*.pot.gov.pl

Issued by DOMENY SSL DV Certification Authority

About this certificate

This digital certificate with serial number 17:f9:81:c4:b9:64:7d:a8:d4:b6:9d:30:25:27:da:99 was issued on by DOMENY.PL sp. z o.o.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pot.gov.pl,OU=Domain Control Validated+OU=Provided by DOMENY.PL sp. z o.o.+OU=Domeny.pl SuperFAST Wildcard SSL

DOMENY.PL sp. z o.o

Organization: DOMENY.PL sp. z o.o
State / Province: Małopolskie
Locality: Kraków
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 17:f9:81:c4:b9:64:7d:a8:d4:b6:9d:30:25:27:da:99
Serial Number (int): 31867757837763173826687788434774809241
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 52:c2:e4:6f:6d:83:4d:61:84:76:dd:ab:f8:0e:0d:cb:c3:36:1b:76
AuthorityKeyId: 56:34:05:bf:44:72:56:3d:96:29:d3:ff:31:7b:ef:9d:45:49:39:a9

Fingerprint (sha1): 5d:ce:66:8e:a2:fd:d8:e7:a4:5d:f7:26:24:99:ae:97:ac:50:56:17
Fingerprint (sha256): 34:ad:df:33:8a:81:af:d1:31:33:6e:1a:0a:30:7c:60:e1:69:af:3e:8d:30:25:b9:b8:69:74:be:d1:e0:8d:4f

Issuing Certificate URL: http://crt.usertrust.com/DOMENYSSLDVCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/DOMENYSSLDVCertificationAuthority.crl

Check the revocation status for certificate *.pot.gov.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pot.gov.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pot.gov.pl
pot.gov.pl

Other certificates including the domain name pot.gov.pl

(limited to 100 certificates)
*.pot.gov.pl
maps.pot.gov.pl
*.pot.gov.pl
en.fotopolska.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
certyfikacja-it.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
certyfikat.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
poczta.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
bezpiecznyobiekt.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
eden.konkurs.pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl

Certificate

The complete raw certificate details for *.pot.gov.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGmIH46ZsP2/BZS7FkbN
iHSGCuszV7Kpgdea6t8Tomp1CPQJSTadnQDicBhKfXDOCGzz8m8pNl4ivK0VN9+5
UANkHNfKiXJgpFWjfNrte32EGxGZuD0XMOZ1bjt8X/1SfYXQatfvJV7v0bkIJGYh
/21tJIwAx1tJS4xoOW49Q/+hVFj3RslEeG1hrPvk8e7IObddOjTfIqj1m0CZRz3B
3Y6TOidG567CUSheSGyc7OccU/3lBL/O+Zy+3A3MQBUrSzjNDmh0l2j34CSnlTPF
J3GtUZ1UWq3xVfcI22pxh8SvjXBKSH91vY/acVzyEV/QqM/QLJiVoxh8aheSieWu
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31867757837763173826687788434774809241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Małopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kraków'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY.PL sp. z o.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY SSL DV Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by DOMENY.PL sp. z o.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domeny.pl SuperFAST Wildcard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pot.gov.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19240261991198268619567789186581634590479401110154267835097866754804818376369403164272216593788002730431910441850563912834540885777392688768330501137334982013680284542857130883060756166833403673545327189557258325385415894566838518187778541959795416557907055585084129530288377739440113736338180422573906700046679963067277826394827110066905016433742357372512029524849189279221784062543364502509365584148195113602881388260212881071479557559863987880045403179922267591229952151115199664133606799281997249294245567186008357549902140423684485329050509135630636076320727256911626710691002306279688022819590394460260910083603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 563405bf4472563d9629d3ff317bef9d454939a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52c2e46f6d834d618476ddabf80e0dcbc3361b76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38648.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/DOMENYSSLDVCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/DOMENYSSLDVCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pot.gov.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pot.gov.pl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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