ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:4b:9d:d4:9d:a0:72:bf:dd:d6:eb:1a:d4:bb:4f:2d:b6 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:4b:9d:d4:9d:a0:72:bf:dd:d6:eb:1a:d4:bb:4f:2d:b6
Serial Number (int): 265520757800981973973910355941586140868022
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:28:d2:38:6b:8f:b5:5c:83:19:d7:cc:bf:8a:90:31:c4:83:22:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:dc:7a:cd:66:3a:db:03:77:b9:7b:5e:52:89:36:e5:05:1e:f1:86
Fingerprint (sha256): d5:ee:2c:7f:0b:9d:ef:d1:7a:1d:9c:98:b4:2d:ee:55:33:71:59:16:b2:b2:39:36:2e:17:9c:f3:f8:c4:ec:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ptma.pl

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ptma.netstrefa.pl
bialystok.ptma.pl
cpanel.ptma.netstrefa.pl
krakow.ptma.pl
krosno.ptma.pl
lublin.ptma.pl
mail.ptma.netstrefa.pl
mail.ptma.pl
ptma.netstrefa.pl
ptma.pl
socn.ptma.pl
sogz.ptma.pl
torun.ptma.pl
webdisk.ptma.netstrefa.pl
webmail.ptma.netstrefa.pl
www.bialystok.ptma.pl
www.krakow.ptma.pl
www.krosno.ptma.pl
www.lublin.ptma.pl
www.ptma.netstrefa.pl
www.ptma.pl
www.socn.ptma.pl
www.sogz.ptma.pl
www.torun.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e/ntrmjJHu/EOuq5O7z
qYXiUwgUeNDaTKhlD1m/9rfvGfswHHKk1tuGW5k1dZFy5NDMB7ug4TBoOA2z1h3U
qzn7tm5BoQLDzzcllLFVD2QedCnijdC83PGljUFIvplbL2qr/JicsLWqyiCHqV0R
ND/D+DrKiF/Y/020B6JxiDrpBY5/fpHI0Cx93yNqKeYclvoqTDq2znMYxou59KpU
cV5OIjdaZSJZG6M8YWxaB0+r9WZgE5di/icHo16567T+RYHVCFcW9Xj3fiGyyz5G
Q3jVf6t0SlKis/A4zru0Emv2gPz3XCr+U0sHwlT6Bnv4eWAAshC9qCrKCP3zxaop
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265520757800981973973910355941586140868022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-02 02:16:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-02 02:16:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27512013807343858808269282589373593914345712220468444460644219565036396563413185694752936548399426661918542136468512325470993895862321675988443469039028680053186893044132923920219007171151449119306694952677671305298935543143511030267653363367064021060181433695324392995620900808593596883503553165201784029173745862936679900172370506977833543405703586420607450304296963648701720209018845181446322039484453892662194818581920983540778278130844415255437571959796268260296011566137498344422064919401514274111376678300891854857504364176659577803455998947268132007027188859642968685101987833120297518756771965435566134798811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e28d2386b8fb55c8319d7ccbf8a9031c48322e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krakow.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krosno.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lublin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torun.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krakow.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krosno.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lublin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptma.netstrefa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torun.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001676ceaaf740000040300473045022016bdaa86114157c3076ce6fb1ce312622b34948b9c6869f19008ba11c111affd022100a9cf3b3559c5fe9e768a082c473048d459e86636cace69bb1f214938f5a76a6f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001676ceaafbd0000040300473045022032188b98b7db5eb23ea1bc1a83c2557387ecefd5052fc09dd10c7c2e57978a6f022100e0dc0d8d73c1ed8c79a02dc0407eaa4ded27a1f2e93beea6b2ca3de790f0724a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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