bfc.pl
Issued by R3
About this certificate
This digital certificate with serial number 03:d3:66:40:8c:20:db:fd:57:fb:8e:b7:57:78:38:a8:09:b4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=bfc.pl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:d3:66:40:8c:20:db:fd:57:fb:8e:b7:57:78:38:a8:09:b4Serial Number (int): 333272353620308492581208010731063471507892
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e9:49:a6:a3:41:66:dd:0d:e6:30:04:ba:17:db:8d:d8:fd:2a:91:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a3:fc:8e:17:88:83:78:8c:5a:08:3e:84:6c:37:f4:57:1c:f7:11:88
Fingerprint (sha256): 1b:ed:09:13:95:a2:a6:34:a8:47:c4:8e:43:28:a3:ca:a4:1d:9f:2e:54:53:81:fe:93:73:e3:eb:f8:bf:bb:b3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate bfc.pl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bfc.pl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bfc.pl
www.bfc.pl
www.bfc.pl
Other certificates including the domain name bfc.pl
(limited to 100 certificates)
www.bfc.pl
mariniere.petit-bateau.fr
bfc.pl
bfc.pl
admin.bfc.pl
www.bfc.pl
www.wygoda.net
ilariaberetta.com
face.fancard.me
sobraobra.com
bfc.pl
www.naqliat.app
link.myda.info
bfc.pl
www.bfc.pl
o-hire.com
vynso.com
aplikacja.bfc.pl
moniquejulie-peintre.fr
www.bfc.pl
waiterboard.dinify.app
www.charlies.app
crm.bfc.pl
www.questepersone.it
sobraobra.com
bfc.pl
admin.bfc.pl
admin.bfc.pl
aplikacja.bfc.pl
admin.bfc.pl
3melon.com
bfc.eventtravel.app
crm.bfc.pl
ek.klesia.app
admin.bfc.pl
admin.bfc.pl
smartlabel.uk
www.bfc.pl
bfc.pl
bfc.pl
admin.bfc.pl
face.fancard.me
app.eureka.academy
www.lxdesign.no
ims.deltateknik.co.id
www.bfc.pl
mariniere.petit-bateau.fr
bfc.pl
bfc.pl
admin.bfc.pl
www.bfc.pl
www.wygoda.net
ilariaberetta.com
face.fancard.me
sobraobra.com
bfc.pl
www.naqliat.app
link.myda.info
bfc.pl
www.bfc.pl
o-hire.com
vynso.com
aplikacja.bfc.pl
moniquejulie-peintre.fr
www.bfc.pl
waiterboard.dinify.app
www.charlies.app
crm.bfc.pl
www.questepersone.it
sobraobra.com
bfc.pl
admin.bfc.pl
admin.bfc.pl
aplikacja.bfc.pl
admin.bfc.pl
3melon.com
bfc.eventtravel.app
crm.bfc.pl
ek.klesia.app
admin.bfc.pl
admin.bfc.pl
smartlabel.uk
www.bfc.pl
bfc.pl
bfc.pl
admin.bfc.pl
face.fancard.me
app.eureka.academy
www.lxdesign.no
ims.deltateknik.co.id
www.bfc.pl
Certificate
The complete raw certificate details for bfc.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgISA9NmQIwg2/1X+463V3g4qAm0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDkxODI1NDRaFw0yNDA4MDcxODI1NDNaMBExDzANBgNVBAMT BmJmYy5wbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIog3m+NNPo6 DjYSxE4S8YxixJO0kCAW9Opzs/o9eZyb0k3j8JF1H/yBz3l1VLaAb98Cxmj6SE9i 4kf1O9cAbCVhjnoY5xavbhHiVgf/kvbgPrC7KgMjOTPd6HeSYZnQSGdGIZs1s/RW KRL4cPug8+5wEEOZmelMm6eUJOH2uYy2LBAYY/lFD7O2sKs+GfEnu7kDHLAueJlj qXKPCKZu1TDOzQc6FT2/tr4nLWTgz2lMYt6ozfpHLB0Mtr/Rc3Kz+u1hHMQinyir UzJ+7x2YPRaCXaSqvBho0ktm7PiR4awTk0RB4O5jZDZU0dhnFbskvYwVlJpREMjk 9p6HkN/p2aUCAwEAAaOCAhQwggIQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU6Umm