*.grupaazoty.com

- GRUPA AZOTY SPOLKA AKCYJNA -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:38:0c:f2:61:5e:3d:3f:b7:ee:62:68:f1:3d:bb:b9 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GRUPA AZOTY SPOLKA AKCYJNA

Organization: GRUPA AZOTY SPOLKA AKCYJNA
State / Province: Małopolskie
Locality: Tarnow
Country: PL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:38:0c:f2:61:5e:3d:3f:b7:ee:62:68:f1:3d:bb:b9
Serial Number (int): 12254083178406739694814973798658194361
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 98:04:9b:83:73:48:af:e0:57:cf:28:37:25:c9:fe:6c:d8:16:1c:59
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 97:22:d0:78:bc:3d:22:80:44:d8:2c:9d:a0:1a:9c:62:11:3a:65:ee
Fingerprint (sha256): bf:3f:93:73:2f:70:36:9e:45:96:31:94:d2:ad:cb:7f:6d:a2:b3:e9:4f:b7:c3:23:ae:23:e5:28:08:d0:8a:ea

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.grupaazoty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.grupaazoty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.grupaazoty.com
grupaazoty.com

Other certificates including the domain name grupaazoty.com

(limited to 100 certificates)
ebaza-agro.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
fosfory.pl
ec.grupaazoty.com
navigator.grupaazoty.com
zatlyncedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
zatlyncedge01.grupaazoty.com
*.grupaazoty.com
ec.grupaazoty.com
ec.grupaazoty.com
*.grupaazoty.com
fosfory.pl
webmail.grupaazoty.com
navigator.grupaazoty.com
navigator.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
ec.grupaazoty.com
navigator.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
webmail.grupaazoty.com
navigator.grupaazoty.com
vpn.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
fdb.grupaazoty.com
zatlyncedge01.grupaazoty.com
Zatedge01.grupaazoty.com
platformazakupowa.grupaazoty.com
*.grupaazoty.com
navigator.grupaazoty.com
webmail.grupaazoty.com
*.grupaazoty.com
rekrutacja.grupaazoty.com
platformazakupowa.grupaazoty.com
ec.grupaazoty.com
fosfory.pl
navigator.grupaazoty.com

Certificate

The complete raw certificate details for *.grupaazoty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PLd6GlK08MJNSUwMUf9
FNwbMnp7K8iNj3onhgVXtPeUIUgn+1zjQ89ujo/Nrc/J6xwT70ZslJw2onFDfDaM
+qF3Q2mvfyFDXh4WfHbLy6YGnJsh8/CTIk+qcS0deiIqhAGw+hH8heZrHpoI5vSX
jjXVWWoyknjR2r8lJwSLZZL0HH3RafQjW7NLNtobhcDLC4d35JMPsliBRLCZuDq/
+DDvRIsnWkwKMaNmhH0K1pmp1ZEu0fRITBSMqi8Dt81qNqNuIdued7MOq9wXix7O
JHd2z27XZdkcy2sQXEXs7A/Pvsqvtu6aaeXlmecKeu4gDJoUvwdS7W4Ig7wwPdAi
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12254083178406739694814973798658194361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Małopolskie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tarnow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRUPA AZOTY SPOLKA AKCYJNA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.grupaazoty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26377329529206936171733573285169234056771225024159804750998704113662713011834151781350031497151909447034177248930346374259771523064634827824342724420497069117284985596538551495692626229813569149399939964012818167326705746247744007519418524901747474347579193843986998623642515720009625705663183275944881554846299731322123261418436821942722213972978343937884980806161627650618682455068959047855000253401036291621355385516772532045589341665257054723929422409226739669198811306712122824229853057327531738943305124898874429963036183489918562182587533924616927813740022480359978941234690771775918564518258797165088632480271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98049b837348afe057cf283725c9fe6cd8161c59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupaazoty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupaazoty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c073383e80000040300483046022100c895a04deb6614501591be3b904192537106c1253d778a55b2f0982ed1a8b3d1022100af709831b498244d8ecb9e1c7ec9b75a4f4564831af22be2e5560c827f54427b00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017c073384130000040300473045022100ba264f4aacd6f780894a8104bcf27ae8a8060e185b6c305b42c7ea9978967e4a02206c7bf1b4904273f96ee89b5426dc7f71c01896bb4b2b4c70a90bca27c87171b900750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c07338406000004030046304402205337ac946544883ad484745fa6d1d656bd97788a0d163fd43eff8109ba01dbb702200fa055d7f69e6fe2ffdfb5e41e3858b17a88d292df72fa7f67b4d7b82270f5ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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