malgosia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:a7:c6:8a:b1:02:cb:d1:b0:e7:4e:dd:d7:3c:7c:5f:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=malgosia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:a7:c6:8a:b1:02:cb:d1:b0:e7:4e:dd:d7:3c:7c:5f:a9
Serial Number (int): 345949896754744325166588206066570555580329
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:af:0b:90:b6:45:00:99:97:b5:c6:bf:12:e1:37:fb:4d:58:26:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:21:21:e2:80:ab:84:2e:17:c0:78:1f:92:c8:ce:08:86:fb:55:ac
Fingerprint (sha256): 12:4d:db:b1:2d:6b:b9:ca:a9:b9:52:22:dc:b8:13:c6:61:76:63:c6:e3:8d:59:4d:86:13:74:32:30:45:b4:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate malgosia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for malgosia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

malgosia.org

Other certificates including the domain name malgosia.org

(limited to 100 certificates)
malgosia.org
malgosia.org
almeta.boston
malgosia.org
www.malgosia.org
www.malgosia.org
malgosia.org
www.malgosia.org
malgosia.org
www.malgosia.org
www.malgosia.org
malgosia.org
malgosia.org
www.malgosia.org
malgosia.org
malgosia.org

Certificate

The complete raw certificate details for malgosia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs64ke7rd4jOwqNdgFB58
EJy6tC8nSKkx3WQlHWgGuiktpIuTtSGEgRtmFaR5HIORnezl2R8Xe+57MruuavkN
1DYlghSs2/smDeyakCKQYIUO44qvzf1E5uK/tvuRaGN+D9/pIozryomRWxLnmsMD
XZzHVjQjCeNlDvxC9Ykfmw/zyxlPUbxvT25bk0TvMS8f/OLJZLSqpE70ZgTrUbUu
H1EYQ+ac1Gkn0WWPCJrPkrLI+2Ttacf7alu+mGevR76AZpmoTUv12nry2ME+gtSq
kE6mMIA6XzKUcSt+Do26DzbkooOEVMxA6umicxaX6b3QF3m2TfI9jOXNl5R+Uz2Q
acHT5AFvR1f7S816MDrXGdz/eNKUySIKxAC2NFsobMCuy6SaOMsng612mhjNRhul
gEJV1ZWeUMqIHUsMAKcpnm8TeaY6xTwjqc8hWO8jH0O5KjP/pWgwk0bXcp0MN3iF
m/mdV5hcFOsF0oaYLqZaLf8FQaM0hIP3OmkVTNPnUDYU9EEjJ6Frq9O3380Kedjd
+lFg5xnCeD61eEc4+KOSSJlicNk+vCLkq6Hrkvpd/TGWJngFnavaUqtOkMo7Zl6M
xMKh7rVJyrHffjILtyXSrZuZs6khT36MC0LoWyssfTgw/oSNNMt7FM5MQoj8fZV4
gzZvTx57ckuE+1w7Nx3OxkUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345949896754744325166588206066570555580329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 01:33:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 01:33:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'malgosia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733031442355387232724489196883076157486209838003207812676079407628154887453571715272891456715984255259500046625014194719942426781967199927115373244845736825142849351503391790970200783002089386290607067724380361780171313130392290401855534099586869392646242368226142992215089653416762351144790211835901794414889889640970152106554836609890250280293437508381844290136057964707462825194227725516171100174481976296601574350048176162942852765421662696935074057671648044135880271914954531836984135639650411165515408651653060578596934889502358508871647485688755008747375163296092839763109950170013296751845785370106841535749627189248101800387154483440240695515332986761081976496184781478847509131779318240678091099993932063178636885955834794098730568499490458806387763207014133145990650480644558095023914997505361815368266642082507468378337883483529149737713137715197345983632963783040054752057318816209708484443956525340286707428185688318559481434991153857081306200468957888450851667368335235582634636659811143825487332301704710994718045625680257164276565006466482399167719816588196003507766432801732338568041778102770635726610903015564874825985637784868991491374248604307843788671377297277748566498533242289240630192708246680953625311626821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1daf0b90b645009997b5c6bf12e137fb4d5826d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malgosia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e5328f05800000403004630440220725dcf125d23066f7fe281786d423a3a25df4c80bf78f71c80ff20b6611ceb5f0220676e3e27d7c0724e3379d09415660401942d5ae1f83bcba6bc9faebc5716618c00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5328f0650000040300483046022100a054e3a02a232761cfaa7c4e3f47b396a70977377556adf9a19a95760a68ea2c022100bdb92cc0075a544c1521c5b398ae53eb4caf0a7c4788ed342e77130d729a0ce6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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