*.nmpww.xaa.pl

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:85:b2:fd:92:3b:08:85:c1:4b:21:5c:4e:bd:7e:3c:c8 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.nmpww.xaa.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7b:85:b2:fd:92:3b:08:85:c1:4b:21:5c:4e:bd:7e:3c:c8
Serial Number (int): 303369305621871595325862464350078604557512
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:8b:35:88:41:38:35:db:c1:bc:49:4d:c1:10:19:57:7d:37:d4:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 12:43:c1:54:b7:39:34:d1:e0:28:50:b1:51:28:67:58:3d:bc:7a:e1
Fingerprint (sha256): c7:b8:3d:b7:7c:7d:51:13:73:94:96:af:4c:64:1a:a6:20:1c:c9:e4:a3:1b:70:fd:d8:80:95:3d:ba:db:37:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.nmpww.xaa.pl

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nmpww.xaa.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nmpww.pl
*.nmpww.xaa.pl
nmpww.pl
nmpww.xaa.pl
www.nmpww.nmpww.xaa.pl

Other certificates including the domain name xaa.pl

(limited to 100 certificates)
spawanie-energomat.pl
senzen.xaa.pl
*.rakiety.org.pl
artemidarex.xaa.pl
*.bubu.xaa.pl
karkonoszeplay.pl
*.pearlsofrock.xaa.pl
tomasz-witek.xaa.pl
mebleopoczno.pl
bestquad.xaa.pl
nataliajaworska.xaa.pl
rybowicz.pl
urbacz.xaa.pl
domena.xaa.pl
nmpww.pl
arturmadalinski.xaa.pl
izabelkanieckarzsuccess.xaa.pl
niebezpieczne-zjawiska.xaa.pl
3dsgn.pl
cs-max.xaa.pl
pelnydziob.pl
az-serwis.com
umic.xaa.pl
avle.xaa.pl
izabellswiderska.xaa.pl
24.xaa.pl
sufitdesign.xaa.pl
polishtalentshow.xaa.pl
mateuszwloch.xaa.pl
lksgoluchow.xaa.pl
ggbud.eu
blrp.xaa.pl
*.mdkchodziez.pl
sklepsms-dd2.xaa.pl
*.ociepleniabudynku.xaa.pl
kamilslodowski.xaa.pl
sc-ligaserwer.xaa.pl
sc-ligaonline.pl
drinkionline.pl
lukasznowak-mg.xaa.pl
malgorzatawojcik.xaa.pl
dorotaglowacka.xaa.pl
zabezpieczobiekt.pl
gasztold.com
archinova.xaa.pl
centrum-po-moc.pl
investgeokrajenka.xaa.pl
*.rsah.pl
skimboard.org.pl
*.tubetycoongame.com
successfulwaypl.xaa.pl
skowronizabela.xaa.pl
zarabianieonline.xaa.pl
imbir-kuchnia.pl
mateusznowok.xaa.pl
www.heckersupplies.dystrybucjauk.xaa.pl
bagart.pl
owczarkirybnik.com.pl
alebabeczka.com.pl
emilemilioner.xaa.pl
majorkalegnica.xaa.pl
freedom-serwer.xaa.pl
*.nikolamezynska.pl
agatasurel.xaa.pl
wjatek.wjatek.xaa.pl
hubertkopczyk.xaa.pl
kwitkon.pl
matiszo92.pl
weedfrags.xaa.pl
agnieszkafilus.xaa.pl
przelom.xaa.pl
evogame.xaa.pl
rod-gwarek.xaa.pl
*.suodkiestudio.xaa.pl
jagodakuzminska.xaa.pl
annamielke.xaa.pl
just-frags.xaa.pl
ktrecruitment.com
fifa-rafa.xaa.pl
felixogrodzenia.xaa.pl
wpdude.xaa.pl
letsfish2.fansite.xaa.pl
flyfield.xaa.pl
verde-dzwirzyno.pl
paulinalaga.xaa.pl
doktormasa.xaa.pl
doktormasa.xaa.pl
cs-saw.pl
neurochirurg.xaa.pl
dcsv.xaa.pl
flyfield.pl
parafiazelislawki.pl
filmstrefa.xaa.pl
danmar.xaa.pl
rozaperek.xaa.pl
takeportfolpss.xaa.pl
dawidsikora.xaa.pl
peszek.xaa.pl
grzegorzwidulinski.xaa.pl
hubertkopczyk.xaa.pl

Certificate

The complete raw certificate details for *.nmpww.xaa.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbYd1owpI9piCo2wI5Sj
S/Am5SjKPXBJhBdjxN/8N1kaVGwMf0eqVVEx8T6KPoA7RfQkV/D+D7nAq2SZCPNs
EcHF+xvVHyR8IpZk4EU4Tr5CM+lGcOtggc261LEpX2ZO0EYVY3a2mwyNZpfVmUnN
Q6JRE0sm7o4uOiXh37lwJIb4FlEGG4pXcsJ9EqCnrVWoI7JQDXKDx/VBv8HdOJov
UhR5ULOHH5YjMamyxseWWNCWLikQrSkE2n8WaKxZlB1qUipDBHrUDv5HtTvVWMOF
Z1PwWd6T4UE5pDTENfFgsgGi1H4DwWtPRKl3MJacgLW9uegDbvJGgjhfg9WDA+Jz
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303369305621871595325862464350078604557512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 22:12:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 22:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nmpww.xaa.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433984999334468178648007405209754412134347517780833841519811664144109444592985517622937633895869868800366186729240929792452658167223225384641930659518474324063361131344843045133915064287567861918815907776636288084148797157506424412067695457752799239662480203078824876964284802340678770486364682806501777706554955228988173990796590040975899341009797975875215813067632163220835031265946483118847180645980171107649677032795053059079223632569778628908881163382332072692897540958677104106717619535361676831354518229058008859785326161916527056691391233926370232718781670279467931769601387006488350458241802149508090590073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							458b3588413835dbc1bc494dc11019577d37d4d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmpww.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmpww.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmpww.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmpww.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmpww.nmpww.xaa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee92f19050000040300463044022040baae5334eafe7c1289352eaca70864502cff4a1b7f1a4042a714e003135bcd0220401f1d4c31bdd1f2c28a08d34036b0ae4d4f92ec485823b6844247e377120eed00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee92f195200000403004630440220596e3339c3879ea186549a80153e03d792a8141c25914a64ba0034a23b96aa0902205acaa7ec83fdd8bce2c583ceaca7ea227a07cc22693cc690ec31703f2c197afc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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