medhost.com.pl

Issued by R3

About this certificate

This digital certificate with serial number 04:46:ac:52:e1:30:21:bd:84:50:8d:4a:49:28:86:b4:ec:4f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=medhost.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:ac:52:e1:30:21:bd:84:50:8d:4a:49:28:86:b4:ec:4f
Serial Number (int): 372497966962479639154389656285261189147727
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:70:57:1e:bf:76:f8:b4:c6:a1:da:02:31:73:cf:87:78:c8:ab:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:e0:99:fa:b6:52:3f:b2:b1:6d:bf:1a:97:3f:45:39:50:db:fa:ce
Fingerprint (sha256): a6:9f:5a:35:ba:5e:f6:1b:64:73:bf:3a:ee:85:0e:15:72:9c:7e:ea:6b:8b:8d:07:df:c2:1b:bf:f3:fa:c5:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate medhost.com.pl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medhost.com.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.medhost.com.pl
medhost.com.pl
srv01.medhost.com.pl
www.medhost.com.pl

Other certificates including the domain name medhost.com.pl

(limited to 100 certificates)
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
srv01.medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
medhost.com.pl
sni36645.cloudflaressl.com
medhost.com.pl
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
srv01.medhost.com.pl
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
srv01.medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
srv01.medhost.com.pl
sni36645.cloudflaressl.com
isp2.medhost.com.pl
sni36645.cloudflaressl.com
medhost.com.pl
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl
medhost.com.pl
srv01.medhost.com.pl
srv01.medhost.com.pl
medhost.com.pl
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
sni36645.cloudflaressl.com
medhost.com.pl

Certificate

The complete raw certificate details for medhost.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgISBEasUuEwIb2EUI1KSSiGtOxPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjQyMTMyMzVaFw0yMzEwMjIyMTMyMzRaMBkxFzAVBgNVBAMT
Dm1lZGhvc3QuY29tLnBsMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
xM2pnb3PhctRblpVaCpfwpCl1RkJfqEJ2Hw1ivVY6Dt5UOS2HADwnE2gog+rH1W4
hNVLM3kImnsE2/ioy6MilmK2KBW4QA/WZ7MCSNO6VKcQpOoyK5cKe7+o4F/7vSoJ
OH5siA53wkBqA+5a1MRHGSsni8g43lLlzbFDL0JfoFlAMqj/AhcYiDfLM2M9RKSv
/cANOQBsJ+CT2cbk+Ng1zGKSCiKKkjJK4msppYToj+MyDFTvbeoxWl7CkrO0aw4I
Y/ZubFP4buQyp8dPNPX5cZtVCvVdxhZPs9eA96z7bDlocCG2+iV8T72dTwEYfY8v
cXmPybo9Do3kNxa5t1+a5O6m5C07/VwlVLl6EsSsGFG8J33rqiTescaHvoMsDkrr
5wvKGDlp9FZDyC2R3SFiEcU+e/O2D4wLMegSn5KYGjCTTP6rG9hzq/MvF3xQGkmP
p+fKGU7RSD14Yc/fOcxfDFvF5f2tuZnlpW/U3y/LoEh2r6T5pxqGiUk97bDTkbgb
IoMRlQBkBUyv0tlEbggJljIDDt+/b4xxoorQOsRWHOe7emT/jfsG7bOK6QJ6Psj1
TmKdbc5KgJeLG+12VwTc7+EQ4M/6d+o5Q1U2ovPAoaAaMG0XCS2A8FszGrU4pcJL
hxxs5mhjF3xZYVuLXwG6kIJqP6QcQ7EAH9grPpN74wECAwEAAaOCAk8wggJLMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUUnBXHr92+LTGodoCMXPPh3jIq+cwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wWAYDVR0RBFEwT4ITbWFpbC5tZWRob3N0LmNvbS5w
bIIObWVkaG9zdC5jb20ucGyCFHNydjAxLm1lZGhvc3QuY29tLnBsghJ3d3cubWVk
aG9zdC5jb20ucGwwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYmK
CG9aAAAEAwBIMEYCIQDre/VkfIT8RXAvHAT459J18ZWWCFnoxEvk/kXk0urS5QIh
AJxEQv6RcUsnOSgA0pFicFWfSR23K4Nqv6sBIsuc0W0JAHUA6D7Q2j71BjUy51co
vIlryQPTy9ERa+zraeF3fW0GvW4AAAGJighvYgAABAMARjBEAh8ZFJtiyhpvcRpF
SLk3zNqeg264NeG7FMNdC8J7/XzWAiEAv6QBz+N+OPBIBi4Daf3z4oi+Qc7rKb5c
wnv0CNGovscwDQYJKoZIhvcNAQELBQADggEBAC+ntFYobURd+xZYchn0etKn1l1g
YlnT8ZYBho/YMmmq71rYaDUidSANMHP+J0ogDdF3ijdIBwfcg928hN5NnPutN9QV
yTFaVbVHtV6JFjI3Tv5v0yfHY+qHTlC9YuYYoMgCbUZvAWd7ZgFVgcKSTSMYySMv
BPe2NZD0YwT8r2RBRtjsTo8wABLsK05Ts2oziCHZK/EXYSCk6+rk/33kt+s97myA
9fs64OLqb3Rem6zftBAmn7vf/31KAKn+YFodI1Zeoa1zro+yeQxb0RrbEixQITTi
N+IaQ2gwZb1/+6CBjRyd6vJP6i9zCBIl26OIAnMEs3DJVHPErymxg1MfHO8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372497966962479639154389656285261189147727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 21:32:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 21:32:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'medhost.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802887698487984295212999102908235613522043684642370105298275007592712754022374429704617798543444861847527279599614159231708301351308915150407705142962814797182933712797272348665497350428094095015436516022707579458485379263684511552025096695875488033505021134674798357181779705025955996683127088369444531749796651048375355311100373671015688956377182111416029693452853857419148042456550197283804513793699783731251409074497605182216122275473782359912750628624068686940147736152541512135641058916100864751626986396486955943991042303993208651485471884904007977855135705740081153190473378835411143254549791330511108720692534638921123895531761429503023065074505334532353709685643713290987917371257356209764449335909715159661609873166643941959589925722985081048455233037038232208519112526155407854975180909246652344192140482183215986492972676566342304701472110574296636147171811647258187602745732061299872551782276075333431195765327423294125400154963568711154843329991687250964735247224058761582880785942479273844390185667993182134448936045226994639246322997410732826808228441309105713263876339733407557945068906307698840021202196413010179529773448671873661958136708011248903313185361879413700497414174289644097547708999325560829768906826497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5270571ebf76f8b4c6a1da023173cf8778c8abe7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.medhost.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medhost.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv01.medhost.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medhost.com.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001898a086f5a0000040300483046022100eb7bf5647c84fc45702f1c04f8e7d275f195960859e8c44be4fe45e4d2ead2e50221009c4442fe91714b27392800d2916270559f491db72b836abfab0122cb9cd16d09007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001898a086f620000040300463044021f19149b62ca1a6f711a4548b937ccda9e836eb835e1bb14c35d0bc27bfd7cd6022100bfa401cfe37e38f048062e0369fdf3e288be41ceeb29be5cc27bf408d1a8bec7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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