gabrielle.koumbit.org

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:d7:e1:64:03:40:91:20:65:60:74:12:15:4e:00:4b:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gabrielle.koumbit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:d7:e1:64:03:40:91:20:65:60:74:12:15:4e:00:4b:14
Serial Number (int): 272172565484215386896695093634032591719188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:26:23:d2:17:ab:32:e2:fb:ae:91:dc:0d:27:c5:9e:d3:be:86:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:a9:47:9d:d4:28:e9:a0:8a:cb:ec:4d:56:b4:98:8a:43:cc:14:8b
Fingerprint (sha256): 23:ad:44:5e:19:e8:9a:79:b7:e8:a3:28:67:7e:90:53:fa:9c:04:63:19:d3:b4:a9:29:f7:80:f1:f2:0a:4c:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gabrielle.koumbit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gabrielle.koumbit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gabrielle.koumbit.org

Other certificates including the domain name koumbit.org

(limited to 100 certificates)
nextcloud.cumulus.koumbit.org
gabrielle.koumbit.org
www.vikinge.koumbit.org
www.koumbit.org
www.apbm.koumbit.org
www.shadowrun.koumbit.org
www.assep.koumbit.org
cmac.gwradio.koumbit.org
lmssop.koumbit.org
www.narchive.koumbit.org
www.johnb.koumbit.org
www.gfilion.koumbit.org
www.adte2254.koumbit.org
pplif.koumbit.org
www.assep.koumbit.org
www.koumbit.org
tnm.koumbit.org
nextcloud.cumulus.koumbit.org
www.assep.koumbit.org
mystic.koumbit.org
www.joasia.koumbit.org
wiki.praec.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
gabrielle.koumbit.org
*.koumbit.org
www.koumbit.org
www.gfilion.koumbit.org
www.koumbit.org
gidget.koumbit.org
www.kepo.koumbit.org
confluetest.kwekwe.koumbit.org
www.joasia.koumbit.org
nextcloud.sdcmp.koumbit.org
www.joasia.koumbit.org
www.narchive.koumbit.org
vikinge.koumbit.org
www.assep.koumbit.org
wb.tnm.koumbit.org
rcentres.koumbit.org
www.assep.koumbit.org
www.shadowrun.koumbit.org
www.koumbit.org
www.koumbit.org
wb.tnm.koumbit.org
www.tnm.koumbit.org
www.narchive.koumbit.org
cmac.gwradio.koumbit.org
www.ktrh.koumbit.org
nuage.ecrinum.koumbit.org
nextcloud.sdcmp.koumbit.org
nuage.ecrinum.koumbit.org
www.philou.koumbit.org
70s.haproxy.koumbit.org
narchive.koumbit.org
www.koumbit.org
www.assep.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
www.koumbit.org
https56.nina.koumbit.org
etcgroup.koumbit.org
www.koumbit.org
www.praec.koumbit.org
www.kepo.koumbit.org
rcentres.koumbit.org
ktrh.koumbit.org
www.joasia.koumbit.org
www.assep.koumbit.org
gretchenk.gwradio.koumbit.org
www.koumbit.org
www.enkerli.koumbit.org
*.koumbit.org
shadowrun.koumbit.org
www.koumbit.org
www.mystic.koumbit.org
www.assep.koumbit.org
www.koumbit.org
www.koumbit.org
www.joasia.koumbit.org
enkerli.koumbit.org
cache.haproxy.koumbit.org
www.largot.koumbit.org
ktrh.koumbit.org
www.enkerli.koumbit.org
www.koumbit.org
vikinge.koumbit.org
gidget.koumbit.org
www.joasia.koumbit.org
www.praec.koumbit.org
tnm.koumbit.org
www.sdcmp.koumbit.org
www.koumbit.org
www.koumbit.org
www.koumbit.org
wp.nina.koumbit.org
www.assep.koumbit.org
81s.haproxy.koumbit.org
www.koumbit.org
www.tnm.koumbit.org

