*.lekam.pl

- PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z O.O. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:83:fb:39:f3:af:a6:3a:06:2f:36:34:89:9a:54:4d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z O.O.

Organization: PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z O.O.
Organization unit: IT
Locality: ZAKROCZYM
Country: PL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:83:fb:39:f3:af:a6:3a:06:2f:36:34:89:9a:54:4d
Serial Number (int): 16636022314120037164739192263932531789
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:fc:1f:b3:11:ff:3b:d1:4f:d2:67:8e:da:ed:70:a2:88:b7:d5:f1
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 75:3c:68:bf:80:f8:80:8c:ee:33:b9:5b:be:96:ca:e9:28:ce:e2:74
Fingerprint (sha256): 0b:a2:96:b7:7a:d7:36:82:58:95:f7:d1:60:e8:7c:69:f1:f2:e5:af:e8:f9:4c:49:0d:87:cf:79:5c:f7:b8:95

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.lekam.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lekam.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lekam.pl
lekam.pl

Other certificates including the domain name lekam.pl

(limited to 100 certificates)
*.lekam.pl
*.lekam.pl
*.lekam.pl
pomoc.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
pomoc.lekam.pl
sd.kormotech.com
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
vpn.lekam.pl
dms.lekam.pl
vpn.lekam.pl
dms.lekam.pl

Certificate

The complete raw certificate details for *.lekam.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16636022314120037164739192263932531789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZAKROCZYM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM SP. Z O.O.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lekam.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728257545925956602346485641011259104304081484857476320064254611719940526216928818636611962003848329221974584237761839346183231836765721664215287579722679151695951874635393257758088498786154458354680347587179038733880234898166488705937705661012946607379566609391211612349017316397271249901997293592916235988372368420699103293733682934797260431307966585160499915996519803410316395436954043336403107445567256799325694046206587490172950980039439303516192510231291955282494319422376411800150413750694407888815892178208939128347413041206943811870857447266953893683701115907225048266302467376511651023377157829190122598288266903698868655162274564311187017871430942867786533294733848962266756307462930361337901181004204015342512133906040099138414057844499890885348609386791717375224589966892985759277705966316261833340959167504867963300230387134055656634566424561234838237662014688230584752459465718040245008781528735826119784877543341455530756508066943570672088140661680083008712146192549369147362522794747659085598760807445230502567006662180292569233972309662141562383426621126609551213706332585426614261657548683858616682012786434914778601903593160203293123479885502338510152523232100041080202747888052643183270365964472133739172711684491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1fc1fb311ff3bd14fd2678edaed70a288b7d5f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lekam.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekam.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162fcb17e160000040300473045022100d3487fdd3e055e4180586f99afdf534cfbce7a00395ebdf9fc663a324f9be3ce02204d2c3c4d5065d593b4ab68cbe01059a46fbc75576bc64f3a5a489cc1aca10a930077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162fcb17f470000040300483046022100cfdab0e120836fd748d7bad26244991afd5d0ffbc0520fde6cd484f30c618fa80221009a42a4697ab6cd71e040a6f9b7c6968a8c8e5c4dc5c7b4c9fd294c2fd2c06b68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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