koncertdlaswns.velvelconsulting.pl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 64:a1:16:6f:2d:a9:3e:f1:f8:8f:d1:50:49:de:f4:9c was issued on by Sectigo Limited.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=koncertdlaswns.velvelconsulting.pl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 64:a1:16:6f:2d:a9:3e:f1:f8:8f:d1:50:49:de:f4:9c
Serial Number (int): 133759214394184445114438340150934041756
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5b:43:18:f5:18:34:4c:66:25:d3:7b:25:bf:3f:6f:69:8f:24:66:92
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): c8:70:b3:5d:52:9a:86:c7:4d:90:fe:52:cd:96:38:fc:3e:e4:c2:e9
Fingerprint (sha256): 1e:7a:80:98:96:3e:d1:79:01:02:cb:ad:d5:83:b9:89:7b:f7:c5:bb:47:ab:13:5a:ba:21:e2:c2:e1:a2:b9:94

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate koncertdlaswns.velvelconsulting.pl

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for koncertdlaswns.velvelconsulting.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

koncertdlaswns.velvelconsulting.pl
spotkaniezjenifer.velvelconsulting.pl
velvelconsulting.pl
www.koncertdlaswns.velvelconsulting.pl
www.spotkaniezjenifer.velvelconsulting.pl
www.velvelconsulting.pl
www.wystawawsejmie.velvelconsulting.pl
www.wystawawtempel.velvelconsulting.pl
wystawawsejmie.velvelconsulting.pl
wystawawtempel.velvelconsulting.pl

Other certificates including the domain name velvelconsulting.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for koncertdlaswns.velvelconsulting.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubyqEtE46q2cTyFngPRv
7uJXIbwKSSWqRCpnDwhEZxOFuVLqlv//ShTw3RjhZ3+8WtCb+GDPojDi9PY7vWRq
fE4So+1/8Ms4ijYXawKgSmncD9lBFiUyFnPBOIHYdgpBcORyq7YwAFfOGj/3/4w3
dgWMemGh6gnGi9TzaiSSiercEafKolNyN+QuaGA2ZnPbC16gAl0/XCzEeL57bhQx
/mMo/wOrDC+/IVsXd2GoSSta28A7nIU6iosCtZ9cM5WUPUq7G7NcgMOY0qSgZ8pd
3HyYmlnZsDEPxLg7KgxBt9ofs5nUjxYGk/iow61XNqKceVd8tTNLbu4Lbs7jdTuV
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133759214394184445114438340150934041756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'koncertdlaswns.velvelconsulting.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23447120276942199904539760331753262728537898906105507550416892299656903697190694227787349704201603523691968033987854339209731913214577202623416765755506239502966004560836423529245858787838155728489423583827430795521982077127343302643382889686313188774530294818410871753469628224880055409610049363894831824365958923083162022193872659737617108297256557355879111716125930908548068521812305535368965444616984108814703633610154279613951085258928653506016161254909094989245526556369750634922455390491717176793351162719119224689738744808901107865158994138832394759934048644052558452695047939968799313161286978327010246104417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b4318f518344c6625d37b25bf3f6f698f246692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koncertdlaswns.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotkaniezjenifer.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koncertdlaswns.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotkaniezjenifer.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wystawawsejmie.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wystawawtempel.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wystawawsejmie.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wystawawtempel.velvelconsulting.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a004fb478000004030047304502202acfa1e2e8371075498ea4e851f8f7d8e3f2b45f61da19e98f96a685c3f1c9fa022100d68b8ecf2444602f9c7c1e40ecf16b8f65ecae2618ecea0b7c0b4e3feeef2a89007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a004fb4800000040300473045022100ba1fd4108f4ba1a2e01e8def0b00da71d8fb228d7cfa6a1cef730b87a1d200c0022063955e211e789561e6df7fa90fe999f6412a710f5cafc73ea389ba7850969ecc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003993a383011d00387a4ec20aa653a1a15e93945ee4f2dbffcf0f3b14448912a2a46695234560eda2fa15bd3f74ace796efda75ba0bf8548ec9673bb83df85452cc8119a11f531ad391b87fa75e2ea5fdbc3b129bef763ab7f69c17a9d9728be884d7b172f2b8087598c9f77b362d7188757b0f327084413a686c1dcea062d42ad083a5a4eefcb6022047d6038d7ca57828499a989d0d0377758ed5344009b5c0878cd3954a3b2cc1f7834f3c83bae1e5bf4a2fa13f55071e7d98c1b286c9f60b08bf8b79aa35dc5d29b0095723d423c889f0fdd03e7289d0a2fc7cae76ff75e245cbaaaf14fd00f50a4a68aae6ba9717b0bfcc93dfd6801bf13fe45e3e341e32