bocian.pcss.pl

- Instytut Chemii Bioorganicznej Polskiej Akademii Nauk -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9b:fb:c6:50:41:9e:ac:ab:39:4a:8b:72:01:17:b1:cc was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Instytut Chemii Bioorganicznej Polskiej Akademii Nauk

Organization: Instytut Chemii Bioorganicznej Polskiej Akademii Nauk
State / Province: Wielkopolskie
Country: PL

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9b:fb:c6:50:41:9e:ac:ab:39:4a:8b:72:01:17:b1:cc
Serial Number (int): 207337628133817077530185294351582081484
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f6:e0:02:02:06:31:30:39:b6:a8:c5:f6:f9:7e:a2:7a:93:74:04:bf
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ec:26:91:9f:af:6d:c1:c0:88:af:03:f2:c5:48:e4:9c:ef:f3:2d:c0
Fingerprint (sha256): a2:6d:1c:80:e8:11:ae:39:b7:d7:3f:fc:c4:11:26:19:c8:1b:b1:75:c6:d6:2d:56:0f:18:9e:53:36:41:a0:41

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate bocian.pcss.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bocian.pcss.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bocian.pcss.pl
www.bocian.pcss.pl

Other certificates including the domain name pcss.pl

(limited to 100 certificates)
nabor.pcss.pl
sinus-demo.pcss.pl
www.pcss.pl
beta.agrobank.pcss.pl
up2u.pcss.pl
swan.edulab.pcss.pl
wroclaw.informator.demo.test.nabor.pcss.pl
www.wlin.pl
nabor.pcss.pl
oswiata.pcss.pl
manus-demo.pcss.pl
kmd.pcss.pl
www.pogoda.man.poznan.pl
pay.psnc.pl
eddio.edulab.pcss.pl
piwik.man.poznan.pl
gitlab.pcss.pl
up2u.pcss.pl
chat.pcss.pl
piwik.man.poznan.pl
support.pcss.pl
nabor.pcss.pl
support.pcss.pl
www.pcss.pl
gitlab.pcss.pl
pogoda.man.poznan.pl
guzyslinianek.pcss.pl
chat.pcss.pl
nabor.pcss.pl
docs.psnc.pl
support.pcss.pl
swan.edulab.pcss.pl
mail.pcss.pl
*.test.nabor.pcss.pl
www.pcss.pl
tablica.pcss.pl
support.pcss.pl
nabor.pcss.pl
wlt.pcss.pl
mobizoo.pcss.pl
oswiata.pcss.pl
test.informator.test2.nabor.pcss.pl
iks-kbase.synat.pcss.pl
mbpl.dlibra.pcss.pl
wroclaw.informator.demo.test.nabor.pcss.pl
piwik.man.poznan.pl
bocian.pcss.pl
nabor.pcss.pl
szkolenia.operator.test2.nabor.pcss.pl
epodreczniki.pcss.pl
praca.pcss.pl
nabor.pcss.pl
cmwl.dlibra.pcss.pl
gitlab.pcss.pl
webesac.pcss.pl
epodreczniki.pcss.pl
openproject.pcss.pl
nabor.pcss.pl
nabor.pcss.pl
guzyslinianek.pcss.pl
*.test.nabor.pcss.pl
up2u.pcss.pl
www.pcss.pl
horyzontarium.pl
up2u.pcss.pl
eddio.edulab.pcss.pl
nabor.pcss.pl
sinus-demo.pcss.pl
guzyslinianek.pcss.pl
*.operator.test.nabor.pcss.pl
login.id.dev.pozid.pcss.pl
akademia-ai.pcss.pl
support.pcss.pl
nabor.pcss.pl
wlt-beta.synat.pcss.pl
koderjunior.pcss.pl
www.wlin.pl
kmd.pcss.pl
nabor.pcss.pl
www.pogoda.man.poznan.pl
bocian.pcss.pl
wlt-website.synat.pcss.pl
wlt.pcss.pl
wlt.synat.pcss.pl
www.edulab.psnc.pl
guzyslinianek.pcss.pl
wlt-beta.synat.pcss.pl
www.pcss.pl
*.epodreczniki.pcss.pl
login.stage.zhr.pcss.pl
wroclaw.operator.demo.test.nabor.pcss.pl
szkolenia.informator.test2.nabor.pcss.pl
test.operator.test2.nabor.pcss.pl
mobizoo.pcss.pl
wlt.pcss.pl
oswiata.pcss.pl
eddio.edulab.pcss.pl
www.pogoda.man.poznan.pl
epodreczniki.pcss.pl
guzyslinianek.pcss.pl

Certificate

The complete raw certificate details for bocian.pcss.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0CnS/a0idcNpLN3M7rbg
7UktC633efDGYThEfqzleGudnSEQYmu5wGkRtd4i7KP8MuLsrAs8zMjJoAnWuH78
GnzjLMfzKCv7No7hn6T+y6HijyYpbcr05WvWY4FN6kvbB8l6ixXwNyUCj9S21FH6
FTCnJWBy25Mf4Ft8a2GTr5f0fazZnuOX9+4X2mdRc/OuuFugV5rwHRH+04RMv22X
76t1RxFC/0XlsfjjfWl5tOScnizGVlYk6GOGmx47ZgNbMx9neIcRtFAZeVyMUTtM
YtuP8N0TSOlNK8at2PzWufx9ULDQrlhGHU5s7qf4dlbRMp07kVdeaU7hSrLZZfNk
Q//SAjhM9z1gWiPO9JIoWl5ke5KAzMYHwRO78TEKyN0Wa3fvb4QwBDRmZ1CwX8Je
NeLdkBfz7QlwHGi5X9ZqPzNDzkyOZBeLBigT/xBnwp4H49aGHniKfWkS5M7qfxqr
vzFVAP/R1oP7Mh6A6zcODrSvO527s4ePrSoln76A4A6NnerAMA65PrB4YieskEHv
/p0r+A7QFWzY1N+LbmKxJIMq9s5XfQq4cCfKqbeUW4S8iQB07vH2xh2nuxXvB/oU
yOTwIlkAtDT7iLCgJqX9as1KC3QyMIypEJri5aetRxeyQe5OQrKotgH3Iig4A/jF
jnFPk9E/gcQyma7DQvUVt3MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 207337628133817077530185294351582081484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wielkopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Instytut Chemii Bioorganicznej Polskiej Akademii Nauk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bocian.pcss.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849232480918780683003419184120527868383195426674404550036611854336962056922691586541079709956538047491712394485309235000670312957816424615113467524127567953677796422236799211915231708309716013661316477857770668728515909568747793967824156957050269666699686566404608749860839143550502749936714817036881520135620947551015367242603690281265558891635376845106798044068039286274797002333142371251199575437872178469829766636537906836484327909722054678224802005991138710615134155611851791084046228890782554925911870317112256974296838509083962232318721171086455587737123675931147021302194710075500317075867883903839861372520444532342187005963151899251009618524711493671058180507674027703235112137400295423023123168016001376985298992610134156022710196379840521934008264741268337567825957467106645616658212808093615747848307994083349064448402308567168937967122489219225762202299082890731400782200886995602373601135126425185153759936488891554738411488167742436551209280025231712578537289323772274328860053283284351054122600257216038980201553983776489762541621699785695185926482132169720566859248619520928716676579561577836942683539758425014761107145385977306825596352134946750486227145396284038281545840539947895084682039973940298912752586831731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6e0020206313039b6a8c5f6f97ea27a937404bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocian.pcss.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bocian.pcss.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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