mail.ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:01:f6:15:12:aa:03:fa:f3:2c:a4:29:a8:75:3c:98:e5 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:01:f6:15:12:aa:03:fa:f3:2c:a4:29:a8:75:3c:98:e5
Serial Number (int): 265422853158764311850368036860243350427877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:f3:f8:1c:f8:87:43:e7:2b:c7:3a:52:38:7e:95:2f:8a:bf:ff:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:fd:28:eb:d0:b2:aa:a0:48:af:da:c8:a9:bb:e4:4c:83:cd:d3:89
Fingerprint (sha256): d2:1c:12:06:2e:f0:3b:a8:bb:4d:bd:c6:6a:b5:b2:2c:8a:b6:bb:5f:30:e5:7c:e3:0d:0a:54:c5:7e:49:e3:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.ptma.pl

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ptma.netstrefa.pl
cpanel.ptma.netstrefa.pl
cpcalendars.ptma.netstrefa.pl
cpcontacts.ptma.netstrefa.pl
mail.ptma.netstrefa.pl
mail.ptma.pl
ptma.netstrefa.pl
ptma.pl
webdisk.ptma.netstrefa.pl
webmail.ptma.netstrefa.pl
www.ptma.netstrefa.pl
www.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)
sok.ptma.pl
ptma.pl
katowice.ptma.pl
spa.ptma.pl
socn.ptma.pl
sogz.ptma.pl
www.warszawa.ptma.pl
alps.ptma.pl
spa.ptma.pl
lodz.ptma.pl
spa.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
pulawy.ptma.pl
www.forum.ptma.pl
sok.ptma.pl
alps.ptma.pl
lodz.ptma.pl
ptma.netstrefa.pl
ptma.pl
sopiz.ptma.pl
rozdrazew.ptma.pl
ptma.pl
som.ptma.pl
alps.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
alps.ptma.pl
www.wroclaw.ptma.pl
ptma.netstrefa.pl
ptma.netstrefa.pl
som.ptma.pl
sopiz.ptma.pl
ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sos.ptma.pl
som.ptma.pl
warszawa.ptma.pl
socn.ptma.pl
islandia.ptma.pl
ptma.pl
sos.ptma.pl
forum.ptma.pl
historia.ptma.pl
sogz.ptma.pl
wyprawy.ptma.pl
warszawa.ptma.pl
ptma.pl
pulawy.ptma.pl
ptma.pl
sogz.ptma.pl
katowice.ptma.pl
wyprawy.ptma.pl
katowice.ptma.pl
sok.ptma.pl
www.grudziadz.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
gliwice.ptma.pl
sos.ptma.pl
rozdrazew.ptma.pl
socn.ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
sok.ptma.pl
krakow.ptma.pl
www.krakow.ptma.pl
alps.ptma.pl
wyprawy.ptma.pl
sok.ptma.pl
alps.ptma.pl
periapsis.ptma.pl
mail.ptma.pl
ptma.pl
sos.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
spa.ptma.pl
lodz.ptma.pl
rozdrazew.ptma.pl
warszawa.ptma.pl
alps.ptma.pl
katowice.ptma.pl
www.poznan.ptma.pl
krakow.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
socn.ptma.pl
pulawy.ptma.pl

Certificate

The complete raw certificate details for mail.ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXGf8Yf20bJpkOQzwpZJ
brPtHy+VHrqa7vw7M6zrRt+zxPb4TYR5kGj3ZSrxtJV37c7F+UVFwMzcMrX75yKo
LnVPOPe74hwwtJDV0LzJgqrL50UO+DIhCM/dXacl0rhBPlf9c59rLrMY145ATLlU
RGu1g9T4HgIhl1bobrDSpal7IaC2m+ctg1uKgRxbO6V3ryhHKcA4zO1wuxWKF6qq
xRgNGSYmp0/Oj0lD1DPXruJf6c4YThgm8E99SrZAlIYJ9gsQk2LMEWShdDTOpgTN
LwKhDsPeze5tKp6wB19gVB5kJEzdLjZ8O6nr48+GKqKlF5pd6h44mHOKuUnlL0oz
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265422853158764311850368036860243350427877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 01:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 01:16:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18360584686997095960615400524654639199659259525682813275247013084163093897233683582933282683069357085221270528411811306243730730541973369254177843388716527522983558208072462682182951400371560713198649376412009176018419344335473546357328756146619430128064988817266282914078627387792793853817555056137304993863123981862596940478590661524171634614478095630876045293030772440312568544485674064788006120310409170951264866706660926687139591208346001552237664848052157956349938114996221359545952077002401747163864253907271912378139045733280384239330878976322649085001157055677680238729790545058877287851136518940241416565659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bf3f81cf88743e72bc73a52387e952f8abfffd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017161dfe3520000040300483046022100cc9594ffb297a835f845ae871ad0d3087406b6882ca66f2bb5b9cd7a8d360b34022100b272b58952bc7b49d6de1d3c684c59830ea0468177932e428c8ff5cadd974e9b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017161dfe33c0000040300473045022022121288939cbea80b505383a1f720771d5a2d001fe271ebbeacd47356199090022100e85a1f34504e3810b587ca2c3dba43eb097061ae4d966d177dd4997f35293629
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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