o0Fm3Q3mMAS6F9uN2P0qkVUwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHQYDVR0R BBYwFIIGYmZjLnBsggp3d3cuYmZjLnBsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7D UUhZRnEftZsAAAGPXtGUZAAABAMARzBFAiB8bcEHXZxOJiQncleAmsizEWANrAgR q38letpZyxIu1QIhAJZfZdtZTLz8ttscJGiFhUH5/252TSvsYkdA8AXR9ct1AHYA SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGPXtGbjgAABAMARzBF AiBri0UQgz5dm0fqCteNTfqU2w6MTjfsz0RWRoz/Vn7+igIhAIjNxdzijZG8aC24 72ehmEg4dKrgwuupW+5Qb8TJvI/CMA0GCSqGSIb3DQEBCwUAA4IBAQAFevbOeAUv Q1l4z0nbdHr+kdDD8ivsWO6Sph9o4zUHJt5rWTA5gACHiqMMMcl+QKtKmAWujymK s04LTz3fwxWSM62opfJFyI6Ok5NbB9DnB7d7UlRHId2NiFNsGp8H+7LIB9V9zjN+ C56tMSL2DJ85qf3yqQCdvLc04YfB7vF9eu1HbPoPZPRUmMm+dE4lA8QJ7qEEyA7O 8595BrOW6htnFIFfg8A3s7QY+32wdgprCXUji6IrQg57Cjyi8ShcRyvMEL5sanmQ 6vGFgI15q/gX0nVwZybtZaA7WGjI63CZJKzw/i5EFcbn5npzeZQxPCm0s6cg9oml zWmVu6vKt/sK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiDeb400+joONhLEThLx jGLEk7SQIBb06nOz+j15nJvSTePwkXUf/IHPeXVUtoBv3wLGaPpIT2LiR/U71wBs JWGOehjnFq9uEeJWB/+S9uA+sLsqAyM5M93od5JhmdBIZ0YhmzWz9FYpEvhw+6Dz 7nAQQ5mZ6Uybp5Qk4fa5jLYsEBhj+UUPs7awqz4Z8Se7uQMcsC54mWOpco8Ipm7V MM7NBzoVPb+2victZODPaUxi3qjN+kcsHQy2v9FzcrP67WEcxCKfKKtTMn7vHZg9 FoJdpKq8GGjSS2bs+JHhrBOTREHg7mNkNlTR2GcVuyS9jBWUmlEQyOT2noeQ3+nZ pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333272353620308492581208010731063471507892 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 18:25:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 18:25:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bfc.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17437094338888530075839138813650504602660221083969178444232903509970258976132804534174843687766609432576935321926624690027554872755714594069459411401647692060747787436661049869330768340140516569546980239695932757956994812856563348004816698496154564627399062218542723097959559844923199114591767394863547307072295296493956146396820942109721508305380373829176227836739548355141069057524220991055886995871920796910527300210814780715691192221715403703273448093920958600954642007905437728433900400607301164464080032427658450912978901135189083435303146426126261771832168433426470105934667666815232127308735051079086399674789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e949a6a34166dd0de63004ba17db8dd8fd2a9155 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfc.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfc.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f5ed19464000004030047304502207c6dc1075d9c4e2624277257809ac8b311600dac0811ab7f257ada59cb122ed5022100965f65db594cbcfcb6db1c2468858541f9ff6e764d2bec624740f005d1f5cb7500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5ed19b8e000004030047304502206b8b4510833e5d9b47ea0ad78d4dfa94db0e8c4e37eccf4456468cff567efe8a02210088cdc5dce28d91bc682db8ef67a198483874aae0c2eba95bee506fc4c9bc8fc2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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