marciech.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:b5:46:7a:9c:b9:f3:74:99:8b:d1:93:c7:8d:27:87:9d was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marciech.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:b5:46:7a:9c:b9:f3:74:99:8b:d1:93:c7:8d:27:87:9d
Serial Number (int): 428996738535270745218928674007925872101277
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f5:bb:f5:32:1f:b8:e7:1b:64:89:6e:a2:d8:3b:64:15:ff:74:85:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:7d:46:2c:f1:43:f7:a5:35:47:5d:d0:35:f7:e7:4c:0b:41:a0:b3
Fingerprint (sha256): df:6d:21:fd:a5:54:08:9f:9a:65:23:a4:ea:8f:47:39:7a:7f:00:6b:ad:b1:1e:b1:fe:89:7b:eb:7f:c8:f1:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate marciech.pl

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marciech.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

audio.weboo.pl
cpanel.marciech.pl
cpanel.weboo.pl
iska.weboo.pl
mail.marciech.pl
mail.weboo.pl
marciech.pl
marciech.weboo.pl
sprezarkipowietrza.weboo.pl
webdisk.marciech.pl
webdisk.weboo.pl
webmail.marciech.pl
webmail.weboo.pl
weboo.pl
www.audio.weboo.pl
www.iska.weboo.pl
www.marciech.pl
www.marciech.weboo.pl
www.sprezarkipowietrza.weboo.pl
www.weboo.pl

Other certificates including the domain name marciech.pl

(limited to 100 certificates)
theprime.com.pl
marciech.weboo.pl
marciech.weboo.pl
marciech.pl
marciech.pl
el-energy.pl
marciech.pl
marciech.pl
domysuchylas.pl
marciech.pl

Certificate

The complete raw certificate details for marciech.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy58WKy+SMX9UAPhgEAL
jyhXuaJlQMOabtgrE5STqSLXLGobRqR8dlxcchZrrmvyKpYNz03lqCcVbd4AgFQz
kGh48rg16tVWhjMqkVrDDJm3dvHBD91AdoYZ3QbrTek3kSmNowac7RSVM0SwEg90
7OlIQ2l3fNcAcvNKDHWWD7b7ViG6vr9TqS3m8CQz4vivoqvTob+K4t61gZ4s69yO
dNWPZYDbtGx2/sKDkPxbcEZqzy1xBZPNhdfxDmUNRR1yfgbnj/qCJ3GgV3NgPbpO
PNPPwdv57vXVLrOdm77L6tLD6GKdWPf7O/Tlh9DqBdvTj60x0XsLxMFsIvAYF8la
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428996738535270745218928674007925872101277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 00:55:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 00:55:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marciech.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22619579555786357298463526065724606078530213495645818326176559665678144500810117949253135240295744816303666445095704911011358844092699443899304336447427549965846311319168867703011308147159369702772383967251841676070318233145098839881548818890811398658017769917213264747127708824337092153143141055931954576427377057274310914703728780640613830081076874126266010655332942450574322373637202278584816811289933982700288609471221823111671610596314295984054912399947606577443253027242627538773163130763577055475434782719151761933949548150896781677536773372788716833615789821489961996541764109836874058528044987131483264735853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5bbf5321fb8e71b64896ea2d83b6415ff748553
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audio.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iska.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marciech.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprezarkipowietrza.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audio.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iska.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marciech.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marciech.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprezarkipowietrza.weboo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weboo.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a523425d50000040300473045022059ca827a4976948ff9eaeffe5283898e5dd489e5b111c157e19fa5721cf016af022100a48d1263fac3b4cddbaf6bb3f88c645da9c78210e313c92976ceec979d7d302d00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a52342422000004030046304402204e0a6dcf3ad4da20b6f9be0debdf39d62c3d349f8221ea1880c0a2c834d05d750220659d0386b6ad32bf3d4ac82f06fbc26d76b9d7c5b595fe03ad559a18e3c6dcba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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