platformazakupowa.grupaazoty.com

Issued by Certyfikat SSL

About this certificate

This digital certificate with serial number 25:46:73:31:4b:d1:8e:aa:a4:ae:15:1b:f3:d4:2c:d6 was issued on by home.pl S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=platformazakupowa.grupaazoty.com

home.pl S.A.

Organization: home.pl S.A.
Country: PL

This certificate will expire on

Certificate Details

Serial Number (hex): 25:46:73:31:4b:d1:8e:aa:a4:ae:15:1b:f3:d4:2c:d6
Serial Number (int): 49547233006888423329243134941052808406
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 92:58:6d:cd:8d:b1:cd:e7:9e:b4:c5:df:ee:02:b1:c7:2e:e3:92:a9
AuthorityKeyId: 3d:91:b6:cc:11:7b:eb:e4:66:11:ac:d2:d2:07:cb:a9:a4:80:73:31

Fingerprint (sha1): e1:84:23:cf:d8:db:c1:45:48:4c:6b:d6:9f:4d:e2:79:7a:1f:fe:03
Fingerprint (sha256): 68:36:13:f9:4e:8b:99:47:1f:ac:ce:9a:63:43:03:1d:e3:ea:5a:b0:a6:a8:6b:19:9d:30:ae:5d:23:c3:86:24

Issuing Certificate URL: http://repository.certum.pl/hsha2.cer

Revocation information

OCSP Server: http://h.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/hsha2.crl

Check the revocation status for certificate platformazakupowa.grupaazoty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platformazakupowa.grupaazoty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

platformazakupowa.grupaazoty.com
www.platformazakupowa.grupaazoty.com

Other certificates including the domain name grupaazoty.com

(limited to 100 certificates)
ebaza-agro.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
zatlyncedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
zatlyncedge01.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
ec.grupaazoty.com
*.grupaazoty.com
fosfory.pl
webmail.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
vpn.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fdb.grupaazoty.com
zatlyncedge01.grupaazoty.com
Zatedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
ec.grupaazoty.com
fosfory.pl
navigator.grupaazoty.com

Certificate

The complete raw certificate details for platformazakupowa.grupaazoty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jHLCnuSzEWoBAcMLJQv
XDiW5cUhjQIQdYCIGO9fGJSoWUS49GTIccQes/ozhli7H6T5+qCtfJP4kMq7TImR
wcxcjvidTEzmimXUnzoP/41xSuNquRhlE2Hg61kEG0TJXqEnk+QGUiBvqZ1YJ1a/
Vc3X9qXNgLkN/yB2+eahh2bljqkrAVOKxcy/K/khEFrFQpMudGiM5ZOFz7pJtFCb
dRo1K2unYq07uMu8gNVMdb08EtiVJCPHgxBZDWUTCCA7UHkYEAHznlpCJ5+BpJEG
WoxVEviqZINjg/dwpOAu34gOeDPXKa/w+1u38aOtAGq8oIKooKyRSagq6hno5Flq
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49547233006888423329243134941052808406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'home.pl S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certyfikat SSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 14:34:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-14 14:34:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'platformazakupowa.grupaazoty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29564317268958026950450693241833956321941742774658786921575390600026096294670362425727135144452306136283726562484332878569145025104569746226929070311477287045264585996803667659564848417460161028965187887175947575245246264709169832033383785688317134894615682929497134645878627254961751209032147137796454320412920500498464572185515144239053272556674886752139785358730045135034609450834056908942093785406294928540622506280693569700589996164736654956413461581696112769467048995619886467393056329027543741294330762215284948354011362961079931844292885771252287011304470737395036548882880464401824488589949637979081795005061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/hsha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://h.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/hsha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d91b6cc117bebe46611acd2d207cba9a4807331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92586dcd8db1cde79eb4c5dfee02b1c72ee392a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platformazakupowa.grupaazoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformazakupowa.grupaazoty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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