domino.pgkkoszalin.pl

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 25:e5:21:da:50:17:c2:b7:96:75:57:09:52:4e:24:c9 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=domino.pgkkoszalin.pl

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:e5:21:da:50:17:c2:b7:96:75:57:09:52:4e:24:c9
Serial Number (int): 50371158440690237044376182086169404617
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a4:0c:e6:cc:d7:4f:64:02:12:39:04:72:66:2d:12:31:a1:30:7f:49
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 90:0f:49:d3:a0:a2:48:3f:8e:52:e9:2d:59:e6:d4:3d:65:fe:32:3b
Fingerprint (sha256): 49:c2:8a:b5:36:59:2f:66:af:3f:21:78:5e:b9:21:f9:71:22:ad:05:6f:ae:b0:fd:41:35:c4:0f:77:de:2e:74

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate domino.pgkkoszalin.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for domino.pgkkoszalin.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

domino.pgkkoszalin.pl
www.domino.pgkkoszalin.pl

Other certificates including the domain name pgkkoszalin.pl

(limited to 100 certificates)
portal.pgkkoszalin.pl
pgkkoszalin.pl
pgkkoszalin.pl
poczta.pgkkoszalin.pl
um.pgkkoszalin.pl
pgkkoszalin.pl
domino.pgkkoszalin.pl
um.pgkkoszalin.pl
pgkkoszalin.pl
pgkkoszalin.pl
pgkkoszalin.pl
pgkkoszalin.pl
portal.pgkkoszalin.pl
poczta.pgkkoszalin.pl
um.pgkkoszalin.pl
*.pgkkoszalin.pl
pgkkoszalin.pl
portal.pgkkoszalin.pl
pgkkoszalin.pl
portal.pgkkoszalin.pl
um.pgkkoszalin.pl
pgkkoszalin.pl

Certificate

The complete raw certificate details for domino.pgkkoszalin.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOJWianCNIzCUE3Fq8Q9
IO0lXxTvAXCW0UjWu7atH31cD8xXTKXoQME9vYLmL+eJ9XCl4bVULAv61irSK40m
dVO8Z+Va8eDAigplRL4n0rGNSsu8br1WVZCr/GdsgZzgYUx/oNvBkAgTSyBnGTcc
XLNqB87FtKS5oWX3eoYxbtvAxpWEW1QTDIoJDS0ek2gFe+blWNP6G8659aZgQSB1
PWjprV+mVflOD2AAd/AkzKz+g3Ce7iBAN289AVepz+BKGlFoTDNHRWxuvBXJ1IZb
ZbOOAfkfMDriQfuHUASTiAicKcRlDkkyZ+9RfdRPVY79Usd7HARBdGMX8/uKkHx6
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50371158440690237044376182086169404617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 20:54:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 20:54:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'domino.pgkkoszalin.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20309740240958504875791811543295610559925649438134751534603271093315310877911911783223186591096912830747515746481717552395522071558614612025385646089029851626783284144569994323545389007758355634489183869262630122330470108053518195484993677788138115755571057079581261529636931774520001025518714899273020159791552283351077938176866723069297742571513144824524143369155379616860766902743652520413291590716687792969874867309386961929902974129760003853963122393686359968005190607982520981411241108033156784345667769053909107036567141070708543184391759658220058449482825971638196555298115629216425446684819863253618236619361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domino.pgkkoszalin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domino.pgkkoszalin.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a40ce6ccd74f640212390472662d1231a1307f49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0023dc9282586abfe05ac5c2adeec8ccb54e67b355f30d0373d0dff2dc5d7cd894219588b7dd0ae47b5fd17ee195150140646675f97a786b23515272e6ee74104b7c1503158773c9e8f867d8aa8e8a204a51b9bdc890136e7d8a9b6cb08dc5cde7a0bf8bba3c721380f52e631b104394a7a93aff067267b909be5110457f890e23531c54c394bd4a21bcb0aaa9705513792f5deb93374634e200d9143e8baec647bad12ae5a1a9576115d9d44e4d7d2a0898c8d8274903f8867427fc35d803b595280c158a3bd91accea3552bc4a271107035a070d79a5d97202d31b1da1f021d08c86785eaaba450b3bb30b1a0bd56cefc542324f0318b0c508d3741b3b926caf6296eab3aaf797a059c2c69dd12d1e547fdcec9023791ab1454eaeb634b38139769d8a2ff085675da79290762c586d1a6515ea4f2583a44ea6b0fdb49a3f256261d6b2fb2dad62df9c5b30a8506312ffb265af156cd98ea5995d6d62a01c0a1aa6e0671ff1868cdd0315c2d9466e1eadbb9e81dfa62732050bbe1e1ad614fa55fd6e31107da17631287036e6e01da2c68958d13730d513312f1c390f38685439671c032e67a7f63039e1e27e34629cb2dfac0bcbe0f3b89096312e7e67de3e9a705267b996f4ff1b689b9e86d2a308d4161eb46dec87e045d3aa0ec781813c0c9db509dfc1874cf518c64c1c5ef0c8b913e201a9ef702386cf4dce0f047faacd