www.polyindustrial.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1b:c2:eb:88:8a:9b:a0:cf:6c:27:9e:3d:a0:f1:e2:02:7a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.polyindustrial.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:c2:eb:88:8a:9b:a0:cf:6c:27:9e:3d:a0:f1:e2:02:7aSerial Number (int): 270783574892479464924992924316595468239482
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d3:cf:03:a3:2d:17:c0:47:24:c2:6c:b6:66:ca:42:12:83:b4:b4:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e7:e3:8c:42:56:03:76:2d:60:aa:d2:59:b6:63:66:87:9e:30:7b:61
Fingerprint (sha256): ab:c5:68:ac:9d:8b:af:a9:a6:66:76:42:65:5a:1c:ed:e7:ee:39:9d:74:df:02:1a:95:ec:7e:b9:8f:9c:c3:bc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.polyindustrial.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.polyindustrial.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.polyindustrial.com
Other certificates including the domain name polyindustrial.com
(limited to 100 certificates)
www.polyindustrial.com
polyindustrial.com
www.salt-lick.com
polyindustrial.com
polyindustrial.com
firstron.com
spiritofcommunity.org
spaceforced.com
callertune.co.za
www.polyindustrial.com
polyindustrial.com
www.37782.com
radioavol.com
www.polyindustrial.com
datavid.com
pot-luck.com
www.polyindustrial.com
www.traumadenacimiento.com
polyindustrial.com
www.salt-lick.com
polyindustrial.com
polyindustrial.com
firstron.com
spiritofcommunity.org
spaceforced.com
callertune.co.za
www.polyindustrial.com
polyindustrial.com
www.37782.com
radioavol.com
www.polyindustrial.com
datavid.com
pot-luck.com
www.polyindustrial.com
www.traumadenacimiento.com
Certificate
The complete raw certificate details for www.polyindustrial.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgISAxvC64iKm6DPbCeePaDx4gJ6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIwNjQyMTJaFw0y MDAzMTEwNjQyMTJaMCExHzAdBgNVBAMTFnd3dy5wb2x5aW5kdXN0cmlhbC5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDIXs4+4LYTm4zMMCOzD2wq XXQCBXGY8m/HW+LjGgMKfvsGGDMZf57FF/yXvVNmB/khmg00S2dV1ScGKJmsq9AE kl79txeg6boyTqBk1igIqekz/Ovge7iDLoaL8WTQnv0p1gk7UN5XXQAqzCpNwof7 awPAAIFvw7uC84n7k+VmJF8yjnKryTFTJfpP4miiQJDDWfjtqoqmsZTkJEKl+ZHU 17foGm61O2uZ+tJf0DDusVkhTcurTfhnZJANjcqyPv3KxF5jZVAmj9da96+gRC/+ t0MnYtT5kuRssIPve4l3/4fbCH5X7gv4MUl1AXPw1lLWkk+3z6KK7P9rhIGojP4l ActO0hIcBs2+rIt/e4lLhfA13Kc/lQ8er31bXw6Qb2M5BDlwek9UXx7pwU7tGN6F mc05rMQnlXLA4qU3ogF2ECLsdl+lbEBYJHfzMLdN51/j6PORr7x9UYxAjnugHTyS lKX+/fd8gPJIm0/rndf+w3dogiFjWYwDqoPhfnNbKP7q/5xxkd8bw6+cpkCDhmDW fp4kD1/NPiurnTfFSc2eWmYRZbixcuvkocRxSci5WeLDYGMCjmuWAidlNKDac0Sf wGRp1VmqWR4Uc31BPT3KFPbwAmDaLft/tu18+UZcLY2dNMckqRgpAvh/MJnEx7yX tvGAjrkJKfcqQjPjeLzthwIDAQABo4ICbDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTTzwOjLRfARyTCbLZmykISg7S01TAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5wb2x5 aW5kdXN0cmlhbC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF BgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKE GHWWgXFFWAAAAW75DuC5AAAEAwBHMEUCIQDEuVmEQU4WVxLO0A0m8b0hI1wL3nd0 sKj+f/ZPEKlmhgIgSQ98LbRXIFGggmNXYBaUphQpLGCEHLMHCDk18kJRc+UAdwAH t1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW75DuDbAAAEAwBIMEYC IQDM5zOZAVNRCgU3XdUQZfGyeJt/aSFTgUC3IDRIC+xxEgIhAOLXpGrapmqhwQgm ZOV6VCsSiXb3I9pkPwcx+ywE3FQDMA0GCSqGSIb3DQEBCwUAA4IBAQB0Kf8BQ0IH UB4JCn7ZJtq9ISXlbVwCdTpT1x24P1dWIRaM4wFmhJluFM0lWRGo6vwdYBLLhDU9 