polzi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:79:15:25:19:e5:ac:f2:5d:d5:9f:05:ec:29:56:57:ed was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=polzi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:79:15:25:19:e5:ac:f2:5d:d5:9f:05:ec:29:56:57:ed
Serial Number (int): 305053947139385807860187312998296443049965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:b9:6d:2f:16:7e:b9:d6:c3:68:70:20:7e:ac:0a:b4:1f:bc:c3:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:73:b0:2c:87:96:09:65:74:a0:b1:c8:ee:7f:10:27:6c:f4:67:1c
Fingerprint (sha256): 91:7a:af:ab:07:e2:14:2a:e7:24:e9:b3:ee:0d:88:5a:1b:c9:4a:36:b1:10:bb:4a:9c:a6:4f:b3:31:0f:13:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate polzi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for polzi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

polzi.com

Other certificates including the domain name polzi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for polzi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305053947139385807860187312998296443049965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 01:07:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 01:07:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'polzi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837792881652556637697572665410760948813194627292717508897242005809647406552046248253696214437564418586518202342534558642242979985545224714192238538724682382262791870064701017060735307165588159539180768604489064179063837770163990396006751551065485543317755909379909207328463727853109321376071221234264172471383776629797212448484562237823090249911569461659714361819833039722692348922031214313151177778696201503087566652064270036732269287750028495938720015013912586288540636236741875055810403252390047464063939573518841668229365417550509922573926322708890026600764573595827772622905266736156214117504824206823568388308631409931214083841449201227732132699329350522524985587045487085942923264919764416280183792630014952663234129165470329579154074898330187810157166242036524085757720274255013955134600255367394295696514833961071889841969134462459933962125226516065780583554856899595504790672889740175408511442017007991353195451156780925583103258777141576747036809529900187121172388638299374400739078827362487991134828651323154990062188190241991321698515387905433006422979039340675249612301937619609712718425554845042469442070771671035605519720353096778812423754404047335924612833412350723609105587700969455450708571049822767542015179086519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cb96d2f167eb9d6c36870207eac0ab41fbcc3c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polzi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0c75c1260000040300463044022024f12999836611cf10c11814b40fcceae8d146316dc356ab81cd9f3bab396d95022000c4f090bbdd82076b58f7623311bbd806aea63a23fcc5d5cc2aa4e979b0c786007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0c75c1180000040300483046022100a633eaf446c41ca4d4b01b9f1bbf9c1d935874e6a1691e3dc66221781528dbe602210087ef0d392367967d81b092e491a3f64c55d191f0272ff424ef68c8ddd55814d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bbda8bba04a1e6733647a1cbc12f040e7fdc66d7303bb82f54f8e0159ec9f4e6e9f8d98f2d5327e2aaf86c67dc8e25d9a81d981c06539273e623b9c6f696a61d8f467c8f9692dca4cd04139c9b8ae3ee677a8469b408eedda8a469606cfa5f3eca8b060e830ca5e1fdeb440f5ccb083b627774806c53a0ab2c5a0f773949163296508f78c819cc8d3bc3bb51d05afa164c502955e646a96b72170f52e953cc9609a8fd1c17a8eb982a23be78cb8405416ec63ba42b9f60c926f40a7c1d097d123dfa5abf2574be2962c532d0e75f302895e3cf30363d937c12632213c8b3464c74d8e0c8504cefdd5b809d1e916cbd8ede7700c75f5d02b5336dd2325b4f3cd