loteria.carrefour.pl

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 1e:69:05:c3:96:d5:35:98:62:99:5b:95:32:c3:b0:86 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loteria.carrefour.pl,C=PL

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:69:05:c3:96:d5:35:98:62:99:5b:95:32:c3:b0:86
Serial Number (int): 40422147951913847397221042601796546694
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 9b:de:c1:4a:26:63:4a:76:c2:e8:72:a7:6a:01:1f:7d:45:58:e0:bf
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): e0:c5:aa:58:55:68:ef:85:c8:ea:db:d5:35:59:e3:52:c7:39:74:59
Fingerprint (sha256): 12:3e:0e:e8:87:4e:de:c2:af:5f:e4:0f:2d:89:43:7b:99:6a:e0:12:df:68:d1:a5:01:59:3d:8d:a0:52:b0:b1

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate loteria.carrefour.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loteria.carrefour.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loteria.carrefour.pl
www.loteria.carrefour.pl

Other certificates including the domain name carrefour.pl

(limited to 100 certificates)
esambo.carrefour.pl
20latrazem.carrefour.pl
trk.carrefour.pl
incapsula.com
newsletter.carrefour.pl
newsletter.carrefour.pl
loteria.carrefour.pl
franko.carrefour.pl
franet.carrefour.pl
satysfakcja.carrefour.pl
trk.carrefour.pl
imperva.com
imperva.com
carrefour.pl
test.carrefour.pl
c4webservice.labo.carrefour.pl
sklep.carrefour.pl
20latrazem.carrefour.pl
rodzinka.carrefour.pl
serwiskorporacyjny.carrefour.pl
trk.carrefour.pl
fastpages.pl
trk.carrefour.pl
franko.carrefour.pl
c4scango.carrefour.pl
c4mqtt.carrefour.pl
talenty.carrefour.pl
imperva.com
20latrazem.carrefour.pl
carrefour.pl
scid-labo.carrefour.pl
c4webservice.carrefour.pl
promoplanner.carrefour.pl
targi.carrefour.pl
rodzinka.carrefour.pl
scid-labo.carrefour.pl
zakupycodzienne.carrefour.pl
wiem.carrefour.pl
trk.carrefour.pl
carrefour.pl
franet.carrefour.pl
20latrazem.carrefour.pl
media.carrefour.pl
satysfakcja.carrefour.pl
sklep.carrefour.pl
carrefour.pl
franko.carrefour.pl
app.shoper.carrefour.pl
media.carrefour.pl
loteria.carrefour.pl
apimobile.carrefour.pl
carrefour.pl
twojapodroz.carrefour.pl
satysfakcja.carrefour.pl
incapsula.com
scid-labo2.carrefour.pl
esambo.carrefour.pl
szalona5zplusem.carrefour.pl
zakupycodzienne.carrefour.pl
sklep.carrefour.pl
20latrazem.carrefour.pl
20latrazem.carrefour.pl
trk.carrefour.pl
cdn.carrefour.pl
cdn.carrefour.pl
c4scango.carrefour.pl
trk.carrefour.pl
serwiskorporacyjny.carrefour.pl
carrefour.pl
newsletter.carrefour.pl
imperva.com
carrefour.pl
c4webservice.carrefour.pl
beta.carrefour.pl
trk.carrefour.pl
trk.carrefour.pl
20latrazem.carrefour.pl
carrefour.pl
actforfood.carrefour.pl
imperva.com
c4mqtt.labo.carrefour.pl
sasiatki.test.carrefour.pl
kontocarrefour.carrefour.pl
satysfakcja.carrefour.pl
kontocarrefour.carrefour.pl
media.carrefour.pl
twojapodroz.carrefour.pl
newsletter.carrefour.pl
franko.carrefour.pl
cdn.carrefour.pl
sasiatki.test.carrefour.pl
trk.carrefour.pl
sasiatki.test.carrefour.pl
imperva.com
esambo.carrefour.pl
loteria.carrefour.pl
test.carrefour.pl
c4webservice.labo.carrefour.pl
targi.carrefour.pl
20latrazem.carrefour.pl

Certificate

The complete raw certificate details for loteria.carrefour.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV1j18mqsH0f3Hk+0b5j
Omat8zFp0I4V9LMUnDyuPmjQH5kOhJXh/44omfhmGjUzm6Z7bXPBqw2BCGvKk8Cy
KnIecy10ZYKdCZxzC5OCC/IzYdN3Z3PH9mzRd+k58qMVjeWUf4LhXdecZChw6X5a
pOG6SqyxZccrzCv4fPYljohYU1VcjWfuiOC/6sqA1jcHsnmgCj8O9ktYKrZMr+td
hMDFCtcxM0TWAIXAMoBmKppCOZzDDd1eQ953KhgZMzXm8WXsnZr2y18c5yUSRSzK
i0HHfEqsis6rpP7lyWpNeVSBkBm+cVR05Jr/dc/0I12HYMZAHxIwwWnRr3Dc5/yW
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40422147951913847397221042601796546694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 10:04:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 10:04:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'loteria.carrefour.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21380325870284022984798648282268708715849021270712699551779678038346213967883910556793593602738862344693717683538044155361786770174129362114386071996585467143596387654249592346037807378959663877405032654590505534292239381347647969475637562341874449758868385346373450658884928288448365019316193747675599252409563967997764516777530365251369848972225976395580199502695370851166598821370418091671691098841296363370866737564032607249843283256197942866550258843580609723032094168953078648740614997978156844449819261201543324237924597814039031782317658341206199027112876816439109166475174713154208616508939859316525544281637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bdec14a26634a76c2e872a76a011f7d4558e0bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loteria.carrefour.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loteria.carrefour.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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