z4xAyJr2+UHI5KK6ocPHJ7VCSzFesAEoACVwXWW7eGzoZ2q8onav0eq8CqxVTyrJ LoTUhrhp6TFEEjK7pwempikbrWIAS6zsXVJtDXyM08GvIO3FTCPYIyCRnn1uQI5H fUygpz6lPRztvE1hnHY/btAKB4aE0l3UOXV6y3a7zZQwYVip/fTvJOhXFtStEzkM SoEzr6WcXBPB+hXbZvUcZLlk3CRyXYdfgFrCGG6VewQLIS7TMfwM79YjNX/Z/j9c gM0LxgN+27Si -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyF7OPuC2E5uMzDAjsw9s Kl10AgVxmPJvx1vi4xoDCn77BhgzGX+exRf8l71TZgf5IZoNNEtnVdUnBiiZrKvQ BJJe/bcXoOm6Mk6gZNYoCKnpM/zr4Hu4gy6Gi/Fk0J79KdYJO1DeV10AKswqTcKH +2sDwACBb8O7gvOJ+5PlZiRfMo5yq8kxUyX6T+JookCQw1n47aqKprGU5CRCpfmR 1Ne36BputTtrmfrSX9Aw7rFZIU3Lq034Z2SQDY3Ksj79ysReY2VQJo/XWvevoEQv /rdDJ2LU+ZLkbLCD73uJd/+H2wh+V+4L+DFJdQFz8NZS1pJPt8+iiuz/a4SBqIz+ JQHLTtISHAbNvqyLf3uJS4XwNdynP5UPHq99W18OkG9jOQQ5cHpPVF8e6cFO7Rje hZnNOazEJ5VywOKlN6IBdhAi7HZfpWxAWCR38zC3Tedf4+jzka+8fVGMQI57oB08 kpSl/v33fIDySJtP653X/sN3aIIhY1mMA6qD4X5zWyj+6v+ccZHfG8OvnKZAg4Zg 1n6eJA9fzT4rq503xUnNnlpmEWW4sXLr5KHEcUnIuVniw2BjAo5rlgInZTSg2nNE n8BkadVZqlkeFHN9QT09yhT28AJg2i37f7btfPlGXC2NnTTHJKkYKQL4fzCZxMe8 l7bxgI65CSn3KkIz43i87YcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270783574892479464924992924316595468239482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 06:42:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 06:42:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.polyindustrial.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817439646788199238160930105737327134772553598886140261108678637306683411646936076768769121709261001507406694929961284040245397807959556669353922785722261878794838075413850572364311261294202092433719981919840088278467586201429289894285687756475243312328685303201738870732154657878401109979291105258209913345674667322898601919654454673249915288643400249603447752615784820390017048737149122979816917781666701584732391307842964430628281549123570561936433098043897467232464058867822784909697712448509387786826844163270928984396261957494442197584802890234346848695148446739899550096975374982254313667572302699545212946041713430189604953927139590092999786854727317927153535871866880331325259615736133129769181022181392368146866565093546754344725109630283833837656387063165087832186531035869607418084585752479820863049507750336618479934281741678387194896105700178184133726408841180273946953593470310473753094304858421354050234479453797036144136071728501746654068808569196744669642011208035442136582229960695220867196043942814184320512610472892354788776406570836599115796282515245045400088364032620810473137231918027357738796034319152754961867142285328622347053469870467596529221628579047458269200016863152925585418300127977840843539284290951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d3cf03a32d17c04724c26cb666ca421283b4b4d5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyindustrial.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef90ee0b90000040300473045022100c4b95984414e165712ced00d26f1bd21235c0bde7774b0a8fe7ff64f10a966860220490f7c2db4572051a0826357601694a614292c60841cb307083935f2425173e500770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef90ee0db0000040300483046022100cce733990153510a05375dd51065f1b2789b7f6921538140b72034480bec7112022100e2d7a46adaa66aa1c1082664e57a542b128976f723da643f0731fb2c04dc5403 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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