nextcloud.sdcmp.koumbit.org

Issued by R3

About this certificate

This digital certificate with serial number 04:70:80:9f:30:3c:5c:8a:34:17:f5:4d:e6:36:c8:c7:ca:d8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nextcloud.sdcmp.koumbit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:80:9f:30:3c:5c:8a:34:17:f5:4d:e6:36:c8:c7:ca:d8
Serial Number (int): 386731736559185061188525897125502747396824
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4b:98:d3:37:5f:c9:e3:83:18:32:86:ce:1c:a5:75:3d:a5:6e:82:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:e2:4f:d3:00:de:8b:f0:04:94:74:15:39:75:e1:7b:ea:7f:cf:ed
Fingerprint (sha256): 54:6c:95:2e:dd:06:33:20:44:7c:51:64:8a:bc:02:85:eb:e3:1a:19:e0:46:0a:4c:8f:e6:bb:68:52:2d:57:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nextcloud.sdcmp.koumbit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcloud.sdcmp.koumbit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcloud.sdcmp.koumbit.org

Other certificates including the domain name koumbit.org

(limited to 100 certificates)
nextcloud.cumulus.koumbit.org
gabrielle.koumbit.org
www.vikinge.koumbit.org
www.koumbit.org
www.apbm.koumbit.org
www.shadowrun.koumbit.org
www.assep.koumbit.org
cmac.gwradio.koumbit.org
lmssop.koumbit.org
www.narchive.koumbit.org
www.johnb.koumbit.org
www.gfilion.koumbit.org
www.adte2254.koumbit.org
pplif.koumbit.org
www.assep.koumbit.org
www.koumbit.org
tnm.koumbit.org
nextcloud.cumulus.koumbit.org
www.assep.koumbit.org
mystic.koumbit.org
www.joasia.koumbit.org
wiki.praec.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
gabrielle.koumbit.org
*.koumbit.org
www.koumbit.org
www.gfilion.koumbit.org
www.koumbit.org
gidget.koumbit.org
www.kepo.koumbit.org
confluetest.kwekwe.koumbit.org
www.joasia.koumbit.org
nextcloud.sdcmp.koumbit.org
www.joasia.koumbit.org
www.narchive.koumbit.org
vikinge.koumbit.org
www.assep.koumbit.org
wb.tnm.koumbit.org
rcentres.koumbit.org
www.assep.koumbit.org
www.shadowrun.koumbit.org
www.koumbit.org
www.koumbit.org
wb.tnm.koumbit.org
www.tnm.koumbit.org
www.narchive.koumbit.org
cmac.gwradio.koumbit.org
www.ktrh.koumbit.org
nuage.ecrinum.koumbit.org
nextcloud.sdcmp.koumbit.org
nuage.ecrinum.koumbit.org
www.philou.koumbit.org
70s.haproxy.koumbit.org
narchive.koumbit.org
www.koumbit.org
www.assep.koumbit.org
www.gabrielle.koumbit.org
www.gidget.koumbit.org
www.koumbit.org
https56.nina.koumbit.org
etcgroup.koumbit.org
www.koumbit.org
www.praec.koumbit.org
www.kepo.koumbit.org
rcentres.koumbit.org
ktrh.koumbit.org
www.joasia.koumbit.org
www.assep.koumbit.org
gretchenk.gwradio.koumbit.org
www.koumbit.org
www.enkerli.koumbit.org
*.koumbit.org
shadowrun.koumbit.org
www.koumbit.org
www.mystic.koumbit.org
www.assep.koumbit.org
www.koumbit.org
www.koumbit.org
www.joasia.koumbit.org
enkerli.koumbit.org
cache.haproxy.koumbit.org
www.largot.koumbit.org
ktrh.koumbit.org
www.enkerli.koumbit.org
www.koumbit.org
vikinge.koumbit.org
gidget.koumbit.org
www.joasia.koumbit.org
www.praec.koumbit.org
tnm.koumbit.org
www.sdcmp.koumbit.org
www.koumbit.org
www.koumbit.org
www.koumbit.org
wp.nina.koumbit.org
www.assep.koumbit.org
81s.haproxy.koumbit.org
www.koumbit.org
www.tnm.koumbit.org

Certificate

The complete raw certificate details for nextcloud.sdcmp.koumbit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386731736559185061188525897125502747396824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 14:06:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 14:06:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcloud.sdcmp.koumbit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716780496550659367096067739868337919709928090067800721355155428540228988662263617805263721125267424806533417086981922580541860038868114244867226545647290890694011876741834045293352382544851370964499742860459833316787130435275095135051586631313041297201956862338618291247182892768158898795153887794635069555741713933292852464390125989246403576333911884769752213526470178019569352953879704267318433829674257969279231578709278108351837182682897069574930620676662789147523018396038982774655831105170668492276861992238428522166381336688179634081324661719703014848636391373179192200358323202035571918062779922822498327232300155988687745777592999148286704677944990547699016854176624806004416474036002898888306749957528520750425352946763171628957480955161995834231319795741641166430438715355277610963637823765669396926073664482974493739654425527602066508157362055553341423900100880817661611377303741509445173216005520218161595414153736847059669886075376634213843603466262440186706361823094689544651134133407361121329539688315987467494389701942503238818042524860304983968952133620262576487761900269898088076869671322400803217083272933052793674212899160297702484385357644591980627942962568406844878986325306695585843794165940893434997822000119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b98d3375fc9e383183286ce1ca5753da56e825b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcloud.sdcmp.koumbit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9e879aa80000040300483046022100cfa9723698ea2c6a8baf1e24e2f67738ef2866ae2a368eaf2767af4c9535800d022100af0f2a4f3167d20b7af2d65acd024e554eced4bf06d4a516ba48cb64c99feb98007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a9e879a9b00000403004730450221009eb3047de4a699474614600a5fd3d276c0d2d79b5e6a829f3bd255b75aa98149022061862c20e48cd6dec6a1f7f6c6c5f4f4fc56e77ba1a9b78506276c08741060ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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