*.cinkciarz.pl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 60:73:d5:1b:04:25:0c:74:59:f0:54:11:cf:4d:7e:a7 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cinkciarz.pl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 60:73:d5:1b:04:25:0c:74:59:f0:54:11:cf:4d:7e:a7
Serial Number (int): 128207324027772123776295901494653058727
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fa:c3:a1:db:9e:fe:8c:de:02:cc:8d:23:20:38:8f:e8:ed:ba:35:e4
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 4f:20:36:f4:df:f0:fb:d6:a1:aa:e2:41:57:1c:b9:bd:a2:dd:88:09
Fingerprint (sha256): a9:cf:b9:08:1c:bd:07:a2:e7:f1:b0:48:69:24:42:13:9c:8d:56:39:7b:31:32:5d:fa:89:e0:cf:4f:8a:5e:fe

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.cinkciarz.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cinkciarz.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cinkciarz.pl
cinkciarz.pl

Other certificates including the domain name cinkciarz.pl

(limited to 100 certificates)

media.cinkciarz.pl
g.cinkciarz.pl
pomoc.cinkciarz.pl
www.cinkciarz.pl
estore.cinkciarz.pl
Cinkciarz.pl Sp. z o.o.
*.cinkciarz.pl
pomoc.cinkciarz.pl
Cinkciarz.pl Sp. z o.o.
fx.cinkciarz.pl
fx.cinkciarz.pl
onet.cinkciarz.pl
Cinkciarz.pl Sp. z o.o.
sni.cloudflaressl.com
sni.cloudflaressl.com
cinkciarz.pl
cinkciarz.pl
fx.cinkciarz.pl
api.cinkciarz.pl
mob-api.cinkciarz.pl
go.cinkciarz.pl
praca.cinkciarz.pl
go.cinkciarz.pl
api.cinkciarz.pl
pomoc.cinkciarz.pl
mob-api.cinkciarz.pl
fx.cinkciarz.pl
forex.cinkciarz.pl
media.cinkciarz.pl
media.cinkciarz.pl
media.cinkciarz.pl
g.cinkciarz.pl
ssl392667.cloudflaressl.com
*.cinkciarz.pl
mob-api.cinkciarz.pl
fx.cinkciarz.pl
media.cinkciarz.pl
api.cinkciarz.pl
fx.cinkciarz.pl
*.cinkciarz.pl
media.cinkciarz.pl
fx.cinkciarz.pl
cinkciarz.pl
mob-api.cinkciarz.pl
cinkciarz.pl
*.cinkciarz.pl
Cinkciarz.pl Sp. z o.o.
ckpay.cinkciarz.pl
g.cinkciarz.pl
*.cinkciarz.pl
Cinkciarz.pl Sp. z o.o.
cinkciarz.pl
api.cinkciarz.pl
g.cinkciarz.pl
api.cinkciarz.pl
www.cinkciarz.pl
cinkciarz.pl
ssl392668.cloudflaressl.com
api.cinkciarz.pl
login.cinkciarz.pl
fx.cinkciarz.pl
cinkciarz.pl
forex.cinkciarz.pl
Cinkciarz.pl Sp. z o.o.
media.cinkciarz.pl
fx.cinkciarz.pl
g.cinkciarz.pl
ckpay.cinkciarz.pl

Certificate

The complete raw certificate details for *.cinkciarz.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBfjP8kfEikXYovG/Vcj
hyetioshqaEZUzGKn2Uiu0if6ykyt0CHyWfHkAWCt77a+KrJ0gbs1i99kEOIPUWN
Dd9un3/wUF1ChQBuMNVnY5piDaU5f5+VaIFtfmMy1K8aJxrH5O1HC0AbgIloYVpc
WnORslzjw/yHMnG7d1w/JI6etPCv1hEY9JH72eV1no8nFpXVcJkXnVdYlhAEkvra
Vqv9PWh9HFlNYQab/7wOsEbdbRylLE/QwXJZZIdPIoMkEvtbDpkMqOpimTCwItOX
i7pvZdpx8aY7tupjKJn480jRrkYQYPXykpU3+pdBPFS9X1NIiilv2kOfT+XwXnFX
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128207324027772123776295901494653058727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cinkciarz.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23744580793591159630042827727251998012608168445659174651798458951989640597836281532862707444212605543879392771871139647860539386747774610408569416809394588766684764608033429353257963744618915272991118028498505838164448201488689174700404990501861000888223985082469176154145134776020265608686566767121904513013739653347764543044931881716754450657178283815724015363449822324006737870083192277968849350149071908850308816355399753164862303291610033306515099057074344363552451170848007336356885024351386721424378269094373271463128582237446800401454264189323023948051051456856741418692736361272256309560413642532102513711061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fac3a1db9efe8cde02cc8d2320388fe8edba35e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinkciarz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinkciarz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017729b23ef80000040300473045022100800a32f6245b96a8aba166ceff61738ac3b38a2772d05dc1959b688b67cc924f02202b2536c4767e626fcb5616aa1710ad9ecac45f4f1f49d835125382d2a4fddaef007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017729b23f200000040300473045022100a38faa237ee84d615b5ce0d5199c2d1284e8491468c2e133197f7c01f9aeff7002200a6eca881f474b20264c9b973ed058868505fa349716f80e17b6f43fc3d0656e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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