www.grudziadz.ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6d:fc:fa:99:52:e3:b2:e5:e5:bb:ed:54:52:c6:3b:1e:50 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.grudziadz.ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:fc:fa:99:52:e3:b2:e5:e5:bb:ed:54:52:c6:3b:1e:50
Serial Number (int): 385876188360351559667442680047057313144400
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:03:f6:6d:34:1f:ca:58:3a:22:3b:e0:d4:15:fd:c4:d8:b5:5f:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:b8:01:60:bd:ba:29:ec:78:95:b3:d2:e0:25:b4:a0:56:0c:1d:40
Fingerprint (sha256): ac:c7:c3:45:9d:80:24:97:9a:b8:2e:6d:53:00:30:54:40:dd:86:52:87:17:f8:1d:ca:34:5f:e7:d8:6a:ca:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.grudziadz.ptma.pl

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.grudziadz.ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bialystok.ptma.pl
grudziadz.ptma.pl
sopiz.ptma.pl
www.bialystok.ptma.pl
www.grudziadz.ptma.pl
www.sopiz.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)
sok.ptma.pl
ptma.pl
katowice.ptma.pl
spa.ptma.pl
socn.ptma.pl
sogz.ptma.pl
www.warszawa.ptma.pl
alps.ptma.pl
spa.ptma.pl
lodz.ptma.pl
spa.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
pulawy.ptma.pl
www.forum.ptma.pl
sok.ptma.pl
alps.ptma.pl
lodz.ptma.pl
ptma.netstrefa.pl
ptma.pl
sopiz.ptma.pl
rozdrazew.ptma.pl
ptma.pl
som.ptma.pl
alps.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
alps.ptma.pl
www.wroclaw.ptma.pl
ptma.netstrefa.pl
ptma.netstrefa.pl
som.ptma.pl
sopiz.ptma.pl
ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sos.ptma.pl
som.ptma.pl
warszawa.ptma.pl
socn.ptma.pl
islandia.ptma.pl
ptma.pl
sos.ptma.pl
forum.ptma.pl
historia.ptma.pl
sogz.ptma.pl
wyprawy.ptma.pl
warszawa.ptma.pl
ptma.pl
pulawy.ptma.pl
ptma.pl
sogz.ptma.pl
katowice.ptma.pl
wyprawy.ptma.pl
katowice.ptma.pl
sok.ptma.pl
www.grudziadz.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
gliwice.ptma.pl
sos.ptma.pl
rozdrazew.ptma.pl
socn.ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
sok.ptma.pl
krakow.ptma.pl
www.krakow.ptma.pl
alps.ptma.pl
wyprawy.ptma.pl
sok.ptma.pl
alps.ptma.pl
periapsis.ptma.pl
mail.ptma.pl
ptma.pl
sos.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
spa.ptma.pl
lodz.ptma.pl
rozdrazew.ptma.pl
warszawa.ptma.pl
alps.ptma.pl
katowice.ptma.pl
www.poznan.ptma.pl
krakow.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
socn.ptma.pl
pulawy.ptma.pl

Certificate

The complete raw certificate details for www.grudziadz.ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mc5z3yGmuRmOKn2+jXD
BBKEfjbyXOp564NMkETfZGvKhCRGa+V4o37GtErtNaNeZa0JqDXSxC+Lh0BZzV7E
kc1SZyInzjGb5LdAqnlInpq71/Xvwy1leTXyYK6IbDAcucoEwgcCNj7fzHenW11u
6PhRqoN8Y4Z7Afl6BxSbJvQVKHTK4GlFxH00Pxdud7qjvcybst+YgfsgtJO1GyU0
1gaQax2cOtdqnaz7amGhUjuJLoCh7208OmGNzB/fiTPQEuHphYJvDlh7YbTzXZZk
vB99ZlFA2EPpNT10ygt0XFrWvFzGaBEcEArO9ny/Mpkagocr+XRFrhRIyxcL9SsJ
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385876188360351559667442680047057313144400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 01:16:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 01:16:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grudziadz.ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26355809347413847567648372483170971243818813037145536537990285570164946445504020457354542470855776274828069383889805231769476028940789717274913259191125187097864917171737059936041705570951389226876365240441385609416996640514541590001530430150635851197374824393848217571313010640181543644647401615153395147603505483480783073271245306127104257993065122710828803587543676479322986495775131419106186881192307636177347517242640725830879918002554916864588419977508377719836432614427780417767349341561408137914967815292599508421432948996828052794361769790191103767707993030568708444397334581039269672952976746800124799945197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2403f66d341fca583a223be0d415fdc4d8b55f99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grudziadz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopiz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grudziadz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sopiz.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001714d46031c000004030046304402201c7b9c2636e90e7d6dbb408d49986615e8628ed9a605352b579ace7fde36cb7f0220251d1b84e030363c6603eab1cf448045c6b4a0295beec13f727ef6278d2b41ac007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001714d46030a0000040300473045022100baac953709c71330d4efb6b09293a3d7bafefe326acc94607157b9cddbfc8f1e02207d4a73cfa9a9fa0098dabf456ffa29205142dca73571466a5c4e31f5802fa36b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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