pot.gov.pl

- Polska Organizacja Turystyczna -

Issued by DOMENY SSL OV Certification Authority

About this certificate

This digital certificate with serial number 14:a3:7d:26:01:d2:5d:5e:3d:80:20:16:40:f5:3c:c7 was issued on by DOMENY.PL sp. z o.o.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Polska Organizacja Turystyczna

Organization: Polska Organizacja Turystyczna
Organization unit: Biuro Administracyjno Organizacyjne
Organization unit: Provided by DOMENY.PL sp. z o.o.
Organization unit: Domeny.pl Professional MultiDomain SSL
Address: Chalubinskiego 8
Postal code: 00-613
State / Province: mazowieckie
Locality: Warszawa
Country: PL

DOMENY.PL sp. z o.o

Organization: DOMENY.PL sp. z o.o
State / Province: Małopolskie
Locality: Kraków
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 14:a3:7d:26:01:d2:5d:5e:3d:80:20:16:40:f5:3c:c7
Serial Number (int): 27433442616073926712823278382750186695
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 49:8d:97:bf:d4:3e:37:b9:97:bc:72:2e:6c:48:d6:4b:42:d6:b0:c4
AuthorityKeyId: 41:73:e4:b1:b9:53:2f:a1:45:c8:18:88:d5:f2:c6:f4:91:e1:46:45

Fingerprint (sha1): 36:ae:82:2c:f2:5e:11:79:6c:43:c1:c1:ea:76:c1:d2:40:9f:48:ad
Fingerprint (sha256): 8b:70:e5:81:1a:58:94:89:f9:81:e5:2e:40:2b:9f:23:c3:ea:8f:85:1d:37:ea:04:1e:eb:d1:77:0b:68:ff:5b

Issuing Certificate URL: http://crt.usertrust.com/DOMENYSSLOVCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/DOMENYSSLOVCertificationAuthority.crl

Check the revocation status for certificate pot.gov.pl

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pot.gov.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pot.gov.pl
aktualnosci-turystyczne.pl
aktualnosciturystyczne.pl
bolan.travel
edenpoland.pl
edenpolska.pl
lengyelorszag.travel
pieknywschod.pl
poland-convention.pl
poland.travel
polen.travel
polin.travel
pologne.travel
polonia.travel
polscha.travel
polska.travel
polskapodajdalej.pl
polsko.travel
promujmypolskerazem.pl
puola.travel
tech.travel
tech.travel.pl
zarabiajnaturystyce.pl

Other certificates including the domain name pot.gov.pl

(limited to 100 certificates)
*.pot.gov.pl
maps.pot.gov.pl
*.pot.gov.pl
en.fotopolska.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
certyfikacja-it.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
certyfikat.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
poczta.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
bezpiecznyobiekt.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
eden.konkurs.pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl

Certificate

The complete raw certificate details for pot.gov.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQAeknWB02lX8Y2jqB0b
JJ5gyBPoJhF1BURy2VdMFufyjfuabvc3yhT2t4Jr/iG9Q9ALFcuj/1kPBa2BCyEE
aBC+QDxRDvqWasDkQ50E8RnoglyVyy5H1SEc4eK8D1jOJzAEDn/vF0R0Y23qSfjD
3ntLK9PoqzHCpbpUU5KRStx4jWbHWDStdPD7SAhlYaou2cGv//7Ay8zDiPCOcwhb
ZfAyseJzOLKvEpl8ghHN3LAxV5w8KHKL3OKAVwpEsnBiUH9LXvE/wq2/8Lx7FXqy
Gce1kZEv0U5Ow4GfDufZaMCjBa4wuo9DxilwAsdpanap8rujoYaYB0XbOQ53knUn
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27433442616073926712823278382750186695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Małopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kraków'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY.PL sp. z o.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY SSL OV Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00-613'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mazowieckie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Warszawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chalubinskiego 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Polska Organizacja Turystyczna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Biuro Administracyjno Organizacyjne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by DOMENY.PL sp. z o.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domeny.pl Professional MultiDomain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pot.gov.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21334332428588547846701831029676686661917796216013034908405211360434241044842985782877220172804421698740166868978721334624771068043976054567892917005723130492238928625006433497119421408926086047104198530679558496124554926591359611623407637966466976582455332009064411554745029925377474670411493773193884044918629174328708043164830807535567384136720163633391448018165891415532062991646521883043589393072342892097617717333428347351108152246122835559153082870462493169584020383790196015204145176539325575451249885379955415250538299602412635073277360424760495725120403444976269530858789932181972011344590795959258993469427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4173e4b1b9532fa145c81888d5f2c6f491e14645
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							498d97bfd43e37b997bc722e6c48d64b42d6b0c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38648.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/DOMENYSSLOVCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/DOMENYSSLOVCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pot.gov.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktualnosci-turystyczne.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktualnosciturystyczne.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolan.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenpoland.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenpolska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lengyelorszag.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pieknywschod.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poland-convention.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poland.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polen.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polin.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pologne.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polonia.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polscha.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polska.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polskapodajdalej.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polsko.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promujmypolskerazem.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puola.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech.travel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zarabiajnaturystyce.pl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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