system.tuf.pl

Issued by nazwaSSL

About this certificate

This digital certificate with serial number 41:0a:49:03:8e:ab:65:53:fd:5b:e6:94:cc:51:1a:db was issued on by nazwa.pl S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates SHOULD NOT use the noticeRef option (RFC 5280: 4.2.1.4)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Certificate Subject

CN=system.tuf.pl,C=PL,1.2.840.113549.1.9.1=#0c0c61646d696e407475662e706c

nazwa.pl S.A.

Organization: nazwa.pl S.A.
Organization unit: http://nazwa.pl
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 41:0a:49:03:8e:ab:65:53:fd:5b:e6:94:cc:51:1a:db
Serial Number (int): 86453223592344510347902793152577215195
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f8:fb:64:fa:68:55:ee:a5:34:de:42:b2:71:df:eb:2b:53:a9:2f:b1
AuthorityKeyId: b2:61:76:82:95:5a:01:37:17:97:c2:77:21:b5:ed:8b:fc:29:f7:67

Fingerprint (sha1): 3d:4b:df:cd:fc:65:ff:22:f5:35:fe:78:55:db:9c:71:45:ab:82:a1
Fingerprint (sha256): bf:b3:56:93:b7:65:a1:22:5f:13:b0:5b:e8:5e:1c:d2:49:7e:fe:40:46:ac:29:ae:9a:c6:08:36:8b:5f:a1:5b

Issuing Certificate URL: http://repository.certum.pl/nazwasslsha2.cer

Revocation information

OCSP Server: http://nazwassl.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/nazwasslsha2.crl

Check the revocation status for certificate system.tuf.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for system.tuf.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

system.tuf.pl
www.system.tuf.pl

Other certificates including the domain name tuf.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for system.tuf.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ixwRcPVrmk4ncT5xaxW
p+NM5+ByGyXGysfFn3QbYHQ/rTCdTfTIiooQWI1WPpB7QMfyFs/xp6HROfM168Lq
bbsTZd4AkYwUj7BH3IWKShA3/CAmLULR2dpc2Fy889cmBTzsV3V83jxoSO/Tes/a
07Es5+IbLTTAYAEifW+KotpRbGwLAxfTha3tPOkzVcVM4HrFLVq3jbZhU6I19lV7
wamyRaBDVC6z8y15nsrTtzPD7P5Y93DfgIyWQO8Xpd0PFsz/noCdbwzliwrimDuW
9YNKUV2qaJF0bnwWTsfSoHcIqZr2+HDfgUhT+RENh+3tV6PWbdPIaiRngw7uXAPi
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86453223592344510347902793152577215195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nazwa.pl S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'http://nazwa.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nazwaSSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-09 06:30:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-08 06:30:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'system.tuf.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29056723615089103156399099170972280017410470060265999388377240077793272127659903231532788417490650286450345265881787650695044275435221344778738542320774798544833568347686670330508257472005772457761517377480323001010147715860982688916160142131750770360853959350973513888499399892353790912309861702304746282781110950830911647578311999549971769344510923061817456306039618309576914973544654746691618636204215321044784259427446235307100617401798508941706957071790306488655536117095459025032410886458481629336175857736459337180020328431100443345477739028805014284251684713014570029402358593895961468122687832297278531691193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/nazwasslsha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nazwassl.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/nazwasslsha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b2617682955a01371797c27721b5ed8bfc29f767
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8fb64fa6855eea534de42b271dfeb2b53a92fb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [85 115 97 103 101 32 111 102 32 116 104 105 115 32 99 101 114 116 105 102 105 99 97 116 101 32 105 115 32 115 116 114 105 99 116 108 121 32 115 117 98 106 101 99 116 101 100 32 116 111 32 116 104 101 32 67 69 82 84 85 77 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 105 110 99 111 114 112 111 114 97 116 101 100 32 98 121 32 114 101 102 101 114 101 110 99 101 32 104 101 114 101 105 110 32 97 110 100 32 105 110 32 116 104 101 32 114 101 112 111 115 105 116 111 114 121 32 97 116 32 104 116 116 112 115 58 47 47 119 119 119 46 99 101 114 116 117 109 46 112 108 47 114 101 112 111 115 105 116 111 114 121 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.tuf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.system.tuf.pl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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