*.pot.gov.pl

Issued by DOMENY SSL DV Certification Authority

About this certificate

This digital certificate with serial number 5a:6d:6f:1e:22:e9:e9:28:a4:16:13:62:c1:91:81:c7 was issued on by DOMENY.PL sp. z o.o.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pot.gov.pl

DOMENY.PL sp. z o.o

Organization: DOMENY.PL sp. z o.o
State / Province: Małopolskie
Locality: Kraków
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:6d:6f:1e:22:e9:e9:28:a4:16:13:62:c1:91:81:c7
Serial Number (int): 120198733713338876647179517172976288199
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 79:3d:5d:70:28:7d:c9:30:fc:89:49:68:ad:43:56:d3:c4:4b:4d:6c
AuthorityKeyId: 56:34:05:bf:44:72:56:3d:96:29:d3:ff:31:7b:ef:9d:45:49:39:a9

Fingerprint (sha1): c9:3b:d2:2b:1f:41:ec:cf:86:39:40:3f:7e:31:9c:9d:81:81:2f:57
Fingerprint (sha256): 17:10:70:24:80:94:ec:f5:20:86:71:7a:ae:fe:47:ae:14:f2:94:c9:ca:8e:e2:41:87:92:51:3e:a5:6b:78:ec

Issuing Certificate URL: http://crt.usertrust.com/DOMENYSSLDVCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/DOMENYSSLDVCertificationAuthority.crl

Check the revocation status for certificate *.pot.gov.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pot.gov.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pot.gov.pl
pot.gov.pl

Other certificates including the domain name pot.gov.pl

(limited to 100 certificates)
*.pot.gov.pl
maps.pot.gov.pl
*.pot.gov.pl
en.fotopolska.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
certyfikacja-it.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
certyfikat.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
poczta.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
bezpiecznyobiekt.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
eden.konkurs.pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl

Certificate

The complete raw certificate details for *.pot.gov.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqBYAVUi8RjDy+jZwzbg
ruKlEs1QowfrIKKzYu4iztakqChnajhM6UjWFoe/5fNIjjnjWEvLkC730BbylMGJ
OrmVbGTGvy8OLwD/rA7jZ8uG+TVnL0WdbRVhb5Su24Agc6xmSpTDR/reSVIT4jr/
ZPi9yrI9mO1OqoqW3TuWJnT8lVU4HMibYXKoPtDkP2Vx9ql8KzwjyO6QK426Nfug
Des5FW9n4FFTXGXwBoVC1EkuH1YpnadmvZogfEKrczAE9S9mxdYyKOCpf5jUuZj3
H9hYSIWYHBAO96I1p/5DYFllo2Xoh+OQVuFT+423ejrxvFx42P1QBHil9zCft6MV
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120198733713338876647179517172976288199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Małopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kraków'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY.PL sp. z o.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY SSL DV Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pot.gov.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23054439963895892830583807238853626989442029939742274876746036613451766865582549047218697859039756938603460047622282119834664467321078189999342346037655149920701112616697341305796643861558412148193765043483100193548232909302059251420415349784784615030919188635976489311823345028919475535715022355657749475767517840118589995573196364827692671294950987522366401978917206355449038020286190819616976222832937628029612511906918756169384118581003787312870616284592128572679284302418760214620992951798640616100922644258480291129153052933814073884453140939821596168978653374512494043347290990255285149434931613216411580830999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 563405bf4472563d9629d3ff317bef9d454939a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							793d5d70287dc930fc894968ad4356d3c44b4d6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38648.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/DOMENYSSLDVCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/DOMENYSSLDVCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pot.gov.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pot.gov.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000016f8f933dde0000040300483046022100f05a71a4ef62567fce04b18792b68e8a02f7c187dd1aa32020700a7f8d1ec1630221008cf7334249b68815067195b2f58609ead5408bd5d4d25df6a9a30737efa7f2540076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016f8f933dc6000004030047304502201495235a67ba13fdfe7960471bba2c47798748c190b9e831fd56d34c8b5ac8e00221008b61f84a175ae77be28922810e149ec1ebe5574da21862f3437f0b45e1ca9005
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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