domrustykalny.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:6e:30:56:61:45:2f:18:1a:a5:24:94:10:a8:b0:bb:07 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=domrustykalny.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:6e:30:56:61:45:2f:18:1a:a5:24:94:10:a8:b0:bb:07
Serial Number (int): 288025348476893259584707308764783765928711
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:1f:1e:7d:88:d6:3c:30:92:80:3d:da:e5:a7:4f:24:45:fa:a8:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:a9:61:2f:98:31:16:a9:99:b7:f6:08:0c:66:09:57:76:ac:bf:9a
Fingerprint (sha256): 9c:83:10:93:00:e7:b1:f5:17:cd:22:09:3f:2a:54:5d:af:0c:55:92:8c:cd:41:b6:30:f2:20:77:18:15:55:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate domrustykalny.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for domrustykalny.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

domrustykalny.pl
www.domrustykalny.pl

Other certificates including the domain name domrustykalny.pl

(limited to 100 certificates)
domrustykalny.pl
blog.domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
www.domrustykalny.pl
www.domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl
domrustykalny.pl
blog.domrustykalny.pl

Certificate

The complete raw certificate details for domrustykalny.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288025348476893259584707308764783765928711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 09:30:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 09:30:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domrustykalny.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771902443062547514876723106124372828554796771761689749022365417827071175291067849667923409882745016486525086545371572003445700188823943794008527622351541520037694711160219761426818252958858161763624936917798560185964523927797074805891903712981005475463196656744207605009755237156416463898727931388787826862409129242649828520608328495915442655556198415741471733543390554346185962539295523496062040939073743448615717689454179992793540407813971309658157198897249527537536846175925199081679620513358372174233419129626752982252118869331542965538964048912182848004204038575751555271384929141413229117556339639558790512241864350674198765409804560706259167915542308063543892423503012333181324453044686824219995564064887978731509945172148712069786108490820809159689819649972554722450320233710553206170238726947281613374464492580947398547360075903551005532778652150884482141612735784673778438906280806591384795565481799904830734409685926738574234415484015268479978062700947535323885183097608879781165728015705453304523609272439844605899062487267324246888663905287622107094230544877846643221705411817698420486811920564837085764967084307446893952848710004659619242788843987557862228964607077063897307200893040461013422137359565996233888723513751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							441f1e7d88d63c3092803ddae5a74f2445faa81c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domrustykalny.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domrustykalny.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169dd9962cd0000040300473045022100e868be3ff25223edc1ed6700979ee3b3cc4fe47be125f2bd779df22324e034de0220199737ec1bc90be18327a0bc3793f1e9bbf83a366dd42dcb794e5978e9e7d20600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169dd9964fc000004030046304402201b823eb149e547214970b08ff1ea689854f929f0f5ee17ed6a960ee44b1cf5f602204dc59a937d129457b83669f4186993bcfafc5b615c26815001b1bfa571e76b92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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