.libreoffice.org
dev-www.libreoffice.org
hub.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
translations.documentfoundation.org
update.libreoffice.org
bugs.documentfoundation.org
update.libreoffice.org
manual-test.libreoffice.org
help.libreoffice.org
hub.libreoffice.org
manual-test.libreoffice.org
translations.documentfoundation.org
dev-downloads.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
newdesign.libreoffice.org
docs.libreoffice.org
api.libreoffice.org
helponline.libreoffice.org
perf.libreoffice.org
gerrit.libreoffice.org
bugs.documentfoundation.org
wasm-test.libreoffice.org

Certificate

The complete raw certificate details for extensions.libreoffice.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3aNeAUXNJw5mEW6bq1wB
rI62Xk5xqdR5bqfpfQ1npMlVISWnyeWBS1quXs4IbGbh06WpmvMkB3R6Lt+PKn+m
pRXhOHeZyhR6aV0Dq4KxxZdgIAGyIKk9j8VmNDTUxPl9JsapFpAVwtCPMzVs81zA
AnscqMfpVrxpxwISlONscPnpjwMQLS/V2Lr6qraMS5muoor07GwtyiP/0amG5pwF
rKNlDCS/6vd152qx2906y8rIDQ9VH25mS5ASxtKDKXaoUNJba9dggODeWFnfC5+y
ImbTaDw6w5vyWcTsWJFMgmNAxTKGqr5gGqDW7A695ADzI9NuVZWgTMiDs3j/FobN
kMLGC8GuOx7xwIAxvm7A4Pd27hGIigE+S1vFUOhZh/Ri7QfX4DAKym7QL13vwe06
86I2URXkzjwU3gIv9QTl83qSiONmxO04rjUu0zUlci0Aki9Rcln8B0iEp69zJAVU
OElHwz/HxDuSnBE6DawYjKvBKuHMKwfuRTSSXm37ao8Ze23Zn6NaqVhF4b9Syp8L
gKd7mtJdyNjBuAqoh318EbNG9EtRs24FaYBkiwSBO//z2IhGOl2n9SeMzdeJWEil
no2H1SFkUyYsoAcJicssCQIFUmlryD9ybfuGO0ikMvnkQhvwTdUi2DTYcFNbpdRW
KsYGL+wz0HOV9nbZhkM2IrkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347248308203436125163560639668043445172913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-16 00:07:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-15 00:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extensions.libreoffice.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904204776753609149710058567438106486268905040734819775712779804420874487930228684514483985448790418164733812654984198566572375573221512091408213372921641990543901295018362391437698857701701650127174440190421576657887818898473317839020887854508107403146581013619512342213053622406918460399698822563070409273437587853478893828887429979315564614933789503549965324167695383300463775382727814785532161859751597743132449205792167220377801075497546398426520919493663605921630096193893066370277308428724544364394025769433885443130990333124681577620823050627046804923546338415886738085520841388866049195569110114570435567531796195256409278498027243752118077197995580146624097004852047582990865310116784131498603050329289501856562014083268744839135564138270939086561747432500564619802489121764758971365718047740663176357280428421927737319269100968056434372318397997066087232885470397549462500557053920820880008892844101879293753612320368962026796946064528314441521652766638755913209963673414311462779552353026392561515687160770791352803981376743495565208010282512904200203268949002191953413849978182169481923453907461460018012183043666473439312472275689083225341578550588808036000595347383018421676237929115029382395939652625197433816540914361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7708205a12615251069dc295abe6c080e2a7c996
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extensions.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templates.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updateexte.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vm135.documentfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d0eb750b96635028d0c79657d23699ba0c429fb94e910dcd6779466891c32b19bed4a2f7b2c285474cfdd3fd2f4c93936be82c645241e200e90ca7dfb7235ad18e7a089d770e5ae500857d9f5729e2bddcd84eda5f8b31632c5d3993797794ff9833cb19e99c246f9b862599f4cfabe61743235630879db1563b5c1fb979a5a0e7a35b5dcd467b8bc374b52d2680b7f13a6818827226489a3f4c3fda586b7fe803e2fc4d35bafa9e798c3178e00f709c8982c3b4c701451379fb28a09c28abaa7cf30841642872edb59b364f64023f433dbc4daabad15c0c54eb760535212f10f688ebc216f25fe55d1bfe9d2d743174fe5b8618ea67371fd77b554ce8d8cd4