lajtit.pl

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:75:97:3f:cf:d5:dd:cd:32:bd:08:bf:83:02:de:88:6c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lajtit.pl,OU=Domain Control Validated,C=PL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:75:97:3f:cf:d5:dd:cd:32:bd:08:bf:83:02:de:88:6c
Serial Number (int): 1492294483954905859322226430582133675165804
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ff:fc:63:9d:f8:da:66:d7:43:6e:21:ce:c7:9d:9d:6d:e4:2a:66:c9
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 11:51:8b:a0:64:1a:1e:30:3a:5c:2a:29:3e:d2:b4:f5:29:b6:24:60
Fingerprint (sha256): b7:40:8a:53:96:8b:c7:62:0e:2b:b3:3a:1d:f1:96:5b:ec:b8:9f:79:fd:2e:e1:99:38:d7:84:f2:ed:9a:15:38

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate lajtit.pl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lajtit.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lajtit.pl

Other certificates including the domain name lajtit.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for lajtit.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgISESF1lz/P1d3NMr0Iv4MC3ohsMA0GCSqGSIb3DQEBCwUA
MEwxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYD
VQQDExlBbHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE1MTEwNTA5Mzg1OVoX
DTE2MTEwNTA5Mzg1OVowRDELMAkGA1UEBhMCUEwxITAfBgNVBAsTGERvbWFpbiBD
b250cm9sIFZhbGlkYXRlZDESMBAGA1UEAxMJbGFqdGl0LnBsMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAyHKr+qtrMnBiWGG7ulZ0/P2PSI/VgTH2qwIG
iwr0F6wrlyTSccSDYxneUKYP5/ShgDsywruJNpeTaEV06bcSKPmOVCidQja5zC4b
yTpPo90rS6wILodahOIMJSqoXZWaAhQ0gVcNkC97NgLjVA05fA0VzJxJR8KB7vLn
rWf4WrCLlDz2xmRdow1UMzAuIZrOvhAYujgk9KZnTtI/rtLbROemz9o9lLo2ReI3
N6+HO8Zh1J9gI2G+5h3FtdAv6iPV15wd/nFf8VTkXQRCALvLyZPkfZwgWAkTOVt/
1W/UgDL++UFhMHwOlogW5iZfEgbq/7402d0gelNlKldcfOD3Fpu5ezGFcB9EH7Pe
tZZEn1GkzZeymykkRCb/D/1hR1wlT0k9pTMOOjwwsn6mB/W4P8cvPZFKT9G0tCNZ
6p7sFBOdG37jVahgxDTzmcSpkbFW42TziPHQuKR9TDPh2Y/bppYgSDD0Pr+U6PrV
axefvmmqgo6TZ+DalapoxxK6fuVbuJn+WfzjxFTfp1i4oUds4iGtZhouNm+4YPKE
gcBdjv5YRjOxvBv21GL4+J+6SYg00gLLp8gZGZRSCX1kXiAyrSuiTcJ1Pll0F+zC
/4QuZuhbJROGvBnJWpHOk1oGlYKaguYc4cgL26g4gC5BUZHaOgHVyV3bPuxdmLnP
g8hpB4cCAwEAAaOCAaswggGnMA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAEQjBAMD4G
BmeBDAECATA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv
bS9yZXBvc2l0b3J5LzAUBgNVHREEDTALgglsYWp0aXQucGwwCQYDVR0TBAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4Yt
aHR0cDovL2NybDIuYWxwaGFzc2wuY29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMIGJ
BggrBgEFBQcBAQR9MHswQgYIKwYBBQUHMAKGNmh0dHA6Ly9zZWN1cmUyLmFscGhh
c3NsLmNvbS9jYWNlcnQvZ3NhbHBoYXNoYTJnMnIxLmNydDA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzYWxwaGFzaGEyZzIwHQYDVR0O
BBYEFP/8Y5342mbXQ24hzsednW3kKmbJMB8GA1UdIwQYMBaAFPXN1TwIUPlqTzq3
l9pWg+Zp0mj3MA0GCSqGSIb3DQEBCwUAA4IBAQAPVRiwuTy+MMU1qUX9gR4GYZJo
h0/RR/GebzIwKN75f50/kbM4twbOpBoeTr6Vk4yj/MBs3epCrP8Y6GF8YyJm1p6n
