cs-saw.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:34:89:82:6b:0c:5a:5b:63:27:8e:28:4d:49:31:41:42:5d was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cs-saw.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:89:82:6b:0c:5a:5b:63:27:8e:28:4d:49:31:41:42:5d
Serial Number (int): 366326608212140459361047969874581102084701
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:56:8e:2a:00:92:1e:e5:fc:2c:ce:07:2c:33:3e:f9:db:0b:49:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:42:78:d8:f2:12:3b:69:39:63:ec:96:f2:c0:0d:ab:53:24:20:69
Fingerprint (sha256): 6a:ab:22:cf:bd:f4:f8:42:98:2e:bf:04:b9:39:b5:8e:5e:5c:f4:18:3b:16:a1:75:d6:b2:33:18:53:05:0b:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cs-saw.pl

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-saw.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.cs-saw.pl
cpanel.cs-saw.pl
cs-saw.pl
cs-saw.pl.cs-saw.xaa.pl
download.cs-saw.pl
mail.cs-saw.pl
serwery.cs-saw.pl
webdisk.cs-saw.pl
webmail.cs-saw.pl
www.cs-saw.pl
www.cs-saw.pl.cs-saw.xaa.pl
www.download.cs-saw.pl
www.serwery.cs-saw.pl

Other certificates including the domain name cs-saw.pl

(limited to 100 certificates)
cs-saw.pl
tuning-pro.eu
cs-saw.pl
g4-site.xaa.pl
cs-saw.pl
cs-saw.pl
cs-saw.pl

Certificate

The complete raw certificate details for cs-saw.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEzg/uj0SWBRyQVjS18Z
AnD2HqUknzzrlCknX3lseTky22kCU4Q1mq11Pz4kGR7alkHyelqqZip32wBvQeja
6cdEaMIKoc93BfNrNXGtebXwpG8uk4xMVp5oiVL/IpsM9MBeX/UviapEC1h+4AZJ
ign/vYB5kHoyX+mo1pLeUGMckpbtTncnllBbFT7jB3mGgW+IW0mqiDrTnL46X3fP
6RbSEXPHB/x9eS6Auay6lfOoKyAkJDJT1ttulTl8z5uUTZce+d+H39saEFg/IAP3
EHdnwRtuJs7Df7M3JWQsbBdNaIPG6uWkVg09Yfbvb3MFDM7Z2fdpNwvaPNfDdp6F
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366326608212140459361047969874581102084701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 00:07:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 00:07:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-saw.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24275664946893394645484503257367440442261484492759539768293001841048223681226934755739820626215206033785073013017551773835177264045552859454650620134348212863017685339910209588428418062631416131244635973400818523210589421332861725057472997233230139375327702511799283148286316635293474241692545861167824128824852013551124780976285925844026152049052538655445080602841471266476131713395298284293634984206027340696598684758518775127582653865754618203827387191600354587235288158003180753616295031963235474392737351285192850257921312796720803643852868574327073913302994435277926515639524247763362529380021348820148820018603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0568e2a00921ee5fc2cce072c333ef9db0b4915
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-saw.pl.cs-saw.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serwery.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs-saw.pl.cs-saw.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.download.cs-saw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serwery.cs-saw.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fcac9ea6e000004030046304402204d5bb5b7e28e64901610a68b72ba1483979b2235d54e42b49aff933ff43824ea0220132c4a2f4f5ac61054fedacab0a01597be3ddcef87d1145e91d03521e0aaebaa0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fcac9eaa10000040300473045022005b5c0a5c4cc0ede1e88cef5afdf87d3afc98f48ad1676809ecd4c207b152922022100e50172a9e817e6cdcad2a38440e11d175c132c26929391ab2d7daeec7bc069fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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