lajtit.pl

Issued by Certyfikat SSL

About this certificate

This digital certificate with serial number 12:56:4e:72:dd:b0:51:6b:27:1d:d7:dd:9d:4e:fb:ea was issued on by home.pl S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lajtit.pl,C=PL

home.pl S.A.

Organization: home.pl S.A.
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 12:56:4e:72:dd:b0:51:6b:27:1d:d7:dd:9d:4e:fb:ea
Serial Number (int): 24374232582531434947824512858709752810
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 14:c6:f5:1c:7f:5d:dd:82:9b:b6:97:fc:16:15:25:82:f1:e3:21:60
AuthorityKeyId: 3d:91:b6:cc:11:7b:eb:e4:66:11:ac:d2:d2:07:cb:a9:a4:80:73:31

Fingerprint (sha1): ad:65:ff:bf:01:02:c9:e6:fb:b7:6f:84:32:6f:48:74:3e:87:0f:66
Fingerprint (sha256): 35:d6:1e:35:bd:77:7f:f7:f4:53:f4:c9:3f:04:5d:e7:b9:2f:36:bb:7e:1a:81:43:3b:ec:a4:5b:8f:bd:26:e2

Issuing Certificate URL: http://repository.certum.pl/hsha2.cer

Revocation information

OCSP Server: http://h.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/hsha2.crl

Check the revocation status for certificate lajtit.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lajtit.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lajtit.pl
www.lajtit.pl

Other certificates including the domain name lajtit.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for lajtit.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24374232582531434947824512858709752810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'home.pl S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certyfikat SSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 17:17:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 17:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lajtit.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759628409850048929627884985960524395504300332956255057184251348855675664514700735993674408083587478891624622321864693725201833701961481298286004363011760747077301741465643306617581341821911258142360223589895536850757889460578070131820548675352762051371617257244660702328114106478659855573090488392821738570271005647585227220614186106439940346464568596604956986253913568478353853840151669456793124242379627907528621727776666600148282891185341112542852933385392954773135878487238552141944866118267064933671636453493577298151335738536521744557114543381625829830889656772887952624171763824590016185289393369721172607886339860065671264872854831806649263046894583850099470213949274091954201777228544625581534731641861060456411351632442196091542732798134117611581348220076447018518912306802352012796830061421266361950624154654668213293609966942577368705698795423372297868052233071888215989691826662662484728134150775097885176410449933690584318138550668267874457172573988529134683842222848240453597670133692607058691597232103284817666666275869538333496114582342154230159031796289115032342456391636806987296530727254911267825723413115092750347384132144494956266858904842038218585869166574248222262671057389009859127206328802032271918464733877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/hsha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://h.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/hsha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d91b6cc117bebe46611acd2d207cba9a4807331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14c6f51c7f5ddd829bb697fc16152582f1e32160
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajtit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lajtit.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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