lokalnyrolnik.pl

Issued by R3

About this certificate

This digital certificate with serial number 04:bc:2e:f2:40:61:fb:56:f4:d6:cb:ef:18:a5:63:08:7c:f7 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lokalnyrolnik.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:bc:2e:f2:40:61:fb:56:f4:d6:cb:ef:18:a5:63:08:7c:f7
Serial Number (int): 412484631037660421534945616104919449238775
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:f5:d6:3c:25:49:bd:cb:8d:6d:56:aa:24:b7:6b:0c:2c:a7:26:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:5e:e6:70:f1:e5:8f:df:1c:ff:26:e3:a5:0c:51:37:e8:a1:a2:d3
Fingerprint (sha256): 51:35:41:c9:12:de:21:70:aa:d2:4e:df:c2:24:6d:1a:16:a8:14:be:1f:23:06:ca:4a:27:59:de:82:a0:81:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lokalnyrolnik.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lokalnyrolnik.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lokalnyrolnik.pl

Other certificates including the domain name lokalnyrolnik.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for lokalnyrolnik.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCCt82N4apJb8ZeAKFE
TzwDq1UgumdGsPRrVZ2WSPtAg2jGeUH2bY2BaTALPFvH0hsDJl/SRMAv9zMxOLRZ
+D4pMeVbOgUB3rWAeW7oR8QIDRtnbGxjLZxe/ypVmbZI6wzsI6QGGIcB6x394yDF
DOAWSuA31ojR/HWhN0eEgIKTOGS8km+85yn22SBI1BI3odkNSIwVqzyy1MrFYMGs
ghpVpFTlMMV29cGXM3gzkapej3jH8lrC6WxgZZq3ofIZuhspUe9OM0iyXa3pZqY9
K7StKy3k+vFhRF+lzPCGQ1O6Z067k0qXPe0/hTimjjP1f7VgK9bOPJ4Hk19J3EJ6
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412484631037660421534945616104919449238775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 01:59:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 01:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lokalnyrolnik.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23488466412428929540719418738937607416704571599465583017762259649800038210821223580496643725439532678775108514931533578515986721689508017182529633374657043801088163667313525196215128063354836399354434332796650584739434158855869648438621383766503486591053179303987011777533120648260191876249803816381327891468065559527183200112250919567424170344871998611935421134399766052345017948619894007680890878650158980195626789722208169093244085300055772487793019172524879533860685120107188905635821523251709585106467304486207045572816153417066352496522365719420934611177246450893229849258432353499584938786801861770411830835723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96f5d63c2549bdcb8d6d56aa24b76b0c2ca726db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lokalnyrolnik.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f18578bfd0000040300473045022100f687aca02b9a52e55b67fed1e3ce6f996103b5439491e0e7121636da38eff71902200864c2fd6050616c3d54bb69b92d8428276ae171119f85244492e0d263a7312d0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f18578bf90000040300483046022100c915f7b3aa5e0a366b422d7cbdda5e67ccbd0ae55950879fa7701b513fcea1e7022100f28491ef413d24884e9f645001d113589477f496d77b9445fdc562bc12ee4e79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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