zsz3.netstrefa.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:61:60:df:8a:7a:a7:1c:8a:15:63:44:ae:13:b8:f8:60 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zsz3.netstrefa.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:61:60:df:8a:7a:a7:1c:8a:15:63:44:ae:13:b8:f8:60
Serial Number (int): 271674766912947237264771461166182453278816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:e4:4c:35:39:ca:de:19:8d:48:11:7a:b4:11:6d:44:4d:6c:6a:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:c7:ef:b0:4f:9e:90:9a:66:f1:c6:8e:e2:62:b1:22:f6:26:f6:28
Fingerprint (sha256): 06:71:b1:51:57:8d:44:3a:86:1e:ac:cd:43:42:73:f2:82:85:7a:d5:b5:98:e5:b3:04:f0:eb:b2:38:ea:a8:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zsz3.netstrefa.pl

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zsz3.netstrefa.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.zsz3.netstrefa.pl
cpanel.zsz3.netstrefa.pl
mail.zsz3.netstrefa.pl
webdisk.zsz3.netstrefa.pl
webmail.zsz3.netstrefa.pl
www.zsz3.netstrefa.pl
zsz3.netstrefa.pl

Other certificates including the domain name netstrefa.pl

(limited to 100 certificates)
stowarzyszenie-rozwoju.eu
serwis.netstrefa.pl
obserwatorzy.pl
sycewice.salcom.netstrefa.pl
perkowski.pl
perkowski.info
goldenlife.netstrefa.pl
annakobinska.netstrefa.pl
kwidzyn24h.pl
stowarzyszeniedmt.netstrefa.pl
tls-trans.eu
fundacjadcw.pl
papmembran.netstrefa.pl
galeriaarchitektury.pl
goldenlife.netstrefa.pl
wojciechgunia.netstrefa.pl
sisk.netstrefa.pl
kolo93.netstrefa.pl
terapia-gdansk.netstrefa.pl
rehanowak.eu
counsellingswitzerland.ch
projektowanie.org
ptma.pl
kwiaciarnia.netstrefa.pl
e-farmer.pl
roltech.com.pl
www.atix-druk.net
exs.netstrefa.pl
natropiegra.pl
dobczyce-noclegi.pl
redscorpion.netstrefa.pl
szkolastrozowka.pl
npozp.pl
sopel.waw.pl
sportofoto.pl
starytarg.pl
gszksp.netstrefa.pl
silpomp.netstrefa.pl
tomaszadamus.pl
*.doraga.pl
strony.netstrefa.pl
mototechnika.net
decortech.netstrefa.pl
zsgbydgoszcz.netstrefa.pl
zpmpsp.netstrefa.pl
averesete.netstrefa.pl
luisacerano-lodz.pl.decortech.netstrefa.pl
drewmax.netstrefa.pl
pendzoki.netstrefa.pl
decortech.eu
centrum.netstrefa.pl
awartfinanse.netstrefa.pl
kolosarna.netstrefa.pl
centrumsenioraarka.netstrefa.pl
pomorski24.netstrefa.pl
polonianacyprze.org
pibc.pl
v-pc.pl
zwiedzanie.netstrefa.pl
poradnia.netstrefa.pl
pteolsztyn.netstrefa.pl
goldenlife.netstrefa.pl
kajm.pl
kolo93.netstrefa.pl
wnetrzazpasja.netstrefa.pl
teldex.franczok.netstrefa.pl
perkowski.info
inwestowanie.nejman.netstrefa.pl
r-br.pl
psp2.netstrefa.pl
renmar.pl
iwaniec.netstrefa.pl
chatka-niedzwiadka.pl
zsz3.netstrefa.pl
eu-maxnet.pl
fb-babinski.netstrefa.pl
polver.eu
dkcampery.pl
projektowanie.netstrefa.pl
rybno.waw.pl
cpcontacts.broff.com.pl
laweta.kwidzyn24h.pl
biurorachunkowe24.waw.pl
agencjadramatu.netstrefa.pl
duo.netstrefa.pl
aquarium.netstrefa.pl
ritterhof.pl
inka.netstrefa.pl
ies.co.pl
lewtrans.puad.netstrefa.pl
abistore.cz
dominowski-gastrolog.netstrefa.pl
fib-mosty.netstrefa.pl
agencjadramatu.netstrefa.pl
nejman.netstrefa.pl
r-br.netstrefa.pl
parol.netstrefa.pl
f.wzwiazku.netstrefa.pl
stowarzyszeniedmt.netstrefa.pl
lupinajanow.netstrefa.pl

Certificate

The complete raw certificate details for zsz3.netstrefa.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYaX3OZLwxoNoXjn+VIF
VR0/6Hmomf/pZ6mAfwEaYnCbe821DOmG9/VvusQCAD8RSoYFhJ549wHqxrv0ip/T
ahuznhj+fMTDREwe7UQltSxse2Y6E/QPD5xk+KhfymZsqEcNYJGo7I0edET5/TNt
9k7EY49T7I+TkOihoDymdrxPlFfhA5rdWAua9DFXWWYDHW4RpISzkWfI9skEUtC9
ECYHo4SzOPar7FS7fRR+CYO2/J27vHLjkOnYtDkzaV4lgCpeZaa5UFuoFI0F1DpP
shlP+1Dtto11MF8g6DoxqKyIb614NrJKSjsp9UT3HddSSq07GNCv1msn5Nu9XjBa
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271674766912947237264771461166182453278816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 18:59:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 18:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zsz3.netstrefa.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22915503586540555136280859480674862676275092628711397536673996729450031851267486237035282052857535334078507789464090106458793959748982785535890896369697093950993234273908324474093367288626809263056953765262651468651686556774930156095352413256988959438221934112051799834729401601451335104829329618224003521375661770114806581304856046229400884091063242348424048146240948155453285352005222639932100125944021505046755656918407828355651268518321557021158896388375743372143945572714731682014175223792438943678279123207387817644792040742865927001795650580841332371650216081424818896912648387633037565363414705441755001543221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dde44c3539cade198d48117ab4116d444d6c6a1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsz3.netstrefa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a7a20f2ce000004030046304402200defebf9d5207cf151999dd792168d8d69d42db4a8b7c39c655f635599efe4bf0220294a20b5c2b51778ecbb366686970b715bda5be4ff1fcc4595c7dc6215dac37e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a7a20f4c50000040300473045022100c44a6b601df429f01a95b9917a29a7b5dc4c62ce3a3aa7631494ce4900a0b7d402202444e98555f1fc68d55bdacab8ad543db1db3d018516e31c54c03663252e3e1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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