jagusz.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:54:01:94:41:c4:b6:f5:3f:b3:47:ef:f4:0b:64:fc:7b:38 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jagusz.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:01:94:41:c4:b6:f5:3f:b3:47:ef:f4:0b:64:fc:7b:38
Serial Number (int): 377034961570272632437364908706485405252408
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:67:13:9e:61:1f:20:72:76:44:e6:59:31:6b:20:ce:74:1e:57:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:ed:3e:c6:08:51:cb:48:26:55:31:b8:71:87:17:c8:93:48:8e:70
Fingerprint (sha256): 33:15:12:d7:62:9b:7e:cf:14:2f:47:8f:a9:e4:76:84:e5:4e:dc:d9:42:8b:d8:d3:d1:44:8e:2e:89:44:a4:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jagusz.pl

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jagusz.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.jagusz.pl
blog.jagusz.pl
it.jagusz.pl
jagusz.pl
karolina.jagusz.pl
labs.jagusz.pl
perajet.jagusz.pl
pozyczka.jagusz.pl
quiz.jagusz.pl
remote.jagusz.pl
shockit.jagusz.pl
sierra.jagusz.pl
ssp.jagusz.pl
tomasz.jagusz.pl
www.api.jagusz.pl
www.it.jagusz.pl
www.jagusz.pl
www.karolina.jagusz.pl
www.perajet.jagusz.pl
www.pozyczka.jagusz.pl
www.quiz.jagusz.pl
www.shockit.jagusz.pl
www.sierra.jagusz.pl
www.yolocar.jagusz.pl
yolocar.jagusz.pl

Other certificates including the domain name jagusz.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for jagusz.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdIejWw5EUzNkN2Y2VSk
pI4fTr9VFYbfYS5NRluwNML2IIvhl0e8eJwjXyszPwiBOigBLKuvSo1n5uglQ/G0
TZj0T9eLR3jd5HuOyjsttK3fmdSCB2nogXeE6PxHrYuCaLBpP47OYbwL/fj5aVNk
RcFSAo7UyzqwAGjwFKYFjFY5ElBX1IwUNFpL3oQjXFXWNX8Fml0DTDs+GHQefInb
a26w4Mdv5tpAWQilVEgJ3ylpFkO45k3/BPK6PEb412vR48ZjdHG9JFkW1h6v9uDN
49aAKyKVo3X9S6nFdS/RJGKaiS6FATd/jTC9n59McAqevgaZA+yRMgmL7hdP1Qw9
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377034961570272632437364908706485405252408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 21:02:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 21:02:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jagusz.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21942840470100422766631467571876257213753214252467761343971779416134647730157067578204246455795991548588444212517025536271947001059890923443184101600330635752999987607869223796251665204136408013877070605690119255834950340646166174506270488959297807909585348163458688166807431835434325806334343280206313805399070469085846687159168562669536436514425282390262140608760847901311591172035715331056343614471391847559033004217487358844825340940957569651896927380724293781315229032816214183706655059426453814036050516192792486234569721439613622326669325414161328632162189769495049325928437805766296306921544948322774608002543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d67139e611f20727644e659316b20ce741e57f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (469 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karolina.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perajet.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pozyczka.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiz.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shockit.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierra.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomasz.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karolina.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perajet.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pozyczka.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quiz.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shockit.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sierra.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yolocar.jagusz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolocar.jagusz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ed2eff43c0000040300483046022100cecaa095307031d4d452c7598a6d7dea02093f95e5f8ebe44e2c7bcbfc8fec9c0221009a6c65be8c6f12370a34d6a605992a01d805f88c4effaa06ec57058b38866221007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed2eff4300000040300473045022100a1c5dc219585cbd68a6c69715e1093de5348554039c9dc760c6ca63c86d06bf502202030ce1eb2c2099a7a9ae02389a5b1bac193e32b227bd7a10e0752e3b38a107b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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