Certificate

The complete raw certificate details for gabrielle.koumbit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISAx/X4WQDQJEgZWB0EhVOAEsUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTMwMjQxNTRaFw0yNDAxMTEwMjQxNTNaMCAxHjAcBgNVBAMT
FWdhYnJpZWxsZS5rb3VtYml0Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAN6yhsrGoqV0IEQlkBXQW57g0sJiLf8rAICnFPPTX+qWDSO/bJemEnE5
4btbRUKOFGDo6uupwSM7cTuu6uTUXA9vFU2ZkjJ3s11uaSpGYTnlV5TPWppCRq9p
GCw+FzFGgOdTRiET9V+6ci62XewPsbSTYxbq4/HPw1kb5OJK6p8GsoS+hMjgohZw
zhvDZ+IoWnS2HY2d7UcYIgPOFB5zCLZbcUqMtuE88Msy6lupl/OOLjbQesMbxQpE
c6ydn6tHwXk6zSo2gmVjAGC7mwWgpzK5aMiY/ImHYvWVxczSybUpLLci4BTmYTB8
AaB0wNzy72pl+96KQ6rq/QSzygTxovBpOWfuypQM3SzToUoW/qNM/J5In6rBP6HS
d8iotcempZ57btImKkkypJn5cac+rNEPAPL6HfkffUvklp/iuJcUvTouib2YqX++
CpB3i3sBhRCQY0JTCWUuSeSX46EHA6Xj8U+CmVxcq08JUf1MzjDxRjG6uY/m+mIO
Rr1gWH+QAg+0bmhzVJDR2QKkXEWkKPUH43cBy2EvOg6kGQ/1Q7ZZoDuzqcJHNt66
uzM/f8id7Ofs6VCQ1Oe2ZIv7ObatFJStJOZsJNVE0H9Pvmzafuf+FXilSoHHlKkQ
gCDLedKPqmLU6LmA7nfX5LsgRXIeio2dY2KztqI5a8leqBkM2+gbAgMBAAGjggIW
MIICEjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFF8mI9IXqzLi+66R3A0nxZ7TvoaJ
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFWdhYnJpZWxsZS5r
b3VtYml0Lm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABiycg
X+4AAAQDAEYwRAIgMfc4RRYW+SXaFThU4THToueirZXcXLFXe69/r2Yn7w4CIChz
CB6E4lJ1AxfMHCDL7QewnzoCD4GMIDvUbpLVq9b0AHYA7s3QZNXbGs7FXLedtM0T
ojKHRny87N7DUUhZRnEftZsAAAGLJyBf5wAABAMARzBFAiEA1zlbk/fjyxyNJp+B
nmAKpVz5H4WnVR2nzRMT+g+g4M8CIDUrsuFijne+14BWd1ufxeoP52OgNVoJjQYI
qX/sLYFZMA0GCSqGSIb3DQEBCwUAA4IBAQAf+LpWWLcfCAZxwWc+CBphIMgBrMW8
ObOw1PeuUv/dmafoggc2byMIwc1YN2NU8jCDttzhGTYhqPzJUHOleJ/ZpcT/NyCT
GxO32gtLv0vt1eFOXiLNaKDrCi5/jnnD1edBq+FRQz7QDIK4I1Q3EQEbff4ZhydR
WNUAQXo/TE1KLskslBy8hkQbqccNd0VRUsyuSTeGno7F4tIjlQdgj1UJjv8MNQiW
GB56J514Mb3UtDOLqlKSHD/N+siOxEcDYyjq+30ht2EM8UViaTg/c3sMPXTkIfdf
Q/qd5RgoM1Eb2ARoMcKtjk4UpcZH/x+5FpqpnIA7917VFYqCeLPoueAl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272172565484215386896695093634032591719188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 02:41:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 02:41:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gabrielle.koumbit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908526001482059041348493543616657343177691547648845295482874548570364970709988146455014531560970726535558911936695820714769175635918232839390656729775121092530770245939667242808961153201984211004406408552677329886052115414197936782351126200955507087563811188746388374800190403711410773927399990491846817226000242863494166832804167611930102898463168677994997388948484127271957757735043301938158168813315655600963804564673311280781912049275981736021298436017269794122329442229837994419616993796946256988058396677299285734285018546740835485681784152877539673070416562208375674888250418166358622759341693109305028331313020543344540191920568985983392098640774362398811730508581285955103860171245616189526328181468042276878295426439978813053517689479799184068359297458071502050233636362371385110960503845594591081987517831215342739190455712882963985140586420200256470342943112631660943829104452754167045187781469698823471216237106522780465169018803208700322613450669632022451607591962616834657410707061972394816488775081570566510999273285407609380083428518507942272020068027110037319141708351893001092155205031763831424515367726138666837473754370080869226478769288461012470530122789240633089460117969887168357838988409451290964674437965851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f2623d217ab32e2fbae91dc0d27c59ed3be8689
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielle.koumbit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b27205fee0000040300463044022031f738451616f925da153854e131d3a2e7a2ad95dc5cb1577baf7faf6627ef0e02202873081e84e252750317cc1c20cbed07b09f3a020f818c203bd46e92d5abd6f4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b27205fe70000040300473045022100d7395b93f7e3cb1c8d269f819e600aa55cf91f85a7551da7cd1313fa0fa0e0cf0220352bb2e1628e77bed78056775b9fc5ea0fe763a0355a098d0608a97fec2d8159
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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