jagusz.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:78:18:ef:9c:b6:07:7e:c4:1c:d9:bc:58:0c:02:00:61 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jagusz.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:78:18:ef:9c:b6:07:7e:c4:1c:d9:bc:58:0c:02:00:61
Serial Number (int): 330573815114761866721426793068102244499553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:58:26:27:f7:74:6d:18:42:f7:91:74:52:e7:3f:1c:85:c5:5b:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:d8:ad:f9:12:df:ab:e4:81:04:aa:60:3b:f8:1f:c3:5d:14:85:69
Fingerprint (sha256): 2d:13:1a:a0:2a:1a:79:54:12:53:bc:cb:2f:52:18:1c:68:eb:70:c9:8e:4d:c6:3a:5e:36:26:b4:a6:bb:ba:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jagusz.pl

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jagusz.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.jagusz.pl
blog.jagusz.pl
jagusz.pl
karolina.jagusz.pl
labs.jagusz.pl
ovh.jagusz.pl
perajet.jagusz.pl
quiz.jagusz.pl
remote.jagusz.pl
shockit.jagusz.pl
sierra.jagusz.pl
ssp.jagusz.pl
tomasz.jagusz.pl
www.api.jagusz.pl
www.jagusz.pl
www.karolina.jagusz.pl
www.ovh.jagusz.pl
www.perajet.jagusz.pl
www.quiz.jagusz.pl
www.shockit.jagusz.pl
www.sierra.jagusz.pl
www.yolocar.jagusz.pl
yolocar.jagusz.pl

Other certificates including the domain name jagusz.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for jagusz.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/TBKupi1qQ1COYgaPk3K
4UJuo5gBFojo9IXr8XmLe2cfOpSiFJ0+HkXFbi6fsGf63HgDnPgo0bCpntB0YVF7
AOcBobEGeO+v7gsk3w0ihPLldzwFlD+5e9fA7LrZlS32D9VAlPUI4PWjpGYDi5yg
rpuGGHOXapKRPUxaEPGQ3MkD3m4v14OOgw8NhftNCqZ8EVysGd3utq74K6Aqsy0r
J2rDe6ot9wQ6Vfg02WQR1FzIsa/0z8H4Bfxus/Ub3EFjl2718eZAWETCbBoz7vDq
mNvB+np5y9H+kbGuf9hS8evzD6Tj/9tU0skKtIV7J8SZwa0t+MZbxEagrYq+fhjz
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330573815114761866721426793068102244499553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 12:54:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 12:54:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jagusz.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31962104784650209199564665814504295896450683224678629997961421480043212395247802934627492392082129127178782036303618185256863779918495072413017903930179727628898502757954528912922263826057159865932286740910929795212073725442860534314223380813400854571632523413336163285567451180321662981089595056382428316471828304117070036640770061476595725843465656644472266131393295043120090207648100524235702204936083540703206854071209004208346714242714298408099606845361780260079401481507359190250297147919748805510395505613082358282100063706271866212732613554472519066646393053917589709231861170266085405766405462038920706978631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10582627f7746d1842f7917452e73f1c85c55ba4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (427 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karolina.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovh.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perajet.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shockit.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierra.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomasz.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karolina.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovh.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perajet.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quiz.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockit.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierra.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yolocar.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolocar.jagusz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016efa63c2d8000004030048304602210097b3501e67c73239b556e0fcc727c02c3106f1f83cc1ced19d52827745ad5fc8022100c0b84878797f4c6daedb5f4becc9eb919c01afe61eba0f609dd15bccada93df300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016efa63c309000004030047304502210090af218349204a19f5e2586fcbf1b6135723d59e40a9996e1db1b343d6da7f7902207a67bbeb364fca4f9fd09de4091d4992d9aa048424cbf3a42fe4d5c32ee6eeca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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