*.grupaazoty.com

Issued by Certyfikat SSL

About this certificate

This digital certificate with serial number 74:2b:d8:24:68:00:9f:59:28:85:e2:fd:8f:5b:20:bc was issued on by home.pl S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.grupaazoty.com

home.pl S.A.

Organization: home.pl S.A.
Country: PL

This certificate will expire on

Certificate Details

Serial Number (hex): 74:2b:d8:24:68:00:9f:59:28:85:e2:fd:8f:5b:20:bc
Serial Number (int): 154418100160842671641567031801732079804
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1a:3a:bf:95:31:0c:e4:60:da:d0:6f:fb:b5:1e:19:ff:77:ac:b4:30
AuthorityKeyId: 3d:91:b6:cc:11:7b:eb:e4:66:11:ac:d2:d2:07:cb:a9:a4:80:73:31

Fingerprint (sha1): e7:0c:89:2b:92:e3:1e:93:b6:aa:27:ab:75:93:54:e0:bd:f0:c0:0c
Fingerprint (sha256): 39:2f:11:1d:05:e4:0b:c8:7a:42:f7:83:13:1a:db:a5:41:31:21:6c:b6:61:7c:d2:7a:04:68:94:bf:ee:48:76

Issuing Certificate URL: http://repository.certum.pl/hsha2.cer

Revocation information

OCSP Server: http://h.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/hsha2.crl

Check the revocation status for certificate *.grupaazoty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.grupaazoty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.grupaazoty.com
grupaazoty.com

Other certificates including the domain name grupaazoty.com

(limited to 100 certificates)
ebaza-agro.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
zatlyncedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
zatlyncedge01.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
ec.grupaazoty.com
*.grupaazoty.com
fosfory.pl
webmail.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
ec.grupaazoty.com
navigator.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
vpn.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fdb.grupaazoty.com
zatlyncedge01.grupaazoty.com
Zatedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
ec.grupaazoty.com
fosfory.pl
navigator.grupaazoty.com

Certificate

The complete raw certificate details for *.grupaazoty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aUjRjuvajTkvkbYYBYl
TaRundesOpwwE5WeTePV5DNIaNeMPL0yMGPfkJzyUmXUtBDBcNtZff5w1tETZ2e7
B9E9nK7ggrOGyi28zN6cxkCS89/iSdsxo5PFoWoEffYDHSZldZ5HBk/5fPBjEI1P
wt4jruT1G97quxZgan/gPmVVR3/yS7OACOlvgnki0jAkYg1keV/8xVa8p5TfRTtF
fZ3OpnHK9KGt9HLsu+qdByn7FwUJ7QeM98IC5SSkLcqfQfG8Z4BsoV/+6DtiYGG4
mRtigoUPTauPUdoOMcX65BMs/FRlber7q+6tTdEotuwmxqBcthm3C/+8gQ3o7tkx
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154418100160842671641567031801732079804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'home.pl S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certyfikat SSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 13:04:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grupaazoty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26970191437258018716988301202668681873875342913192378988805790076600477191757927762816038140560309332385024601418002238016100611497892950075120204121756509222379200269561215255099227550053981741616870916173297461191116674351293832281496487159983761643358920364342512778499734418851803569023539775286541729090986059124487689701697317406873027795064959909888890635899155100985047590978624764254772793241263998306982502490581112729875937903399877825471719436827323267665381622016168995200582276593119915957646878192451200630124863407050799961157503208197776946831217620442356647911063902252740742909195383800367769268533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/hsha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://h.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/hsha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d91b6cc117bebe46611acd2d207cba9a4807331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a3abf95310ce460dad06ffbb51e19ff77acb430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupaazoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupaazoty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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