duo.netstrefa.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:84:5b:98:66:69:0b:c6:a2:7a:f1:83:98:66:ee:5b:3c was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=duo.netstrefa.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:84:5b:98:66:69:0b:c6:a2:7a:f1:83:98:66:ee:5b:3c
Serial Number (int): 296221592906714241271423326295185309981500
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:19:27:5c:17:3f:e0:5f:95:de:ce:51:a1:94:b9:f4:9c:02:a3:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:41:f5:18:a7:cd:94:76:26:6b:73:ff:ad:90:23:b8:92:39:d6:a8
Fingerprint (sha256): 07:01:57:61:0f:5e:be:2f:a9:50:1b:11:4e:02:1f:00:a0:11:4a:a1:55:15:c9:d9:9c:37:54:65:bd:de:85:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate duo.netstrefa.pl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duo.netstrefa.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.duo.netstrefa.pl
cpanel.duo.netstrefa.pl
duo.netstrefa.pl
foto.duo.netstrefa.pl
mail.duo.netstrefa.pl
mif.duo.netstrefa.pl
webdisk.duo.netstrefa.pl
webmail.duo.netstrefa.pl
www.duo.netstrefa.pl
www.foto.duo.netstrefa.pl
www.mif.duo.netstrefa.pl

Other certificates including the domain name netstrefa.pl

(limited to 100 certificates)
stowarzyszenie-rozwoju.eu
serwis.netstrefa.pl
obserwatorzy.pl
sycewice.salcom.netstrefa.pl
perkowski.pl
perkowski.info
goldenlife.netstrefa.pl
annakobinska.netstrefa.pl
kwidzyn24h.pl
stowarzyszeniedmt.netstrefa.pl
tls-trans.eu
fundacjadcw.pl
papmembran.netstrefa.pl
galeriaarchitektury.pl
goldenlife.netstrefa.pl
wojciechgunia.netstrefa.pl
sisk.netstrefa.pl
kolo93.netstrefa.pl
terapia-gdansk.netstrefa.pl
rehanowak.eu
counsellingswitzerland.ch
projektowanie.org
ptma.pl
kwiaciarnia.netstrefa.pl
e-farmer.pl
roltech.com.pl
www.atix-druk.net
exs.netstrefa.pl
natropiegra.pl
dobczyce-noclegi.pl
redscorpion.netstrefa.pl
szkolastrozowka.pl
npozp.pl
sopel.waw.pl
sportofoto.pl
starytarg.pl
gszksp.netstrefa.pl
silpomp.netstrefa.pl
tomaszadamus.pl
strony.netstrefa.pl
mototechnika.net
decortech.netstrefa.pl
zsgbydgoszcz.netstrefa.pl
zpmpsp.netstrefa.pl
averesete.netstrefa.pl
luisacerano-lodz.pl.decortech.netstrefa.pl
drewmax.netstrefa.pl
pendzoki.netstrefa.pl
decortech.eu
centrum.netstrefa.pl
awartfinanse.netstrefa.pl
kolosarna.netstrefa.pl
centrumsenioraarka.netstrefa.pl
pomorski24.netstrefa.pl
polonianacyprze.org
pibc.pl
v-pc.pl
zwiedzanie.netstrefa.pl
poradnia.netstrefa.pl
pteolsztyn.netstrefa.pl
goldenlife.netstrefa.pl
kajm.pl
kolo93.netstrefa.pl
wnetrzazpasja.netstrefa.pl
teldex.franczok.netstrefa.pl
perkowski.info
inwestowanie.nejman.netstrefa.pl
r-br.pl
psp2.netstrefa.pl
renmar.pl
iwaniec.netstrefa.pl
chatka-niedzwiadka.pl
zsz3.netstrefa.pl
eu-maxnet.pl
fb-babinski.netstrefa.pl
polver.eu
dkcampery.pl
rybno.waw.pl
cpcontacts.broff.com.pl
laweta.kwidzyn24h.pl
biurorachunkowe24.waw.pl
agencjadramatu.netstrefa.pl
duo.netstrefa.pl
aquarium.netstrefa.pl
ritterhof.pl
inka.netstrefa.pl
ies.co.pl
lewtrans.puad.netstrefa.pl
abistore.cz
dominowski-gastrolog.netstrefa.pl
fib-mosty.netstrefa.pl
agencjadramatu.netstrefa.pl
nejman.netstrefa.pl
r-br.netstrefa.pl
parol.netstrefa.pl
f.wzwiazku.netstrefa.pl
stowarzyszeniedmt.netstrefa.pl
lupinajanow.netstrefa.pl
awartfinanse.netstrefa.pl
hotapple.pl

Certificate

The complete raw certificate details for duo.netstrefa.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9FBnMnbAE2fiTW9+/g2
APAinL8Z83cZiwjKTdZ+F8QDTbrZHOuiFuzBZHG/Kg2n/9SMUNQC4uuCOjmOUOld
YgL++xRNL0mZVOJ6IOYdMli46hz09IyRsMpmOu4C1k6J1NGQxcnPch93Lqa3UV8T
K8Z0wXWvvL6R+aIdfHYlHwfAb+fzoz+ByBHq2ZYSzhMSROVRP83zpa9ElUuNJBIP
AUdc15UDdcHs+/xORby5LWLuR4G7Y7KNSlo6jxzrr2wI6V1oSKEqMsVJERbiQGQA
sRHcygJhmLY15EINLMB3N7G7G19ngtWUrR6p7IGHMBjnndlLlcM5q7lPEDe5uMrG
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296221592906714241271423326295185309981500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 02:18:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 02:18:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duo.netstrefa.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25224610814985422763277172594567838806088327820455957898807718327910295953279097182630956538253006924978608113201200126872383751398075121885668575203569806528243497823936504249132111911180426903854542170278926905726616194601745610711642680471792748520911775175064741340082624743911045216707181875979314428471804442752146298944578902809873550522471262349331625090087169622757568282489333230428443696466169228004383002354292175626372568563452102986963972321205479513644151820016383985854437404875919715650492915639974205586723517002760799708791211238707830934208979132970854986159348029821983301831894566488332619662927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f19275c173fe05f95dece51a194b9f49c02a322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foto.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mif.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foto.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mif.duo.netstrefa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f73b6853c000004030047304502206a144823de61609d77bc4ee4f0050a1edd9097e132b61cb46a244299520fa9250221009faee390c8f6600b00a97fda987c217dd54419dfb28b55bfb123ca8663428fa4007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f73b6853e0000040300463044022068dd6338032e164dc9a51a8548a04b2d1c37a317b3595553f88206eeb9b9e5a702201cb84dca91abaea1ed15792038abc3e809c4e17933115be72927fcb6f6b8cd2b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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