zst-tarnow.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:25:be:b1:dc:ed:35:84:48:a5:25:de:37:d3:04:67:d1 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zst-tarnow.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:25:be:b1:dc:ed:35:84:48:a5:25:de:37:d3:04:67:d1
Serial Number (int): 342033950335280427529810701264359153493969
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:31:59:7c:9e:7b:b1:04:00:d9:86:1b:16:05:f5:c7:d1:0e:d6:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:9c:36:45:22:9c:c2:b9:be:d6:b4:dd:86:b8:a1:a0:a6:20:06:c8
Fingerprint (sha256): 00:10:05:f1:51:a3:3e:65:6e:cd:d6:07:ff:0e:a8:71:b5:69:f7:d7:12:88:ef:4b:92:f8:6e:d0:74:56:df:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate zst-tarnow.pl

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zst-tarnow.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

biblioteka.zst-tarnow.pl
multimedia.zst-tarnow.pl
skt.zst-tarnow.pl
www.biblioteka.zst-tarnow.pl
www.multimedia.zst-tarnow.pl
www.skt.zst-tarnow.pl
www.zst-tarnow.pl
www.zst.tarnow.pl
zst-tarnow.pl
zst.tarnow.pl

Other certificates including the domain name zst-tarnow.pl

(limited to 100 certificates)
zst-tarnow.pl
fundacja.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
moto.zst-tarnow.pl
fundacja.zst-tarnow.pl
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
katalog.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
moto.zst-tarnow.pl
zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
skt.zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
programowanie.zst-tarnow.pl
katalog.zst-tarnow.pl
fundacja.zst-tarnow.pl
www.zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
moodle.zst-tarnow.pl
fundacja.zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
sni187966.cloudflaressl.com
katalog.zst-tarnow.pl
zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
sni187966.cloudflaressl.com
ligaszachowa.zst-tarnow.pl
fundacja.zst-tarnow.pl
sni187966.cloudflaressl.com
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
programowanie.zst-tarnow.pl
katalog.zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
zst-tarnow.pl
sni187966.cloudflaressl.com
sni187966.cloudflaressl.com
zst-tarnow.pl
zst-tarnow.pl
programowanie.zst-tarnow.pl
fundacja.zst-tarnow.pl
katalog.zst-tarnow.pl
www.multimedia.zst-tarnow.pl
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
sni187966.cloudflaressl.com
zst-tarnow.pl
ligaszachowa.zst-tarnow.pl
zst-tarnow.pl

