ior.jakubchmura.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:60:9a:89:f2:50:49:4f:5f:67:b1:26:53:c6:ad:77:f4:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ior.jakubchmura.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:9a:89:f2:50:49:4f:5f:67:b1:26:53:c6:ad:77:f4:d9
Serial Number (int): 381321668322175640841031548131815697413337
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c1:47:1e:a9:e9:89:45:d1:eb:d0:84:76:b1:3d:5b:5a:d3:83:71:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:8a:9c:47:a0:6c:15:3b:37:3b:0a:d2:be:f9:dc:42:b9:a2:b2:e6
Fingerprint (sha256): 40:41:7b:78:39:83:8a:54:a5:5c:7f:de:b3:4c:13:5e:de:84:03:c5:f0:c5:d5:c6:17:53:fb:6c:7f:45:cc:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ior.jakubchmura.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ior.jakubchmura.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ior.jakubchmura.pl

Other certificates including the domain name jakubchmura.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for ior.jakubchmura.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381321668322175640841031548131815697413337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 13:01:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 13:01:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ior.jakubchmura.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618536411360558465639084494916253964774217243608899565030625509594707701057640166272791639663108623808889198394248325192642160546815087039490359734974202226179229424293760269782627456776452565077822597223677422460120865654877774974044080466729337793456340039852565496943981696198614114615240179675719236944990847104331204658328429550112285618534539332942287342788567165365461629622830896844191428300641408095458041245762874385723025755437291694000144653217687330131327759294870982199292393750060372656723157661313838393372697590869016573024961879233360408861292757521789751738391144989464394284676711634582814805620629597782844892811054959461967937023248162464851356976532865613521709813001267910611263128691855212724055463996845287896363444419096391650020169516403700834202421272895822132409299992789722479885399221771747941781737855935557949968890469055945467419437102991445783382584600809710065061241359455407750318649966938188680922163106936643403290478205068646044030699764812985717679500987891785965924332654012999699046608503604678705574017748727882811688389071896831034481510343356963275658001374000786384966368569909940156422999621364116210397634499048719404904826387038215402892703783835579345455975962301063910196111370537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1471ea9e98945d1ebd08476b13d5b5ad383710c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ior.jakubchmura.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f9f35ab060000040300483046022100be16bb6f10692cfc927b4fc67a5abf31c6653525de0850204aef322710dba5d102210088d591761d0194145f179f3c1d25d5d483bdc42b93d768e352170da18bfbcf7500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9f35ab2b0000040300463044022023471c6dd3fbd65d433675085a6998dabcde2a4d95d308940f7957dedcb26ad5022031210ace4a7740ce8e838f13ace1e16561113a80ab86e60856c6ab8d7518e32f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00179c91ade52c36a644b62608d7f39fd599179b743d9d0c32097619ef755a81bc03a2bc104e7507bed49af57d7b3a683bf4b583c35b99ceada6e0143026912e77401154623d8eff1796332fcaf1e2e48a7e4080a712d3471a5f85e0dd4f7420510cd78ce1de9558d8d1db9e95a4b4b08876c1721bfbb6958ad586c3951f648c4c0d286829414402331b4065e896cc32b13416349d78d6a016a9ecf37abc1ddbb0bd71515fc165dc0802059816770e1d8f14dab663c334e2b9c460d85f30504796270666913b687d3ab0a362e6a8343268043ec5c8fc109162cc443af062800c49eeab6abd5dad288aa1907d81da5fe139950c75da8fc57d3f2b043650e35e2e24