ior.jakubchmura.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:14:03:55:6e:25:a9:f8:ea:40:1c:13:2f:8d:03:11:7d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ior.jakubchmura.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:14:03:55:6e:25:a9:f8:ea:40:1c:13:2f:8d:03:11:7d
Serial Number (int): 264426000967107030649239044971190804484477
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:9e:11:58:5d:a9:7c:93:9d:e4:fc:83:4c:d8:34:ea:5c:64:c5:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:d2:15:3c:07:a1:40:42:e0:d0:6f:ad:d2:8a:c1:93:c0:9e:1a:bb
Fingerprint (sha256): ad:a1:cb:4f:9a:77:5d:ec:2d:63:8a:ec:1b:3f:f9:62:d1:93:8c:d0:11:8b:57:e0:4d:bf:21:59:5c:56:1f:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ior.jakubchmura.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ior.jakubchmura.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ior.jakubchmura.pl

Other certificates including the domain name jakubchmura.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for ior.jakubchmura.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISAwkUA1VuJan46kAcEy+NAxF9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTMxMjQ5NTlaFw0y
MDA2MTExMjQ5NTlaMB0xGzAZBgNVBAMTEmlvci5qYWt1YmNobXVyYS5wbDCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOp3xlUsOb97GV6p9UPzjfPET5fi
RzNGbGp+tc4YX4tlzViCLgULv5k2rbjflncpCfm730mgkx6hC7LojgPbW/9ABg4n
KF5qPsy1FKmZ2ZhadFF4CP9s9Qjfieszpo1557niTQf/LBFWteTH29I/tKcICtaR
IPAEJ2p+AgcqFEOZZ+evsauN3hqrLC/31uZEJ/Q/PTK2rMGW42fq7aKpKAiQSk71
bH5L1orViM7C2sxImcpZJ1rJz1CCZqOck10phsfXdm7GoUlRQjNjraR8PxP5xbE7
KpYIX9QVbtcKErh23/oE3Gs+w/uVJPVhAvQptPT0bSEgY5Vxi30V11zBK93AgFKF
i+94gPWff4mcZmfQ+FPCCYc09k64yen3uLiV0R+ANQEKBl0q8bRiHKOhyg1X7mNb
xwA2V6XsHPGvhxAPw9YuWRscZxxsZte/RQQLAmjNQRSbSAPAVfVDw8NJ4ovA8KgU
ypKht7ZBJ2ICPJYs1tw+L5VqhluakbYsN5k2+vVget8ssNne//u0YDmfJtSJ6NRB
OWvV91V7Ai9KA+cXxgt2Cr7GfVraZcoYQUkHACoXrVb9HDWH6qt/Icw6Pvnrc7RZ
Hc/y2u9Yp5qo8gwsac/NIcmCZrVAbbs3KNdEyjG/eQcO51fRqhBc8EboDZN43SbZ
CKRaJxL1oc8X0T5bAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FHaeEVhdqXyTneT8g0zYNOpcZMUVMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISaW9yLmpha3ViY2ht
dXJhLnBsMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA
AAFw1CitoQAABAMARzBFAiAlN1/Kw5aiFRzY392rBRlIJ47kMFSIp10iBDVFmgle
owIhAI7bOooyvOS0Qk3pSJe8QDWRKLUuWnc7gmOp5hIpdl2RAHUAB7dcG+V9aP/x
sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw1Cit7AAABAMARjBEAiBw9OlWLQyc
sEYc1+CpXE0BYia+gAV8i8t6prPxu+4IWQIgF4BQfAhuGzkb2V+pT4YmYqDZMmPG
qZvlPMzutw4D87owDQYJKoZIhvcNAQELBQADggEBAEvguFs+KcKl8psimSyzT4gW
ub7FodyV91DuWatsdR9mloj72CE6O41WCcD0XQd6aVLXosGnDOBc2QfvUk8MZPxo
Um1C7NogCXtL+Q7epmx78KS7xp0wmFNxcm4LTIUr3rbaQjEG9qgqbLSSYk/0teQ8
278UI52M5Z6/NEEBE07fKHbLeBF5R74In18QftwqFrS/bNGViy/U76ixjPKZVCjD
2FmwihaZrEfk51z7AojPVNsrR60ynhlOIeEKJnwX6oEX9D8EcPAMaN91EYZudq0U
fDhOpM/jW3VZCSNeNaa6vIMRXiacaVSYfVRbwUN1fUuKydV4LqSK4ZmyroDXONE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264426000967107030649239044971190804484477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 12:49:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 12:49:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ior.jakubchmura.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 956545455259849571635611952169732462115718477487680070637311280518395682412390894070529703431678154007811904871000913653403232320658265689134811722591870783277566439426614337205581909508943041672600118555471933367112197620103892622053253643443666129693539531596779037066262938054741575649325289868198040105561347031658585280233694760805417793353770998653034689802624893734985269077769272614392184119901551508113376274511420382922114580788920332543455147301751821588022509154474187387819166720752175972419366621683133009217499392732658201305251064481403833437017911693567897643995200206060877576547174550181203043778974808024294010602669970939084779081924558706867188505775298175300250483448084005718041384030506468607234728404483222957509871119331845146170145874723536928358292547416247320192969487742874561291440242123435189108385606032440854635288257043467383532317536222191859788249836911879522191427540293307380751411508401630130657810569954821329439658888248199363865348143592884226902201957308204416395559061107395632321438605546340486178548651958271543076890334806098334514620618579045104482537041922047732280820154354728218307208947462592915811299163808969853558367838286465278601308604648341632566728084714526494848256654939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							769e11585da97c939de4fc834cd834ea5c64c515
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ior.jakubchmura.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170d428ada10000040300473045022025375fcac396a2151cd8dfddab051948278ee4305488a75d220435459a095ea30221008edb3a8a32bce4b4424de94897bc40359128b52e5a773b8263a9e61229765d9100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170d428adec0000040300463044022070f4e9562d0c9cb0461cd7e0a95c4d016226be80057c8bcb7aa6b3f1bbee085902201780507c086e1b391bd95fa94f862662a0d93263c6a99be53ccceeb70e03f3ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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