libreoffice.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fc:0e:32:60:ac:c7:78:b0:90:fa:9f:88:96:4d:81:51:46 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=libreoffice.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:0e:32:60:ac:c7:78:b0:90:fa:9f:88:96:4d:81:51:46
Serial Number (int): 434219170958701694267745598530681141547334
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:5f:ce:64:d8:22:50:4a:88:61:3b:62:e4:18:e7:ed:8b:30:e4:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:05:3e:5f:98:b3:c5:36:3e:9e:51:cd:48:86:a1:8e:f7:91:b3:f8
Fingerprint (sha256): 29:c5:c8:d2:a3:3c:a5:2d:fc:85:86:0c:b5:2c:6e:9a:d0:e7:64:69:44:5c:23:a3:7b:be:e8:3d:97:40:eb:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate libreoffice.org

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libreoffice.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.libreoffice.org
bg.libreoffice.org
bn.libreoffice.org
bo.libreoffice.org
brx.libreoffice.org
ca.libreoffice.org
conference.libreoffice.org
cs.libreoffice.org
cy.libreoffice.org
cz.libreoffice.org
da.libreoffice.org
de.libreoffice.org
documentation.libreoffice.org
donate.libreoffice.org
el.libreoffice.org
eo.libreoffice.org
es.libreoffice.org
et.libreoffice.org
fa.libreoffice.org
fi.libreoffice.org
fr.libreoffice.org
ga.libreoffice.org
gd.libreoffice.org
gl.libreoffice.org
he.libreoffice.org
hi.libreoffice.org
hr.libreoffice.org
hu.libreoffice.org
it.libreoffice.org
ja.libreoffice.org
ka.libreoffice.org
km.libreoffice.org
ko.libreoffice.org
libocon.com
libocon.net
libocon.org
libreoffice.org
lo.libreoffice.org
lt.libreoffice.org
marketing.libreoffice.org
ml.libreoffice.org
mt.libreoffice.org
my.libreoffice.org
nl.libreoffice.org
no.libreoffice.org
oc.libreoffice.org
pl.libreoffice.org
pt-br.libreoffice.org
pt.libreoffice.org
py.libreoffice.org
qa.libreoffice.org
ro.libreoffice.org
ru.libreoffice.org
si.libreoffice.org
sid.libreoffice.org
sk.libreoffice.org
sl.libreoffice.org
sr.libreoffice.org
sv.libreoffice.org
ta.libreoffice.org
th.libreoffice.org
tr.libreoffice.org
uk.libreoffice.org
us.libreoffice.org
vi.libreoffice.org
website.libreoffice.org
www.libocon.com
www.libocon.net
www.libocon.org
www.libreoffice.org
zh-cn.libreoffice.org
zh-tw.libreoffice.org
zh.libreoffice.org

Other certificates including the domain name libreoffice.org

(limited to 100 certificates)
extensions.libreoffice.org
bugs.documentfoundation.org
newdesign.libreoffice.org
devcentral.libreoffice.org
dev-www.libreoffice.org
bugs.documentfoundation.org
survey.documentfoundation.org
devcentral.libreoffice.org
survey.documentfoundation.org
bibisect.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
docs.libreoffice.org
help.libreoffice.org
opengrok.libreoffice.org
opengrok.libreoffice.org
api.libreoffice.org
ask.libreoffice.org
update.libreoffice.org
dev-downloads.libreoffice.org
opengrok.libreoffice.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
libreoffice.org
wasm-test.libreoffice.org
hub.libreoffice.org
api.libreoffice.org
newdesign.libreoffice.org
translations.documentfoundation.org
manual-test.libreoffice.org
docs.libreoffice.org
downloadcounter.libreoffice.org
update.libreoffice.org
devcentral.libreoffice.org
docs.libreoffice.org
jenkins.libreoffice.org
devcentral.libreoffice.org
libreoffice.org
translations.documentfoundation.org
devcentral.libreoffice.org
docs.libreoffice.org
helponline.libreoffice.org
wasm-test.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
jenkins.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
crashreport.libreoffice.org
newdesign.libreoffice.org
newdesign.libreoffice.org
listarchives.documentfoundation.org
dev-downloads.libreoffice.org
ask.libreoffice.org
devcentral.libreoffice.org
update.libreoffice.org
translations.documentfoundation.org
stats.documentfoundation.org
devcentral.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
gerrit.libreoffice.org
perf.libreoffice.org
docs.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
gerrit.libreoffice.org
hub.libreoffice.org
docs.libreoffice.org
crashreport.libreoffice.org
registration.libreoffice.org
stats.documentfoundation.org
jenkins.libreoffice.org
dev-www.libreoffice.org
dev-www.libreoffice.org
hub.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
translations.documentfoundation.org
update.libreoffice.org
bugs.documentfoundation.org
update.libreoffice.org
manual-test.libreoffice.org
help.libreoffice.org
hub.libreoffice.org
manual-test.libreoffice.org
translations.documentfoundation.org
dev-downloads.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
newdesign.libreoffice.org
docs.libreoffice.org
api.libreoffice.org
helponline.libreoffice.org
perf.libreoffice.org
gerrit.libreoffice.org
bugs.documentfoundation.org
wasm-test.libreoffice.org

Certificate

The complete raw certificate details for libreoffice.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434219170958701694267745598530681141547334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-24 00:14:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-22 00:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libreoffice.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 951998237041325416707968300774800458270053800959496228845603110032923467996496158701074315013430280990098325913780195040588027718471493631176448881646748525795675316034606115420203651609709433192597013686244955719712370284933087010589642981379502102599179888175019089318337475898288973384664602854625476599785772701240187957818230613494944019439213821651444255411356276172558011882404502545661016114439067554571860763306865083774571121363519617793562470071251826140941993344140194282242922816538165540839612949824349651228119898248116475006812209750429359054793815368280984044042413734161332224845171054873965040266389872007900034813821544424097142802454115127366602666217197139674728472815107675669565320462731125443920748644919100563734184396039227867717251703894233514237985579310213715307087161243443136173163439931704308016648648555118998415353973625036002783184741899927615650320846209475084811283391340187760550945144798473367599623299332973376415019126082506297388158798913878746179565010652092117294441132711352401792057123726546401713853919239985347556707669230500103814148529979758094082216269937021136055169055338200380539043810052327693669291932683355148348027403801996588338559691960197527659617422319073162872641481763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f5fce64d822504a88613b62e418e7ed8b30e41b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1478 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bn.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brx.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cz.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentation.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eo.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'et.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gd.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gl.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'he.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ja.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ko.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libocon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libocon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libocon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lo.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ml.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-br.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'py.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sr.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ta.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vi.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libocon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libocon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libocon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh-cn.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh-tw.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.libreoffice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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