DV SSL/TLS Certificate for lajtit.pl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the lajtit.pl DV SSL/TLS Certificate

This certificate with serial number 06:28:17:eb:57:21:06:08:74:bf:5e:d6:0e:62:d9:22:6d:02 for lajtit.pl was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for lajtit.pl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:28:17:eb:57:21:06:08:74:bf:5e:d6:0e:62:d9:22:6d:02
Serial Number (int): 536316804468249859181304082349193737432322
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 11:ee:ed:db:fb:90:fd:3d:5a:e4:c6:b4:2c:e0:cf:3c:07:06:a8:f6
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): b3:da:ab:b6:71:0e:9f:d2:38:2a:9a:23:68:ac:35:e7:7d:7c:38:dc
Fingerprint (SHA-256): 96:b8:02:ce:99:80:4f:04:b9:b6:9a:c0:1c:27:96:04:af:a4:67:22:1c:0b:6b:03:44:21:d5:85:36:cb:7b:b9

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/3.crl

Check the revocation status for certificate lajtit.pl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for lajtit.pl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for lajtit.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fAsGlzgWJkW0yGG7e6/
WIH7TUYmr+MYizL8c3IRs8/gNjOgz69dmeVv36Gydkj8UUNItIJx/1VtsSehGbo3
YUgaVfyJNgKzu0aPiQPnVBlHUuMu4WFxEb+sL2lA8wNo2LNWRSr1Ls2aDi/dT4cp
geNnvDVtou9EVR2MGWaQ14odwW1IrowqAvsX/0pFqqAw58GONKWcUrcSk7GBJqbm
DPAoECC69Nd3Q1drBKMqvMAqeMkpb3ugmHGS/LnzoPeVn30CfhDqYbNFwNhrlwWO
mw4LfilLMr+2rK8jypFmuLSCP988ppe06zhf0ggidMi9F2dkXjjDlqBAjoAa70KJ
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 536316804468249859181304082349193737432322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-10 02:17:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-08 02:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajtit.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27007192321761475940036209628397200658239664826277042205451766460795023951128910136897906243541275473845776304239345148765182573133777671360703265946428947421811072446635003001184509898589510635671772302559381714368470064442382163256413553178463574723152614529674755343813912656164408335188829119046690591440239588741774063686964779303399435258636771598242046482119142373168230597964438490371035199660745480154880942677277578467560028137305147781361172673577376380523613715832217795513025276726897420668773583181044801119819842697120641684609647233859489839234588864566988640803119673010915043149869752384937980496267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11eeeddbfb90fd3d5ae4c6b42ce0cf3c0706a8f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajtit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lajtit.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019757d656df0000040300483046022100b29407da0e3821080a3c4f1f5c5d225405a41407ab251dab434e0130d59dbf9c022100e5b7b82cf107a6e2879fea570f1d08ff992a377d53fc1b2cf557077a1d6b61b700760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019757d656c90000040300473045022100af39aa6a84fd62960e5197b86e8a6611f23b73fcb85171262ccec58bc41f17a3022042470c7147108fe4632385f69339171e62c601f4b53c9b861840f6ba29a22a07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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