*.pot.gov.pl

Issued by DOMENY SSL DV Certification Authority

About this certificate

This digital certificate with serial number 42:8b:63:6f:18:32:46:f6:45:5f:85:dc:d4:a4:40:c8 was issued on by DOMENY.PL sp. z o.o.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pot.gov.pl,OU=Domain Control Validated+OU=Provided by DOMENY.PL sp. z o.o.+OU=Domeny.pl SuperFAST Wildcard SSL

DOMENY.PL sp. z o.o

Organization: DOMENY.PL sp. z o.o
State / Province: Małopolskie
Locality: Kraków
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 42:8b:63:6f:18:32:46:f6:45:5f:85:dc:d4:a4:40:c8
Serial Number (int): 88452793745506010885975166040276222152
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7f:c7:f9:8a:c9:78:75:a7:5d:15:c1:6c:00:c4:43:21:f3:bf:b4:20
AuthorityKeyId: 56:34:05:bf:44:72:56:3d:96:29:d3:ff:31:7b:ef:9d:45:49:39:a9

Fingerprint (sha1): 5b:70:30:bb:80:3e:9d:0e:77:a5:6f:6b:b5:27:8e:3b:66:5c:42:e5
Fingerprint (sha256): a3:e4:7f:7a:2f:99:ca:be:8c:07:98:a0:9f:8a:75:fe:9a:ae:df:b1:5b:a0:05:13:1c:16:ef:55:d7:10:e5:a8

Issuing Certificate URL: http://crt.usertrust.com/DOMENYSSLDVCertificationAuthority.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/DOMENYSSLDVCertificationAuthority.crl

Check the revocation status for certificate *.pot.gov.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pot.gov.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pot.gov.pl
pot.gov.pl

Other certificates including the domain name pot.gov.pl

(limited to 100 certificates)
*.pot.gov.pl
maps.pot.gov.pl
*.pot.gov.pl
en.fotopolska.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
certyfikacja-it.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
certyfikat.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
poczta.pot.gov.pl
*.pot.gov.pl
maps.pot.gov.pl
bezpiecznyobiekt.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
eden.konkurs.pot.gov.pl
*.pot.gov.pl
*.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
konkurs.pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
maps.pot.gov.pl
pot.gov.pl
*.pot.gov.pl
konkurs.pot.gov.pl
pot.gov.pl
pot.gov.pl
pot.gov.pl

Certificate

The complete raw certificate details for *.pot.gov.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rk252fUYZsJlef9nTUJ
Wd5yuZ+bKZ11hJSHyiCETowdkM0vd4P9zQZiOpw2NailPeJ9ILxGcK7xB8KVoqsF
xs3xv9/diThCLej/NanE7GzVHxYwozMD1buxsBR0Jym2zhpPFPwPewq0lJoooHR8
IBgNRrOFkQ73+9qlqtAP07KFd9AFImrGOqoC+mQRQjS0CM7diSCK8CtzvjTbgL7e
18D7pXvmatCJlYG5EeP1zl/Qa/Hv8x+qytfD+wnp0HN9jqMrid7EERvZdSL5XBrg
WNqonsqh3ynjwQwRcYzgdrU205lcdo6OhbTXQ6v3uJUwD2LZeiPyuRyGAcjzgFSG
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88452793745506010885975166040276222152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Małopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kraków'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY.PL sp. z o.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DOMENY SSL DV Certification Authority'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by DOMENY.PL sp. z o.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domeny.pl SuperFAST Wildcard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pot.gov.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27406145895447794398794285213939977908487579265110867812039751687917337532643388449015464712963671665601007590095729895726198404881667368456840222913578625570692964688373504641834013281131360209787714247588075615657710518610411242912992144684629083928327568081456650122042681213216123852058942336565148211840996294126887553291120147363243576285227448742834567708992247682242729631402371217412186052839315236073791334240117430448899225459990149062445935910155873816072431670285197618825006850144747099047187702748961713309211076933416898688841451119509915307723112168644770020706103043536847465204879152117095733692131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 563405bf4472563d9629d3ff317bef9d454939a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fc7f98ac97875a75d15c16c00c44321f3bfb420
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38648.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/DOMENYSSLDVCertificationAuthority.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/DOMENYSSLDVCertificationAuthority.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pot.gov.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pot.gov.pl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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