lodz.ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1b:55:01:e6:f6:19:0d:fa:c6:9b:ed:05:f0:2c:6e:6e:56 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lodz.ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:55:01:e6:f6:19:0d:fa:c6:9b:ed:05:f0:2c:6e:6e:56
Serial Number (int): 357749761890296992327960889401365796646486
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:a9:d6:81:fa:53:0c:8e:5e:5a:bf:48:5a:f4:50:3c:4e:08:ca:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:64:fb:27:72:47:cc:bd:5b:94:19:4c:62:a0:da:2f:c7:cf:89:3c
Fingerprint (sha256): eb:7e:20:1f:a7:a7:fc:c4:8a:41:c7:0b:d8:4a:64:29:da:a7:6e:54:e6:5a:4e:ce:23:69:74:55:be:f2:80:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lodz.ptma.pl

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lodz.ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lodz.ptma.pl
socn.ptma.pl
sogz.ptma.pl
sopiz.ptma.pl
www.lodz.ptma.pl
www.socn.ptma.pl
www.sogz.ptma.pl
www.sopiz.ptma.pl
www.zloty.ptma.pl
zloty.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)
sok.ptma.pl
ptma.pl
katowice.ptma.pl
spa.ptma.pl
socn.ptma.pl
sogz.ptma.pl
www.warszawa.ptma.pl
alps.ptma.pl
spa.ptma.pl
lodz.ptma.pl
spa.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
pulawy.ptma.pl
www.forum.ptma.pl
sok.ptma.pl
alps.ptma.pl
lodz.ptma.pl
ptma.netstrefa.pl
ptma.pl
sopiz.ptma.pl
rozdrazew.ptma.pl
ptma.pl
som.ptma.pl
alps.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
alps.ptma.pl
www.wroclaw.ptma.pl
ptma.netstrefa.pl
ptma.netstrefa.pl
som.ptma.pl
sopiz.ptma.pl
ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sos.ptma.pl
som.ptma.pl
warszawa.ptma.pl
socn.ptma.pl
islandia.ptma.pl
ptma.pl
sos.ptma.pl
forum.ptma.pl
historia.ptma.pl
sogz.ptma.pl
wyprawy.ptma.pl
warszawa.ptma.pl
ptma.pl
pulawy.ptma.pl
ptma.pl
sogz.ptma.pl
katowice.ptma.pl
wyprawy.ptma.pl
katowice.ptma.pl
sok.ptma.pl
www.grudziadz.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
gliwice.ptma.pl
sos.ptma.pl
rozdrazew.ptma.pl
socn.ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
sok.ptma.pl
krakow.ptma.pl
www.krakow.ptma.pl
alps.ptma.pl
wyprawy.ptma.pl
sok.ptma.pl
alps.ptma.pl
periapsis.ptma.pl
mail.ptma.pl
ptma.pl
sos.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
spa.ptma.pl
lodz.ptma.pl
rozdrazew.ptma.pl
warszawa.ptma.pl
alps.ptma.pl
katowice.ptma.pl
www.poznan.ptma.pl
krakow.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
socn.ptma.pl
pulawy.ptma.pl

Certificate

The complete raw certificate details for lodz.ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9d/dhs+fhZRUYnJsR9k
1gTurhoCVQz9Qh/Tt34PIjW4Rh9MGa88ukDkvXfqo76YkT6xVnidOlmmO82e/bPh
zWtRZeeUcw1/2nheEFoa7DXxBI4UGP/FtLkVe6AGtI7/CcG3chOVH5wK4KTcMNU4
2KalEkMO0+Q9lxuJnKICs0GI4Vw5WBw8HgMZHsz59dNc5nsq6BMafYFbLbp6qHLq
HyFUAuDW/14w6C/muhAlT+bxF6bYkkWYzg7kP7rGNYfvm3bqZlk5U55sbfXpbdfo
lxWlIupjeZQUVJmD7HLtb2fnIrNjUiVPk/edeYLpliVMlCoDc6uzXiyPKHAgdRSF
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357749761890296992327960889401365796646486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 18:41:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 18:41:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lodz.ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24217782221577958090289587774622325232045163397079845958504420927620085970344292068131611411827806271128338224900113091205647572319379871804763221029336973228700684644997116858082666854241947005354858832707139201821653532515409419598658369628363299828197301221272362521115359314098036249595661879045727504769534452985540317709260260753573662609497580193834384089475345575814596447359386300199053389742743971334777546576878563473056566318109507364676910862110935736691906378810488725010787202160768719640539630024036927844386507215753076623069719762997303972912282220936836400027628411519939303795961145368495852389697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3a9d681fa530c8e5e5abf485af4503c4e08ca4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lodz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopiz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lodz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sogz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sopiz.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zloty.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zloty.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001634b92cfd30000040300453043021f23c9e1971f7f9cc0aafb674dc2962a1574e202581057fcb2ff84e66ca6e1bd02205fd003c07317d85d45bf438f4ca0bdeb23a4cd96fc1ad34f82809e7ae623ab86007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001634b92cff60000040300473045022100bc75b542e7e09a17bf883f27f93b99737ead36cb76ed60312547de43b301975a02200a09786a5a6da9489d95201564e867eb93ca3f8c645e1b72557d8c3cd1f33118
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00405b808072af2475142a14f1cee33233f07f0e2782497e8747768280c3a457ef88be41e99fe069744c210b542678eac9dd8e3c131c18ec6e1175aaeb985084ac467e3ab0f8d236e5b18514f4d5e168f0abd8a6ffd8f6e2f22df8833c78a3d0fa6643694165502347f57a15f0f899e5c283b2de96f897e674abbff8d910b72534f033740425e0a116ff07561a00ad2a84db8bc08aa2291a1844059c6b80cac4eec7ea23e1a98ca46d8dec6f8d8a576db557307e02617b4f15403ad2e6f1b065128dd7dbef2703db918b98d7ef5edb56bd8571a0039e1c77d7fcbbb92f4bf4f064ac4996c7c5a38c6772bd46bd13939af3ceb31cbf87bdccaebc647bb9210e2b97