net-assets-mgmt.security.psnc.pl

Issued by R3

About this certificate

This digital certificate with serial number 04:49:e6:d6:a9:c5:48:a2:bc:09:dd:2d:fe:5b:85:e3:d6:6e was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=net-assets-mgmt.security.psnc.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:49:e6:d6:a9:c5:48:a2:bc:09:dd:2d:fe:5b:85:e3:d6:6e
Serial Number (int): 373596593546185402210321473221098834482798
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:da:65:59:7d:c9:c5:14:ec:70:81:b1:09:5b:1c:20:cf:f6:6a:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:72:ce:58:ad:a4:f9:3e:3a:44:ff:1d:86:a1:2a:94:31:36:52:bd
Fingerprint (sha256): 4c:31:ae:01:a4:46:dc:a6:34:80:9b:0d:10:5f:be:1b:98:f5:6d:8c:a1:6e:89:bf:c4:fc:0b:01:5e:e6:10:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate net-assets-mgmt.security.psnc.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for net-assets-mgmt.security.psnc.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

net-assets-mgmt.security.psnc.pl

Other certificates including the domain name psnc.pl

(limited to 100 certificates)
pracelab-sso.apps.paas.psnc.pl
eurocase2017.psnc.pl
lonicera.man.poznan.pl
www.pcss.pl
conference4me.psnc.pl
test-vm5.vph.psnc.pl
nogalia.man.poznan.pl
indico.conference4me.psnc.pl
helps.psnc.pl
indico.conference4me.psnc.pl
box.psnc.pl
demo.dl.psnc.pl
indico2.conference4me.psnc.pl
pbl-test.dl.psnc.pl
pbl.dl.psnc.pl
www.pogoda.man.poznan.pl
hicss.psnc.pl
meet.psnc.pl
demo.storage.psnc.pl
nagios.paas.psnc.pl
pay.psnc.pl
futurelabs.psnc.pl
registry-console.apps.paas.psnc.pl
indico.conference4me.psnc.pl
meet.psnc.pl
nogalia.man.poznan.pl
*.apps.paas.psnc.pl
docs.psnc.pl
support.pcss.pl
indico.conference4me.psnc.pl
dynafed1.indigo.psnc.pl
box.psnc.pl
waitsafe-mqtt.apps.paas-dev.psnc.pl
rotha.dlibra.psnc.pl
box.everest.psnc.pl
pbl.dl.psnc.pl
box.psnc.pl
support.pcss.pl
indico2.conference4me.psnc.pl
pogoda.man.poznan.pl
box.psnc.pl
lta-download.lofar.psnc.pl
lib.psnc.pl
dynafed3.indigo.psnc.pl
nogalia.man.poznan.pl
dl.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
support.pcss.pl
dingo.psnc.pl
mir.dlibra.psnc.pl
mail.mic.psnc.pl
cdn.classroom.psnc.pl
eurocase2017.psnc.pl
sentry.apps.psnc.pl
dingo.psnc.pl
vuln-mgmt.security.psnc.pl
lonicera.man.poznan.pl
edusafe.psnc.pl
www.pcss.pl
indico2.conference4me.psnc.pl
indico.conference4me.psnc.pl
*.apps.paas.psnc.pl
conference4me.psnc.pl
docs.psnc.pl
indico.conference4me.psnc.pl
net-assets-mgmt.security.psnc.pl
box.psnc.pl
conference4me.psnc.pl
iiif.ecloud.psnc.pl
ci.nds.psnc.pl
box.everest.psnc.pl
dl.psnc.pl
dynafed2.indigo.psnc.pl
box.psnc.pl
lonicera.man.poznan.pl
oneprovider.indigo.psnc.pl
repokb.dlibra.psnc.pl
meet.psnc.pl
nogalia.man.poznan.pl
scenemanagement.test.ksi.apps.psnc.pl
qcg-monitoring.man.poznan.pl
nds.psnc.pl
box.psnc.pl
repository2.netradio.psnc.pl
dingo.psnc.pl
box.psnc.pl
login.nebi.psnc.pl
pbl.dlibra.psnc.pl
pbl.dl.psnc.pl
psnc.pl
lonicera.man.poznan.pl
siem.security.psnc.pl
demo.dl.psnc.pl
meet.psnc.pl
weekly.psnc.pl
vuln-mgmt.security.psnc.pl
indico.conference4me.psnc.pl
helps.psnc.pl
*.apps.paas-dev.psnc.pl

Certificate

The complete raw certificate details for net-assets-mgmt.security.psnc.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373596593546185402210321473221098834482798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 10:21:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 10:21:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'net-assets-mgmt.security.psnc.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814219118142947316102889914640099401910196562380556552427244938115294998250234695759998905932533301759709741367579335728194642419514408202859040278367561402608213493438715460609141944059630875608035042506688296719109276094987244622525109385431190068005888896998142758787175366924947700067020291310229356862760545617320885917067578084397950522222843999549320211768972259491425000176388454295238248613349416584844041726412160102332991858149082534932746538704033224030148000586146685378765313457778500488862635124221636969112217292670822935381121075515300880714079969017513905572537066481582525897356971358740308459253131536807833030737009460615203505281417411235840486240473939519349416689776483288572427269068081320055388222741050657663162745684133283702342899260826769622781247629736222080555489348264648862952084299744647540341106799041860505342723819003028035054179373978835174308699111391535926802161244531105613579040521946523303835444746087483428626823733720434216033282241035822228608337454757619002151287589243874303698666165465938253550696631196841493621888971492521001910929840551370206545782147308874805888809417159240789657954589409340445429723715174633422015643150832144918037711685048240808530105304396557635363004920651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75da65597dc9c514ec7081b1095b1c20cff66a79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-assets-mgmt.security.psnc.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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