*.prz.edu.pl

- Politechnika Rzeszowska im. Ignacego Łukasiewicza -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 08:0e:77:35:2d:a0:82:d2:37:fe:ac:33:4d:21:08:c1 was issued on by TERENA.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Politechnika Rzeszowska im. Ignacego Łukasiewicza

Organization: Politechnika Rzeszowska im. Ignacego Łukasiewicza
Organization unit: Uczelniana Sieć Komputerowa
State / Province: podkarpackie
Locality: Rzeszów
Country: PL

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:0e:77:35:2d:a0:82:d2:37:fe:ac:33:4d:21:08:c1
Serial Number (int): 10708933942255133733412974557543860417
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:b0:ff:13:08:c3:1c:08:ac:9d:99:63:8a:e6:17:1a:f6:89:79:cf
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 92:3e:13:bd:0c:e1:e7:3b:c0:5f:a7:97:bf:af:34:da:7f:34:8e:78
Fingerprint (sha256): 23:be:d9:9e:b1:33:55:89:b8:55:fe:16:74:71:8f:74:4d:9f:39:63:4c:82:9b:ba:bc:61:af:e7:f2:59:93:07

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.prz.edu.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prz.edu.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prz.edu.pl
prz.edu.pl

Other certificates including the domain name prz.edu.pl

(limited to 100 certificates)
pawel.prz.edu.pl
ketling.prz.edu.pl
katalog.prz.edu.pl
sbp.prz.edu.pl
*.portal.prz.edu.pl
kia.prz.edu.pl
ketling.prz.edu.pl
jerzy.prz.edu.pl
*.w.prz.edu.pl
obsada.prz.edu.pl
klik.prz.edu.pl
aszcz.strony.prz.edu.pl
et08.prz.edu.pl
forum.stud.prz.edu.pl
*.w.prz.edu.pl
kod.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.portal.prz.edu.pl
usosadm2.prz.edu.pl
nwiki.prz.edu.pl
pawel.prz.edu.pl
kia.prz.edu.pl
aszcz.strony.prz.edu.pl
*.sd.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
ketling.prz.edu.pl
konf.sasit.prz.edu.pl
legitymacje.prz.edu.pl
srs.prz.edu.pl
sprawozdania.kia.prz.edu.pl
stud.prz.edu.pl
biurokarier.prz.edu.pl
power.prz.edu.pl
usosapps.prz.edu.pl
ketling.prz.edu.pl
power.prz.edu.pl
graduacjawz.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
praktyki-weii.prz.edu.pl
graduacjawz.prz.edu.pl
power.prz.edu.pl
*.w.prz.edu.pl
graduacjawz.prz.edu.pl
apd.prz.edu.pl
power.prz.edu.pl
jerzy.prz.edu.pl
power.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
*.w.prz.edu.pl
test.birt.prz.edu.pl
*.kia.prz.edu.pl
*.wbisia.prz.edu.pl
journals.prz.edu.pl
sprawozdania.kia.prz.edu.pl
ketling.prz.edu.pl
klik.prz.edu.pl
usosadm.prz.edu.pl
kni.prz.edu.pl
test.srs.prz.edu.pl
kni.prz.edu.pl
test.usos.prz.edu.pl
aszcz.strony.prz.edu.pl
stud.prz.edu.pl
test.usosapps.prz.edu.pl
krk.prz.edu.pl
biurokarier.prz.edu.pl
graduacjawz.prz.edu.pl
test.usosapps.prz.edu.pl
forum.stud.prz.edu.pl
ketling.prz.edu.pl
*.prz.edu.pl
biurokarier.prz.edu.pl
konf.sasit.prz.edu.pl
obsada.prz.edu.pl
stud.prz.edu.pl
graduacjawz.prz.edu.pl
aszcz.strony.prz.edu.pl
ankieter.prz.edu.pl
office.kia.prz.edu.pl
jerzy.prz.edu.pl
gw-admin.prz.edu.pl
usos.prz.edu.pl
vpn.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
biurokarier.prz.edu.pl
usosapps.prz.edu.pl
oc.prz.edu.pl
kni.prz.edu.pl
test.usosadm.prz.edu.pl
imap.kia.prz.edu.pl
usosadm2.prz.edu.pl
podyplomowe.weii.prz.edu.pl
jerzy.prz.edu.pl
usos.prz.edu.pl

Certificate

The complete raw certificate details for *.prz.edu.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10708933942255133733412974557543860417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podkarpackie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rzeszów'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Politechnika Rzeszowska im. Ignacego Łukasiewicza'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Uczelniana Sieć Komputerowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prz.edu.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687981014772338384574974111984829544904742771662828215706160710053632663654282154638109495999163650773161307413250639746062976079202966838156669802546076527161365543445266638554199520638586870108088019008598555282427246531414177752552088184352444700741872956207599336910711959680037889169991397469641272886042010515263571851998567544244296251081255236967638975570779782601925803028001900598855140803676631944676402468970694812998403798210535535229850587497063259171886078832845265296239677983912706947158321239659212383216978961465131634827071281619510705564935869856956440085153681144874786539983548107711003430504459559923025151956811414447421963749005332951999314893426425415740545551593466246119591586377262855802966607639276879370698398318146386228171988583490648629222583564200379342825027861265213800998253237136846122731145711151691525342738877035669539171851184871351941940333662705672839620472922359140028504251247074873109564665524330803856314479953737036544459800294552542346634983432287796728498490276299865355254909591112423536045690807540546204355787375887393213733293790597094450786829284839099660824561013435040536644413752893257291040121333492603960845614794398861884266313493151391286723901161067455580130386716703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31b0ff1308c31c08ac9d99638ae6171af68979cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prz.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prz.edu.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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