malgosia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:f0:76:6a:91:c6:81:96:8f:27:a5:fc:ed:d3:41:62:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=malgosia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:f0:76:6a:91:c6:81:96:8f:27:a5:fc:ed:d3:41:62:e7
Serial Number (int): 342303408327045778945865025062829002154727
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:d8:30:7a:c0:7f:e7:c7:2e:8a:ac:d6:06:59:ed:12:0b:b3:20:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:7b:d7:2e:d9:92:89:a3:7e:b5:43:a5:67:ea:cd:f9:de:69:02:a0
Fingerprint (sha256): 76:5f:ef:ad:2a:c8:01:a0:af:37:e3:82:19:1d:2a:f7:2f:9c:c8:ff:95:62:04:65:52:2c:79:69:1e:b1:27:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate malgosia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for malgosia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

malgosia.org

Other certificates including the domain name malgosia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for malgosia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342303408327045778945865025062829002154727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 07:33:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 07:33:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'malgosia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812764027475768451561234453109955991442467943282950703207218653372802250837837782201060812745319894030765580280915689767216764912784226907174221172247789739071662516553695834373209138138359906919308776290132000754621723593659528952109657674320219924677048807048966280007032218643356071783074657621285484656700660066024756576767725291357574838161545285164813174525116033867666185257704112592318875280065309820421930167695366988046656903746602036153428460108482771308982190404721002568447819572522005639062632253462923025233819301306022286217396011782159359990014344314055063372836676453311564260390590665004763750642001510101182555259100871881589659034662758970337675118066257707333870654774012224963280236218474230738995556232974775283870823753866779221703962052173407083494807819694160544410298960674855171370278538290161424215448009307931789477035422563333803264987999747447145755687851144519729958179948758368391808551147412398006616691510826152284798118373792825418598496553115671395917455560475077973675964576215147193316646347956539370914922702617304976436803385341880741182114498017801794383190824612729379719695343182069424443847560796822693391053490017844561779351222103398748479478031727818511777431556859680686596753542781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88d8307ac07fe7c72e8aacd60659ed120bb32005
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malgosia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cdc81b679000004030046304402206c000fe1577f89053adb9f06457257e27fb520a36888691dbee6d7ec31a37ea002206e91a5f72434dbd0b6a848e019feaf493e1d0169c06f959864ac6a28a493990a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cdc81b4fd00000403004730450220028c66903f416a0e1c6575602bfdc9c0a1eeae42cbfca3500c0680b85eec09f6022100e69dd3c032871c2c34c7c7143f5154a08dbfd5f17fe92d0fa3503f97b29f4d78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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