twSAF/JiocIAvVQVHw/RIs9zj8ogKhLDB8pBiChiMTuNZy3E04EP7AggxJkoU0hU
SUnoGTtiL8wvfBCXa7qA9SvAZnvog1+Xd7USUW3PorwY9UjlLiLACt49NwhNjitd
+3mP2/N/ApZNleNyWV0bQ3inGSExOY8JF5agnqfalWneia4t2X8HDMArlWFThAin
Thm8KvLgkY7y/+5IgMW0dEoCdm2ajFX7ClBkZ8KAs3A//CpW5JLoX1dcZmpq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyHKr+qtrMnBiWGG7ulZ0
/P2PSI/VgTH2qwIGiwr0F6wrlyTSccSDYxneUKYP5/ShgDsywruJNpeTaEV06bcS
KPmOVCidQja5zC4byTpPo90rS6wILodahOIMJSqoXZWaAhQ0gVcNkC97NgLjVA05
fA0VzJxJR8KB7vLnrWf4WrCLlDz2xmRdow1UMzAuIZrOvhAYujgk9KZnTtI/rtLb
ROemz9o9lLo2ReI3N6+HO8Zh1J9gI2G+5h3FtdAv6iPV15wd/nFf8VTkXQRCALvL
yZPkfZwgWAkTOVt/1W/UgDL++UFhMHwOlogW5iZfEgbq/7402d0gelNlKldcfOD3
Fpu5ezGFcB9EH7PetZZEn1GkzZeymykkRCb/D/1hR1wlT0k9pTMOOjwwsn6mB/W4
P8cvPZFKT9G0tCNZ6p7sFBOdG37jVahgxDTzmcSpkbFW42TziPHQuKR9TDPh2Y/b
ppYgSDD0Pr+U6PrVaxefvmmqgo6TZ+DalapoxxK6fuVbuJn+WfzjxFTfp1i4oUds
4iGtZhouNm+4YPKEgcBdjv5YRjOxvBv21GL4+J+6SYg00gLLp8gZGZRSCX1kXiAy
rSuiTcJ1Pll0F+zC/4QuZuhbJROGvBnJWpHOk1oGlYKaguYc4cgL26g4gC5BUZHa
OgHVyV3bPuxdmLnPg8hpB4cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492294483954905859322226430582133675165804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-05 09:38:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-05 09:38:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajtit.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817756235880560901284171015027892657440278148923779079979785027644647084443878251187892863370371385399136548528288304002571033716311460894274465444336911262198451562270915446991766538975254414938740341302118262649641703105272058466080821511361301313264064094553396646430199600698859042581889782223633226247046501839985757943195079090549077618214734837491803862358418453922715561331767601101579185829919422641566899984020638654582383015405547296805218301663218634053103028109512085029352195833771229737754649605151504870419095188035276735458639307432843002245395168233456182734983892194403575721982220213386838059330460072621292758344759860196264152326906812928113125090878015921154283603607074588912830905317149532699274764369319387305315357526159195350003279294804804244174838697304723998268717149624421335552977171486904308095762214062440961935052550989328459537852053951324774224582658128322984223766964695922558269994479143650660281447729888794630319190224326390971385952102725856184068163579058401685541968116391639627721992433358395253607133199925114894675850504031239857071832583415452204026620363092215897596754721572022732353235950563701247914262604408486349702929570815793915529472269506833679142950106314954650577348921223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajtit.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fffc639df8da66d7436e21cec79d9d6de42a66c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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