ec.grupaazoty.com

Issued by Certyfikat SSL

About this certificate

This digital certificate with serial number 3c:bb:b6:10:95:72:14:d7:0a:a1:64:36:0b:f5:f8:4c was issued on by home.pl S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Certificate Subject

CN=ec.grupaazoty.com,C=PL

home.pl S.A.

Organization: home.pl S.A.
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:bb:b6:10:95:72:14:d7:0a:a1:64:36:0b:f5:f8:4c
Serial Number (int): 80728331972090612393972306128110221388
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3d:15:8a:f6:cf:ca:fa:bb:65:97:ef:6d:53:c2:b2:f7:d6:32:c5:5a
AuthorityKeyId: 3d:91:b6:cc:11:7b:eb:e4:66:11:ac:d2:d2:07:cb:a9:a4:80:73:31

Fingerprint (sha1): c9:ff:f6:da:20:e2:8c:4e:f0:88:3a:a3:43:0b:8a:0e:05:1c:f5:e2
Fingerprint (sha256): a3:d4:12:af:00:f1:92:89:6a:64:ec:68:c7:d1:c5:fb:a6:aa:44:4f:60:90:0c:70:7f:36:ae:f1:f6:35:72:c0

Issuing Certificate URL: http://repository.certum.pl/hsha2.cer

Revocation information

OCSP Server: http://h.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/hsha2.crl

Check the revocation status for certificate ec.grupaazoty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ec.grupaazoty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ec.grupaazoty.com
www.ec.grupaazoty.com

Other certificates including the domain name grupaazoty.com

(limited to 100 certificates)
ebaza-agro.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
zatlyncedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
zatlyncedge01.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
ec.grupaazoty.com
*.grupaazoty.com
fosfory.pl
webmail.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
ec.grupaazoty.com
navigator.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
vpn.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fdb.grupaazoty.com
zatlyncedge01.grupaazoty.com
Zatedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
ec.grupaazoty.com
fosfory.pl
navigator.grupaazoty.com

Certificate

The complete raw certificate details for ec.grupaazoty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnu4Pnfr9FvhIGgpLf7Y
/NBT3kV6/t9axuzrzoytiWphXpOJX5Qm4Ti7bq4PfXATTO9U93vXXa4/RiRomlnt
R0HAgqPNklj/DQIjXdYJUYIPGcOggnnlfG6HK2xYqjbvmzwtO1LOOgtpzTSRLOn0
69kcg4PCPB22OusunzZn7b9GXLEUv+aksh4sRKe3O28zaPpWykMcWN8G6tc6wcUa
AwIBCrI1fq5NgIwWVAJxkQ2Ta9WDM2UYrjNtqMuNtukUOyA2gAIKe9uabMiHZIIO
12tZ4vXBNcL4wmZPZgE7H1g2sP9DwpNIB5rJTgQgd6+nz4+h8JVrbIvC6KWdwFlT
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80728331972090612393972306128110221388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'home.pl S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certyfikat SSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 12:52:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 12:52:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ec.grupaazoty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21521520303690764472744612905971633274156946035801222767556545329214804802977443870013805284151976877945852220869429599998495029471708347485580716585343737410683342884787293816278754264247905594359299524359989964029166934584609950996791265517300707230486722520407493129112766802717665287093143921401350465812895832501001826948435344601872730035642689883273484555152190078048427014344907093211970111705437237494355419818271617832426789573012379069598348036326189156017613574577318412516088894415401472514673866778891783434488384519637802848604981895559976060631382468974747837237534504354362763349042188651492265251817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/hsha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://h.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/hsha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d91b6cc117bebe46611acd2d207cba9a4807331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d158af6cfcafabb6597ef6d53c2b2f7d632c55a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.6.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Asseco Data Systems S.A.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [85 115 97 103 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 116 114 105 99 116 108 121 32 115 117 98 106 101 99 116 101 100 32 116 111 32 116 104 101 32 67 69 82 84 85 77 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 32 104 101 114 101 105 110 32 97 110 100 32 105 110 32 116 104 101 32 114 101 112 111 115 105 116 111 114 121 32 97 116 32 104 116 116 112 115 58 47 47 119 119 119 46 99 101 114 116 117 109 46 112 108 47 114 101 112 111 115 105 116 111 114 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ec.grupaazoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ec.grupaazoty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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