indico2.conference4me.psnc.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:21:93:2f:66:ce:e5:f0:4b:67:5e:dc:2b:54:e2:74:57 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=indico2.conference4me.psnc.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:21:93:2f:66:ce:e5:f0:4b:67:5e:dc:2b:54:e2:74:57
Serial Number (int): 280097016728850018112702793053750941611095
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 67:0e:f9:dc:41:16:cf:01:b9:00:92:27:7a:c3:cd:3c:25:6c:46:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:93:a5:71:2a:0d:9e:dc:c9:2b:27:1f:04:60:81:b0:98:71:20:e3
Fingerprint (sha256): 29:90:7e:db:cb:50:48:69:00:eb:a4:ea:2f:29:3c:d3:8a:86:bb:35:f6:d0:1a:aa:42:0a:6e:86:4c:5c:50:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate indico2.conference4me.psnc.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indico2.conference4me.psnc.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indico2.conference4me.psnc.pl

Other certificates including the domain name psnc.pl

(limited to 100 certificates)
pracelab-sso.apps.paas.psnc.pl
eurocase2017.psnc.pl
lonicera.man.poznan.pl
www.pcss.pl
conference4me.psnc.pl
test-vm5.vph.psnc.pl
nogalia.man.poznan.pl
indico.conference4me.psnc.pl
helps.psnc.pl
indico.conference4me.psnc.pl
box.psnc.pl
demo.dl.psnc.pl
indico2.conference4me.psnc.pl
pbl-test.dl.psnc.pl
pbl.dl.psnc.pl
www.pogoda.man.poznan.pl
hicss.psnc.pl
meet.psnc.pl
demo.storage.psnc.pl
nagios.paas.psnc.pl
pay.psnc.pl
futurelabs.psnc.pl
registry-console.apps.paas.psnc.pl
indico.conference4me.psnc.pl
nogalia.man.poznan.pl
*.apps.paas.psnc.pl
docs.psnc.pl
support.pcss.pl
indico.conference4me.psnc.pl
dynafed1.indigo.psnc.pl
box.psnc.pl
waitsafe-mqtt.apps.paas-dev.psnc.pl
rotha.dlibra.psnc.pl
box.everest.psnc.pl
pbl.dl.psnc.pl
box.psnc.pl
support.pcss.pl
indico2.conference4me.psnc.pl
pogoda.man.poznan.pl
box.psnc.pl
lta-download.lofar.psnc.pl
lib.psnc.pl
dynafed3.indigo.psnc.pl
nogalia.man.poznan.pl
dl.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
support.pcss.pl
dingo.psnc.pl
mir.dlibra.psnc.pl
mail.mic.psnc.pl
cdn.classroom.psnc.pl
eurocase2017.psnc.pl
sentry.apps.psnc.pl
dingo.psnc.pl
vuln-mgmt.security.psnc.pl
lonicera.man.poznan.pl
edusafe.psnc.pl
www.pcss.pl
indico2.conference4me.psnc.pl
indico.conference4me.psnc.pl
*.apps.paas.psnc.pl
conference4me.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
net-assets-mgmt.security.psnc.pl
box.psnc.pl
conference4me.psnc.pl
iiif.ecloud.psnc.pl
ci.nds.psnc.pl
box.everest.psnc.pl
dl.psnc.pl
dynafed2.indigo.psnc.pl
box.psnc.pl
lonicera.man.poznan.pl
oneprovider.indigo.psnc.pl
repokb.dlibra.psnc.pl
meet.psnc.pl
nogalia.man.poznan.pl
scenemanagement.test.ksi.apps.psnc.pl
qcg-monitoring.man.poznan.pl
nds.psnc.pl
box.psnc.pl
repository2.netradio.psnc.pl
dingo.psnc.pl
box.psnc.pl
login.nebi.psnc.pl
pbl.dlibra.psnc.pl
pbl.dl.psnc.pl
psnc.pl
lonicera.man.poznan.pl
siem.security.psnc.pl
demo.dl.psnc.pl
meet.psnc.pl
weekly.psnc.pl
indico.conference4me.psnc.pl
helps.psnc.pl
*.apps.paas-dev.psnc.pl
sso.everest.psnc.pl
indico.conference4me.psnc.pl

Certificate

The complete raw certificate details for indico2.conference4me.psnc.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280097016728850018112702793053750941611095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 13:57:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 13:57:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indico2.conference4me.psnc.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723740801698175807702439347243956684462958978616279484528922174487654079691923874361625171717021303451796552733599677921481792131861039904645090112967732591805304384061436048560207963584983876573524691464189662810992427070300788463307044944308729961936550720847207716819948955394889331636138205841429503724760178826291377790121042696090845948850182118546915310972346932736113487678819081889038230093151323140160265637499946086124624387362533737557192888672982927504726405621275474983282884799918723296947045665357881178632317097205890347417216602745499636635348353692672800744791385907638827012359997793763752074942612683701614698230621902049002004175243084819846843888653325669639137554406278769774494004220681138086761238019804152000059892974662719993631694894971953586757616426047396321962441185498532421201810000989570226890082529181629742539898735693762940372203854942123371292902864811190034515844217759912320839527094903670471667901749336092321589459091017445157673018810892574741859649694444662984155461153402505650330890465777576425156825237004204336764736439612395724598493975987174619553769040504434387834316087399943708146695230761833116917553385247704202621538358781597368032033979752173747895940508188117238657697352893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							670ef9dc4116cf01b90092277ac3cd3c256c46f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indico2.conference4me.psnc.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de9abf3300000040300483046022100ffc4d1024576527b315c635fc0ed0c2cacaea8067e2fd10027bb7d8a1713341d022100be43a4815667f38521d09a25915b075dab5cb222bd4d85b439d8d745714b45d9007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de9abf329000004030047304502204f90c7367136ba3881c87c8238b73be0e93b201432986b4f0422d1a01674bcb9022100fc1bcb375e27556c7fd04882055dc7d9b10e6f6d53891af6ad2fcdfc58f70dea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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