bugzilla-test.documentfoundation.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:ef:81:94:a5:2d:36:72:d2:f7:48:ea:1a:15:44:27:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bugzilla-test.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:ef:81:94:a5:2d:36:72:d2:f7:48:ea:1a:15:44:27:e1
Serial Number (int): 285134699424996100610211108958961454557153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:e2:0f:30:46:bd:4f:9f:2c:3c:a6:df:4d:74:92:05:10:51:be:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:cf:10:66:7d:1b:96:8c:dd:3b:91:35:96:a1:98:cc:09:12:40:22
Fingerprint (sha256): 26:9f:63:93:03:91:ed:71:ca:d6:2e:c8:c1:67:d4:76:50:b5:3e:e8:ce:40:4b:c6:f3:a3:9a:27:94:a8:d7:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bugzilla-test.documentfoundation.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bugzilla-test.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bugzilla-test.documentfoundation.org

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for bugzilla-test.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285134699424996100610211108958961454557153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 00:07:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 00:07:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bugzilla-test.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790892690765628371753351071680550972935487647314539615445507586597735044850867927354112923430776660727122862210495831133942180444078377529806860979912405498612206735791905945433574213575197274894290194085168365211251160340848232704633691937718345776076931426471397189742559808887802979894329897932814511745007441470669741868033613284663715479108837745169071757265694833393749543461261906712048048588801745311698602218447859585598571030651080439377163029258208771112404278535878364258019613737578290339194492520843782926382699361759304746983568607341754344308449230205864727592527759684100790558868436042238055287997173387342767825321288531597461799948427689538917874128441632800774237485905519172417423236618051399856945891424843851336023540005999937810923681655771214569655491867212063127707304384447447832101653489952566529848337005690930031579549932029791017091187051749137320422962382645550791536192529359561491969715512007063202849673303065889170150436886002153195208194099464330129517637553734917372127643829727740629161808452382047831694898413431106150263428315248195894593229511118284886878646313804823722944887536510523354400428064578037047051434680649414985427744502586223132263746074896274639344532799733688566870228787989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54e20f3046bd4f9f2c3ca6df4d7492051051bebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugzilla-test.documentfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001633d499f44000004030046304402206ca8b8abb5834a568285f7350d5d1754faeacca6330da5bebde9a9f0c8a507920220785b95404d4b784c8b084568bf1402ff2eea4d80a429d0e895d172eb80db235d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001633d499f53000004030047304502204e1b7145e3b3285883167982a2e9ae93485f6f940701207073c7390abf6360d4022100b8aa1061f325300ec2b7e1548229dcb08dba03c1a50842864715f81b90ae4dd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0033a1fe779aa399a762b619c5a7e0436f370fc51f9164a080258d682b2c173a079911afa30d4580b4ca1ac7cd76630c305405f0d37b31a1f3ae2f07b9723d622df80938039b33a2c0b70b90ecfe9dbad59683d7c5ac1e6728ae94d80c6791915645db8bf840dfe9c0a9a3777ca5ef91590b935c2f4becf4f763fcfdb1e7d40a09e47d1c9c2bbd9f989918dca6d4a2d540353854da3a59945a88f8a9a98c9c5953161f4bcb3ebac38178def7525013c369dceab1463b991274cc86d7625fc84b77e5828e710b3bd8f12ff39807b26b63348462ca6f8056042515327fde226fb5a297e32be1d20b12c8f63ea535d8ed71acaea6556658b0305625a864fb101f04f4