theprime.com.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:a5:58:0b:94:0c:3a:da:92:51:38:72:ea:eb:1b:d3:6b was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=theprime.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:a5:58:0b:94:0c:3a:da:92:51:38:72:ea:eb:1b:d3:6b
Serial Number (int): 313960122077369384159361687771707929777003
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:13:b8:86:5e:21:f8:67:ca:0a:8b:38:7c:21:9c:a7:ae:a2:e8:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:6c:38:99:27:08:7f:14:a9:ca:e5:db:6c:77:81:65:83:1e:81:4b
Fingerprint (sha256): 0b:47:27:23:d1:0f:ad:0e:f0:35:8c:51:de:71:7c:f1:b2:1d:98:1a:a4:51:42:a7:70:d8:d9:03:3a:6b:98:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate theprime.com.pl

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theprime.com.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.marciech.pl
autodiscover.theprime.com.pl
cpanel.marciech.pl
cpanel.theprime.com.pl
cpcalendars.marciech.pl
cpcalendars.theprime.com.pl
cpcontacts.marciech.pl
cpcontacts.theprime.com.pl
mail.marciech.pl
mail.theprime.com.pl
marciech.pl
marciech.weboo.pl
theprime.com.pl
theprime.weboo.pl
webdisk.marciech.pl
webdisk.theprime.com.pl
webmail.marciech.pl
webmail.theprime.com.pl
www.marciech.pl
www.marciech.weboo.pl
www.theprime.com.pl
www.theprime.weboo.pl

Other certificates including the domain name theprime.com.pl

(limited to 100 certificates)
theprime.com.pl
theprime.com.pl
izaskalska.pl
theprime.com.pl
theprime.com.pl
theprime.com.pl
theprime.com.pl
theprime.com.pl
theprime.com.pl
theprime.com.pl
izaskalska.pl
sprezarkowymarket.pl
izaskalska.pl
ap-serwis.com.pl

Certificate

The complete raw certificate details for theprime.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA617rGOfJ9rhG5c3HYMDQ
WeEa7IGxTscF6Fk7yzeaFaRVxCX+Vg4x61CtXzLzE9to2tywthu5XpDv5MPPQ6Xl
sq1R3t5s8vuexbmMeFkeqmcYzHLrKiawIMmrTgVamtfamDLGRChn642r0IAyMFBb
wUXAO9lCSIrMvpj4QTI8jCkosIRe/AV+5TABsg1K5Muu6ibciXHRH9/IfYmzKf8O
RDivqsH+xEIGUvup0lrDh3Z4VkhnhTZ6iBUGk7DjwMSO7fWrDJYxdv7e8/b38qfN
NGCZ+6hngjtt9ZuG4vEsGOYV2QC6UeeQkYK2KIM0AbltdwB/dfLOTMfHRMIHxVG6
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313960122077369384159361687771707929777003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 19:26:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 19:26:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theprime.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29712807649288383319359684553749701556500479917447740047225594410199155178177180370222453529820300664868688887693322168804741330916765737085207810655754948009101068100612760168192245960534683072926627719237300559542249247367057826604484139890495452513789270766699282557323056814795282129210121392959486952036258465419183138137397215942864109230155238810164112533536396510575853550411118652114569587496010240996762782279024786539928004696851646345654102086088353857950515850901884890263846505499278787855050665115486881669436960103385367095534618761537913043673167289810961294380414854614100175519201895485725375314511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d913b8865e21f867ca0a8b387c219ca7aea2e8a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marciech.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theprime.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marciech.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theprime.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theprime.weboo.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001707e0747160000040300483046022100a95ef7697a7a7b0694623bda943f9b70458c67b42f417a68935ac8c8ee31bd06022100b147b55641e0ee91e8e2e3a13be339906f2b32ab8cc5a991645af8d0e0462eba00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707e074741000004030047304502204105d71144a3ea4d7f97a47b7802cb9734480b01f61031145ef5be4f8d457c6d02210094cbbccb21da9c41b61448e4b18fc7c17c80463f00d53de80e1a9a8f654a9409
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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