Certificate

The complete raw certificate details for zst-tarnow.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG0DCCBbigAwIBAgISA+0lvrHc7TWESKUl3jfTBGfRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MDUwMTMwMDBaFw0x
NjA4MDMwMTMwMDBaMBgxFjAUBgNVBAMTDXpzdC10YXJub3cucGwwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDWGd78vMrFqZrAt+duvMw8obkWlqPaUXov
OJ4fkOLl71HBpItT/VUvB0EYuM1piUbttJOifjpeW2MxqZ5e7Ayw7q+l1qwq5WqI
abKz63T8edElBjqG8CL2aOqaUbxLUObdQWjFKkjcw1NknhTrly04CupWHQhFNpZH
BaoQpsIDzFblw6nRUVihe/JQ2FKWCvGmrm4DmKZBXcgAMrl7WeC7yjzG1653AczF
RYhEBtzXzsz6wVp+SXZZV9O1Zsx7Z/PHy3iJuSe/dDKGSE2MmYlWUp1CIUokfbtB
DWkYIHFfD9bxNz/MA0LfoEGozqpZLvqzrqBi64OToLp3jKGyi2ptYAvCl+h6iLWf
IMoX1oQ9XNSaKnvErXKr60mQLt5Q98KTqasB1xiTp5F56LfK0lt0RTXbsWhKt8Md
esED/xeaQ3ayYXBpZTpsFCj+eipeDoUSfip7DplW82hVjALL3xuuzXbBoElJsbPm
MG6Z0If2z+F1plgxvlLdWtroTZb4uaimkxO0XIJ/JIx2rT8v6tOMB5nFuytHwxY9
cVbwDo4oUOYcXbgpDtnf600oavtrfUw+HDxi2+bwNqhOu2zAYpflUUib6dz/go2S
kdaDV0ruFA3AoKMtqJEmzoWtaGC91JsLcqEqBpBOFdzRLnCn77Cjmywk8PNhoHPs
m1UCfnveGQIDAQABo4IC4DCCAtwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ8MVl8
nnuxBADZhhsWBfXH0Q7WeTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzCB6QYDVR0RBIHhMIHeghhiaWJsaW90ZWthLnpz
dC10YXJub3cucGyCGG11bHRpbWVkaWEuenN0LXRhcm5vdy5wbIIRc2t0LnpzdC10
YXJub3cucGyCHHd3dy5iaWJsaW90ZWthLnpzdC10YXJub3cucGyCHHd3dy5tdWx0
aW1lZGlhLnpzdC10YXJub3cucGyCFXd3dy5za3QuenN0LXRhcm5vdy5wbIIRd3d3
LnpzdC10YXJub3cucGyCEXd3dy56c3QudGFybm93LnBsgg16c3QtdGFybm93LnBs
gg16c3QudGFybm93LnBsMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE
AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi
ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj
b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0
cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD
ggEBABl07a0YpWmo8lwM+5MslQBzF4EPe7Ck3XT+aLyi6V/CfXv/+skbH8wMwbsA
Jup0GA0VjP5wFPDuOSQTDJo9NYf1ACisXsApdHPS1H9IEL+2mNKcnB9q2UoTlFK8
tmTXARS8q44OKCnuWUPtWqSloAa45D6vlvc5OzbUgOPr6tLfiugihahHuqm9sHH2
IR2Iro2Rigrst90QPNI3JapOEmqkrEyK+Fyaq11ojVEqVK7EYsI97K6Fz5kA06sM
mFti0j2e7c0An63B2kEAJLMzClATJsDiZIw6DgOlaA0G8tuMTMRP9b+igiM6IfLU
vNTb3NfAnYQ7YEEwqCHon0DTGIM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1hne/LzKxamawLfnbrzM
PKG5Fpaj2lF6LzieH5Di5e9RwaSLU/1VLwdBGLjNaYlG7bSTon46XltjMameXuwM
sO6vpdasKuVqiGmys+t0/HnRJQY6hvAi9mjqmlG8S1Dm3UFoxSpI3MNTZJ4U65ct
OArqVh0IRTaWRwWqEKbCA8xW5cOp0VFYoXvyUNhSlgrxpq5uA5imQV3IADK5e1ng
u8o8xteudwHMxUWIRAbc187M+sFafkl2WVfTtWbMe2fzx8t4ibknv3QyhkhNjJmJ
VlKdQiFKJH27QQ1pGCBxXw/W8Tc/zANC36BBqM6qWS76s66gYuuDk6C6d4yhsotq
bWALwpfoeoi1nyDKF9aEPVzUmip7xK1yq+tJkC7eUPfCk6mrAdcYk6eReei3ytJb
dEU127FoSrfDHXrBA/8XmkN2smFwaWU6bBQo/noqXg6FEn4qew6ZVvNoVYwCy98b
rs12waBJSbGz5jBumdCH9s/hdaZYMb5S3Vra6E2W+LmoppMTtFyCfySMdq0/L+rT
jAeZxbsrR8MWPXFW8A6OKFDmHF24KQ7Z3+tNKGr7a31MPhw8Ytvm8DaoTrtswGKX
5VFIm+nc/4KNkpHWg1dK7hQNwKCjLaiRJs6FrWhgvdSbC3KhKgaQThXc0S5wp++w
o5ssJPDzYaBz7JtVAn573hkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342033950335280427529810701264359153493969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 01:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-03 01:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zst-tarnow.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873456114349496359461443340151393192390580191299570890449381411706607597887606750838421788713234264928910987491142026188187116245000701043728554794339364075666882195515789405759293529273131321347035383083145439824924785254604240093367937116582041826077133173801234991768487328993849521663282862055856708134152570876429368311561488753199654680959217106022666386315202250506531341211637767982157112045131649359435631476435860865169300042744303291627477062120356175883709259277130334966100457466698410908152163120160259329367409842796566325335846742816124509752907882518755409450672893395873715923673565937139369199804713140776875833920450002594086937293393076747022780803607016916796507585869002879024318772265618767893948072145256336098696853969375477141522602621264393147700867244505653772272073449418710113949195888789949421519982007948929096951890742630286369122878237234974855820363711833613311493787222787118590356874327803692222765439050641883161653431621564231352185704785478597512808195559385425240262460738440611888914657468326076788695362078483158850527760333436817990451957983130951282572049819198629216091602994707315730901397586294836391186352066777768113320067673918974327661788352341931319976336751054933888864966401561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c31597c9e7bb10400d9861b1605f5c7d10ed679
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblioteka.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimedia.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skt.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biblioteka.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multimedia.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skt.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zst.tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zst-tarnow.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zst.tarnow.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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