*.lekam.pl

- PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:99:6d:5d:41:75:c4:7c:95:c5:75:ff:c4:75:89:17 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o

Organization: PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o
State / Province: MAZOWIECKIE
Locality: ZAKROCZYM
Country: PL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:99:6d:5d:41:75:c4:7c:95:c5:75:ff:c4:75:89:17
Serial Number (int): 15418147544114712929068060545866107159
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a9:f5:5e:9d:7d:dd:51:5f:91:c6:0d:be:b6:71:04:82:7c:98:ca:2f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 8a:01:c7:46:a2:37:77:eb:cd:d7:2e:0e:27:9c:e8:fd:06:62:d4:bb
Fingerprint (sha256): b2:5a:d5:59:42:0a:cc:5e:55:54:ea:40:c0:8d:a0:41:7d:bd:f7:eb:e4:5d:0a:f8:e5:a9:19:95:48:ec:1d:c4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.lekam.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lekam.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lekam.pl
lekam.pl

Other certificates including the domain name lekam.pl

(limited to 100 certificates)
*.lekam.pl
*.lekam.pl
*.lekam.pl
pomoc.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
pomoc.lekam.pl
sd.kormotech.com
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
dms.lekam.pl
dms.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
*.lekam.pl
vpn.lekam.pl
dms.lekam.pl
vpn.lekam.pl
dms.lekam.pl

Certificate

The complete raw certificate details for *.lekam.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15418147544114712929068060545866107159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MAZOWIECKIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZAKROCZYM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PRZEDSIĘBIORSTWO FARMACEUTYCZNE LEK-AM sp. z o.o'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lekam.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859969967043165633674580814791552954823867719900485527245876723972122722029008208873847304159030842440498757993168779845818708361468150188333155913017169660466674364091213812819731975727166216055244001125109844399643052898721691841874214246843680130267399737217391840047018814138991169553430182221193751468283410958382826234355265082125934786188912082897711886433290448556765876341990437879638060682828075269228166362452542709808485838364543576665625173887864345080624451876583260059006062432146931505868725350488881805127364138972437551990300196596998245959648935592161796192948224185332963561811338768354117865527046447793241175056357144988156143828694337353315935369772618269413690547972245429932023194997937521408290930094800472505309694179634441075059604842482490010661230420177216294704454895870314713951900007106471678182871598275682116788620540488756781941281163973560715275486630750759720608726258725169616097521997000432997289425756754486582258961007442679721020325034681399374274443837373075147528239135500788266597062804465326955537030880298783004270618295797019454724427074069042137768536081187873003832167044708015347686212062334307502354228359790457491463647127956729065713447802484853365880375966480872921713179914623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9f55e9d7ddd515f91c60dbeb67104827c98ca2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lekam.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekam.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b0999b53b0b2049cf5ac64d090a694f3d33c68d6876b2a61c322cb2cc99910fc446efd0f1c40390d6602082301dd69c5cd66486c540f070612776587f0218d866a0f56f6d1158cdf19d87ab8310f05c28ec546ea8fb6f4cab4fcb3327fee62b91ad1152cb004bdaa0aac252e7624fd46bea083e216294131e9796b98cc7049b5c19673be02d5f06f756c49cdffbd64705f29bdc2b91f960279625eb4d5a3caac43ee8f8d2818aab61f29b52c2d48ed63f8cce3224881c5c2861daf76164e515ef6db67834d1ef45c6b17a677e55b93c1eca2882c2d16fdbfb7177aa535e029a2cb0a1c0fd91427be414257f76d5bf508f996f807187dcaa9de04521d8a8a4863