rybowicz.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6e:cf:ea:fc:b5:9f:ee:df:f4:b8:09:f6:d5:18:b2:ea:6e was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rybowicz.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:cf:ea:fc:b5:9f:ee:df:f4:b8:09:f6:d5:18:b2:ea:6e
Serial Number (int): 386156574406493606736634415747942705195630
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:a0:b4:c8:3f:7e:58:94:f2:98:34:14:10:e3:6e:5a:9b:3f:60:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:7f:d1:36:fb:17:b7:29:f7:45:55:6f:44:1e:5e:1f:df:cd:e0:e0
Fingerprint (sha256): a5:bd:1a:fb:fb:88:f6:1c:87:7a:b1:b0:5e:00:b5:53:46:2e:4c:92:a4:7c:fb:ba:e6:b4:ed:50:ba:45:41:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rybowicz.pl

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rybowicz.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.cashomega.eu
autodiscover.rybowicz.pl
cashomega.djcombox.xaa.pl
cashomega.eu
cpanel.cashomega.eu
cpanel.rybowicz.pl
mail.cashomega.eu
mail.rybowicz.pl
rybowicz.djcombox.xaa.pl
rybowicz.pl
webdisk.cashomega.eu
webdisk.rybowicz.pl
webmail.cashomega.eu
webmail.rybowicz.pl
www.cashomega.djcombox.xaa.pl
www.cashomega.eu
www.rybowicz.djcombox.xaa.pl
www.rybowicz.pl

Other certificates including the domain name rybowicz.pl

(limited to 100 certificates)
rybowicz.pl
rybowicz.pl
alioriginals.pl
rybowicz.pl
rybowicz.pl
rybowicz.pl
rybowicz.pl
rybowicz.pl

Certificate

The complete raw certificate details for rybowicz.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyejCv4Tyf66jEH72lUBJ
V/e0bedHzBnLz5vrGw+YTlFF5quRd5Ir1xXk7tJa3IVewT1h7ZaEb7xD3ikdK2jo
50IgFGs1JyJlUM1DwYZo4nbZUFoR+jHxPDcalpd/TJkTPioxi2QU3GQW/HBF3fTn
43Lx8dbC9MGisaSXbrpR4CNfOoUG4tLB+wsO/Mwy1ad2xX5wYBLpuowXbmFK9N2v
gPB4QBqMvocNMCduBCOwe3rAKhGbxLU8fTWFy0nrYE8ubPYMGIPWEW1IQL2X5BFa
CgXMjWMWl2oDJlBqrP9gYvlcejjo0bl4Cn8bKXsagV3I6+U9kpqd7BVVIDQeOQ9w
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386156574406493606736634415747942705195630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 22:55:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 22:55:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rybowicz.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25488677894390654382739359491583627531979384852584742531062782398561321969201453604584354837941794232590941650500730475334839296653464189836582428415097820086813712116212562826942395724209100478149679532426700915283350271624048929947227985776315438699602615186507239586581952910112112420612249389227098609098633206225722840408347569160752728749635060998956500286921589980613191433524470926079698299296353890025554468378962214776808166929244659136942518940852229310819261873788752430619707114821251461958901948249152887191924041219448627885303645263502012485249871249363599346590813916676104050968517663437390594666709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16a0b4c83f7e5894f298341410e36e5a9b3f6026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rybowicz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashomega.djcombox.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.rybowicz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rybowicz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rybowicz.djcombox.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rybowicz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.rybowicz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rybowicz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashomega.djcombox.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashomega.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rybowicz.djcombox.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rybowicz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f2ae31adf0000040300483046022100a1ed6ff52e2c94517371e4f0c2f601506103dc3d403babaa49331cd17ea0a3060221009a6cf226966d003e7cab738e57cf6b8e94a9449a3551f81b96f6a28c3b6ded910075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f2ae31b050000040300463044022067d1b597ff119215d3e242983f79beaa2b766681c0d61cbcf75b4d057c54049d0220499a66e7f6b55b590768c1c9245801a310623b77b419ebe531c1f82e3692b1cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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