lewtrans.puad.netstrefa.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:8c:62:2f:46:1c:6a:e2:af:57:ac:c8:15:73:95:cb:f7 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lewtrans.puad.netstrefa.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:8c:62:2f:46:1c:6a:e2:af:57:ac:c8:15:73:95:cb:f7
Serial Number (int): 325836826866668151714291841644778132720631
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:12:32:c8:b9:e3:5b:d3:27:49:c2:fe:f5:bd:12:31:33:1e:da:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:72:6e:f3:3c:1f:a3:c5:24:9d:2d:81:0c:8a:14:f3:e1:23:b6:ac
Fingerprint (sha256): 07:49:f4:bb:76:be:b3:0e:0e:9f:ff:2e:7a:b1:0e:9f:77:fb:14:8f:cb:ad:2d:32:b6:db:c8:b8:d3:40:81:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lewtrans.puad.netstrefa.pl

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lewtrans.puad.netstrefa.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

krzyszton-transport.puad.netstrefa.pl
lewtrans.puad.netstrefa.pl
lok-janowlub.puad.netstrefa.pl
sanepid-janowlub.puad.netstrefa.pl
www.krzyszton-transport.puad.netstrefa.pl
www.lewtrans.puad.netstrefa.pl
www.lok-janowlub.puad.netstrefa.pl
www.sanepid-janowlub.puad.netstrefa.pl
www.ziolkowski-transport.puad.netstrefa.pl
ziolkowski-transport.puad.netstrefa.pl

Other certificates including the domain name netstrefa.pl

(limited to 100 certificates)
stowarzyszenie-rozwoju.eu
serwis.netstrefa.pl
obserwatorzy.pl
sycewice.salcom.netstrefa.pl
perkowski.pl
perkowski.info
goldenlife.netstrefa.pl
annakobinska.netstrefa.pl
kwidzyn24h.pl
stowarzyszeniedmt.netstrefa.pl
tls-trans.eu
fundacjadcw.pl
papmembran.netstrefa.pl
galeriaarchitektury.pl
goldenlife.netstrefa.pl
wojciechgunia.netstrefa.pl
sisk.netstrefa.pl
kolo93.netstrefa.pl
terapia-gdansk.netstrefa.pl
rehanowak.eu
counsellingswitzerland.ch
projektowanie.org
ptma.pl
kwiaciarnia.netstrefa.pl
e-farmer.pl
roltech.com.pl
www.atix-druk.net
exs.netstrefa.pl
natropiegra.pl
dobczyce-noclegi.pl
redscorpion.netstrefa.pl
szkolastrozowka.pl
npozp.pl
sopel.waw.pl
sportofoto.pl
starytarg.pl
gszksp.netstrefa.pl
silpomp.netstrefa.pl
tomaszadamus.pl
strony.netstrefa.pl
mototechnika.net
decortech.netstrefa.pl
zsgbydgoszcz.netstrefa.pl
zpmpsp.netstrefa.pl
averesete.netstrefa.pl
luisacerano-lodz.pl.decortech.netstrefa.pl
drewmax.netstrefa.pl
pendzoki.netstrefa.pl
decortech.eu
centrum.netstrefa.pl
awartfinanse.netstrefa.pl
kolosarna.netstrefa.pl
centrumsenioraarka.netstrefa.pl
pomorski24.netstrefa.pl
polonianacyprze.org
pibc.pl
v-pc.pl
zwiedzanie.netstrefa.pl
poradnia.netstrefa.pl
pteolsztyn.netstrefa.pl
goldenlife.netstrefa.pl
kajm.pl
kolo93.netstrefa.pl
wnetrzazpasja.netstrefa.pl
teldex.franczok.netstrefa.pl
perkowski.info
inwestowanie.nejman.netstrefa.pl
r-br.pl
psp2.netstrefa.pl
renmar.pl
iwaniec.netstrefa.pl
chatka-niedzwiadka.pl
zsz3.netstrefa.pl
eu-maxnet.pl
fb-babinski.netstrefa.pl
polver.eu
dkcampery.pl
rybno.waw.pl
cpcontacts.broff.com.pl
laweta.kwidzyn24h.pl
biurorachunkowe24.waw.pl
agencjadramatu.netstrefa.pl
duo.netstrefa.pl
aquarium.netstrefa.pl
ritterhof.pl
inka.netstrefa.pl
ies.co.pl
lewtrans.puad.netstrefa.pl
abistore.cz
dominowski-gastrolog.netstrefa.pl
fib-mosty.netstrefa.pl
agencjadramatu.netstrefa.pl
nejman.netstrefa.pl
r-br.netstrefa.pl
parol.netstrefa.pl
f.wzwiazku.netstrefa.pl
stowarzyszeniedmt.netstrefa.pl
lupinajanow.netstrefa.pl
awartfinanse.netstrefa.pl
hotapple.pl

Certificate

The complete raw certificate details for lewtrans.puad.netstrefa.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq+RN+5sQrRpPP9def34
jklK+wPXBW4D/PxpdTaqjJ/QZKg7PJed8T4yNGXG1JQFtROXH9PzvZkJXCeSf8tD
C7Mhh9t7qabCz2qJQG9JGyJ78dScRxD82baJcm2pOyWa8brpe9nVP+QJxbvzzViT
/wdNZHkfOxHMxi6zHqKdAJynjT8w+/v0wCXbQdrvW1NEwwck7VB4RKRU33IAng2V
cQ30cGmAko0/qxXq92tonaZHsYztdhh0rFwyz+wXiZEDPWrbezAP9GAic7ayb3kW
2OMvLu/5OIHgwMdmuhLHulzWFi/4KMlkTvsLFdHeGyaSmG+Je8hwyVkwJTqPUK5F
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325836826866668151714291841644778132720631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 02:11:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 02:11:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lewtrans.puad.netstrefa.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25081759825745899395698770602058442881118030064671404933998860642578060304350442351751812024389830390755993028274786847596904567558476990120095062781443466743610118906537848404128879980819324093433609866145950944518407142262094888177260577139764945764792863629839114214389746196540495907695398234919096895540923483989010825655236904852560527689443995963535327809182738995399525515346612424314194219923677037669336572043893388250037228946668034268938320287421785176982199886648386242117957985738966527999876968332833841195387000884313039098307019933087665228265610115440766694444323086185891941563403840984891903591707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|false] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (374 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krzyszton-transport.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewtrans.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-janowlub.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanepid-janowlub.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krzyszton-transport.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lewtrans.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lok-janowlub.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanepid-janowlub.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziolkowski-transport.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziolkowski-transport.puad.netstrefa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e86cb8b6b000004030047304502210081ea028b09aac1ba437e08955fa224557c771afe47205e48c6236edf97066132022018e200bd9590ec4b4e6b498327b9a7ba2e815f4cda8bb626d66625968e46e21b00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e86cb8bbf000004030046304402200e65329de0080521e8f7c6182df74b9d1366f7d57265b3c81867452ec8f31c4202203b65551814d5d0ad5943eccce139429f552edabdc5b4dbb840502b87e03080d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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