*.staging.sts.pl

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 58:f0:72:b4:e2:c4:27:0a:78:d6:fc:6a:2b:a6:c0:34 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.staging.sts.pl,C=PL,1.2.840.113549.1.9.1=#0c0c61646d696e407374732e706c

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 58:f0:72:b4:e2:c4:27:0a:78:d6:fc:6a:2b:a6:c0:34
Serial Number (int): 118220541401065770350127587214039105588
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 16:30:ef:ae:e2:89:8b:7d:65:c0:d2:45:c2:34:5e:51:99:c8:f0:b7
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): d7:f0:4c:a4:05:23:4c:ca:5f:00:35:20:68:96:59:20:f8:5d:3a:c9
Fingerprint (sha256): b1:02:7e:c7:57:3d:f7:c1:5d:e6:c2:99:75:46:33:8e:28:5e:ef:64:b1:b5:87:6f:5e:15:a5:8d:47:21:32:f1

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate *.staging.sts.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.sts.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.sts.pl
staging.sts.pl

Other certificates including the domain name sts.pl

(limited to 100 certificates)
*.sts.pl
sts.pl
s5.sir.sportradar.com
retailstatus.sts.pl
*.sts.pl
statistics.sportradar.com
s5.sir.sportradar.com
sts.pl
*.sts.pl
statistics.sportradar.com
cudrqv.sts.pl
ssl437556.cloudflaressl.com
sts.pl
s5.sir.sportradar.com
status.sirocco.global
s5.sir.sportradar.com
ssl437555.cloudflaressl.com
s5.sir.sportradar.com
cudrqv.sts.pl
s5.sir.sportradar.com
sni.cloudflaressl.com
*.sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
ssl437554.cloudflaressl.com
partner.sts.pl
ssl437555.cloudflaressl.com
statistics.sportradar.com
status.meshcaid.com
sts.pl
sts.pl
sts.pl
statistics.sportradar.com
statistics.sportradar.com
status.sirocco.global
ssl437554.cloudflaressl.com
iacdn.sts.pl
s5.sir.sportradar.com
s5.sir.sportradar.com
ssl437555.cloudflaressl.com
status.sirocco.global
status.sirocco.global
ssl437554.cloudflaressl.com
incapsula.com
statistics.sportradar.com
status.meshcaid.com
sts.pl
statistics.sportradar.com
ssl437554.cloudflaressl.com
ssl437556.cloudflaressl.com
www.sts.pl
s5.sir.sportradar.com
sts.pl
s5.sir.sportradar.com
sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
status.sirocco.global
statistics.sportradar.com
ssl437554.cloudflaressl.com
statistics.sportradar.com
ssl437556.cloudflaressl.com
statistics.sportradar.com
ssl437555.cloudflaressl.com
ssl437554.cloudflaressl.com
statistics.sportradar.com
retailstatus.sts.pl
statistics.sportradar.com
statistics.sportradar.com
statistics.sportradar.com
s5.sir.sportradar.com
ssl437556.cloudflaressl.com
s5.sir.sportradar.com
sni.cloudflaressl.com
status.sirocco.global
ssl437555.cloudflaressl.com
status.sirocco.global
statistics.sportradar.com
status.sirocco.global
statistics.sportradar.com
ssl437556.cloudflaressl.com
status.meshcaid.com
s5.sir.sportradar.com
status.sirocco.global
ssl437556.cloudflaressl.com
sts.pl
s5.sir.sportradar.com
statistics.sportradar.com
links.sts.pl
*.staging.sts.pl
*.staging-docker.sts.pl
status.meshcaid.com
links.sts.pl
statistics.sportradar.com
sts.pl
sts.pl
ssl437556.cloudflaressl.com

Certificate

The complete raw certificate details for *.staging.sts.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYykyNzlDZGJ80EmiKkx
H9lmyik1h/9Gvyc+vEcwCgTyI1ct3M36bLj+iO3zziPZwfwxlKLBgCfRWZwuRiYC
53aWsXVLT1ijZbdm+KHafRAabxDet9oVOcci4vmAVblEvPlrSrPkcwalzhcoCThm
sVd5/mU7suEbzNe5Ako/824Nil7SVeNcqvwvPMJvLW029P1A2IL0nnf3B0lBctus
thCzYHMynuaW/iIT4PrE073xbLCbzLmN8oT1FebiGuS9n9pqtGUfwz1247aT2hpm
GY9XWWDify7fs/pWr5jW7TOZNu7z9EBO55RAx7ReEQ0/DsVdLjNcW26TgXhM45+x
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118220541401065770350127587214039105588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 11:52:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-10 11:52:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.sts.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20393721087895588638264711195089742843126599383235294838344208865627021672927304237490242984566688560481330905038358141709712191478960130389871153143618457232539344148678207067182295042753874694087683616443160039081088544252901145587176851361360416802909225849949036073164234578392181289887469538993683967016678197312444852230727322231621593959480080802425796368261839587530473280065836810624018961249225252486849993756653243949993660276389627152078351304507275471181057592930051377772873422307382274414024304044930225975032184837020949782009898610758442386460622203549602241792441101211852133069205647828253853856199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1630efaee2898b7d65c0d245c2345e5199c8f0b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.sts.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.sts.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e3dc4cb2b37ba328345622f2196f316058b33f84bc9ac1a3db344e993842bcd607f9fb61aacbb60ef83a74405925ef93008b181b8221c7c382fd8b0629f9028f9ecff9f2058b857a5473fbbc507c69c87fd01d2b3d87d3a8cf0c739c9bbc4511fcb4ffe37de59d3726dd020ab874de65bcb79a187027f8a47fd30602f9058828dca4f9d4ed7346a43d7ea2a8211b57d83b04748ed9958d9c77797072cfd10250f71e7f2e66ba476bf96167d9d3add54f18be0589355b488175eab229606274474fa6ca3b0cd2eb6771727a9f0e9cc9277bfaf6b8990b7dba7721995076b85cbde55271ab84ac9d07c8e1bbe43b5eaebc7f60b453b4ab914970e1e88fe731e48