sopiz.ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:0e:92:87:de:cc:76:e3:be:f8:60:ed:3d:51:9f:93:fa was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sopiz.ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:0e:92:87:de:cc:76:e3:be:f8:60:ed:3d:51:9f:93:fa
Serial Number (int): 277689781430545348335060528065720069624826
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:90:b3:e4:96:1f:79:dd:5b:14:ca:b9:46:4b:83:02:56:95:ce:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:18:5c:20:08:50:57:f3:79:37:c8:2e:ec:fd:c2:95:65:fc:7b:dd
Fingerprint (sha256): bd:0f:56:f7:26:c7:69:a5:1b:e7:1f:fb:6e:b4:fd:49:14:af:4b:2a:8a:10:28:f1:38:4c:2f:7e:ff:71:e4:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sopiz.ptma.pl

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sopiz.ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alps.ptma.pl
bialystok.ptma.pl
czestochowa.ptma.pl
grudziadz.ptma.pl
katowice.ptma.pl
krakow.ptma.pl
krosno.ptma.pl
lublin.ptma.pl
slaski.ptma.pl
sogz.ptma.pl
sopiz.ptma.pl
sos.ptma.pl
www.alps.ptma.pl
www.bialystok.ptma.pl
www.czestochowa.ptma.pl
www.grudziadz.ptma.pl
www.katowice.ptma.pl
www.krakow.ptma.pl
www.krosno.ptma.pl
www.lublin.ptma.pl
www.slaski.ptma.pl
www.sogz.ptma.pl
www.sopiz.ptma.pl
www.sos.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for sopiz.ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12Aflya6QTvbrjozTIDa
KUIP/NgJRxUDTr6rPPqt2xhPsfIrZt4tNBr4ag6skzULoAh/+E+mHFuxak+VuZ+U
VmQkV5aUPR81Txkmjr1nNkzT1Dp8PwW6kaOsbpLvOSifefXaLFB79Jv4ANB5+H1G
8deZvfUG9fyyHsG1/C/8d0ceLipCl+oQ+MZSDXX2cRxVl5kxJlXgK5dRprRjFvrG
vQpasUBCgPUuyPhzr1zVZ7r+w9fG+m6u7Li5kXvJ5j1j696G6QnGwwOdQ9H1mM6r
RoZRn6N+L1NVdPR71tvQkXCDgsKTnuY/UtuUmrK9AukAbEhg0RGUZd69DA9KhHzq
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277689781430545348335060528065720069624826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 01:25:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 01:25:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sopiz.ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27188635782939629429606640664736228132101872077068010420136021275200287628682303451159274830061910293398102838784340295477194514272156820950358877832123264418000527080383446334824664725496926763865600567210047321935995869039857634790588335028277480318995384654273095993429038644378297397781532624824337899820014256645669895999368994389617264176822443858778945448704915128625378892063231519876492406122641290298271336704737101146968654099293247556895610260770170424092713584130147897205352216701749703176832076491172779282912940378782876611457625529391557103783557151496337062689736697860885004752813155877301390207573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8590b3e4961f79dd5b14cab9464b83025695ce2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alps.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czestochowa.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grudziadz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katowice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krakow.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krosno.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lublin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slaski.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopiz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sos.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alps.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czestochowa.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grudziadz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katowice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krakow.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krosno.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lublin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slaski.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sopiz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sos.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b2574ea3f0000040300473045022100f385f83a169b5d45db67f755d8e94a347d3535b7bb445c2879025688d216243002205c416eb81210ca8e969d4eecf278bdb02bf5ff8607fd7bb37b80440bfa81c4ed00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b2574ea2e000004030047304502204095fa568f9879367d2702884f3dadd13b4c40fd1ed2a8bbd5850daf8f1e487f022100ba5b770a04f5898b568b8217a1a30b755e0255bf78ac3d71274af287b5b9b1fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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