jestnaswiecej.pl

Issued by nazwaSSL

About this certificate

This digital certificate with serial number 0f:97:4f:0d:94:1e:b7:96:46:ff:87:78:b0:37:c1:23 was issued on by nazwa.pl sp. z o.o..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jestnaswiecej.pl,C=PL

nazwa.pl sp. z o.o.

Organization: nazwa.pl sp. z o.o.
Organization unit: http://nazwa.pl
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:97:4f:0d:94:1e:b7:96:46:ff:87:78:b0:37:c1:23
Serial Number (int): 20724060148578214426206533300994425123
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:4a:e4:f4:d1:79:bd:3c:e9:46:06:00:59:a6:64:44:27:32:03:4c
AuthorityKeyId: 54:dc:90:bb:9d:47:19:51:c3:79:68:2c:84:ed:2e:df:5f:46:ba:c7

Fingerprint (sha1): ba:72:2d:15:f4:bc:c7:b8:97:3d:d7:74:d7:4b:72:98:e7:68:4f:e6
Fingerprint (sha256): f7:a6:da:34:26:e3:ed:a5:38:c6:b1:f6:0d:08:26:67:4c:dc:1c:00:94:c6:c1:6e:02:58:9e:46:a8:5c:fb:64

Issuing Certificate URL: http://repository.certum.pl/nazwassl2sha2.cer

Revocation information

OCSP Server: http://nazwassl2sha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/nazwassl2sha2.crl

Check the revocation status for certificate jestnaswiecej.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jestnaswiecej.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jestnaswiecej.pl
www.jestnaswiecej.pl

Other certificates including the domain name jestnaswiecej.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for jestnaswiecej.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcni9vrK0+oLDgsIz5YP
a4tXChUHdVRZSRW2mq4ABCdfjnwoY3zo7i+frJOB4kbVLEWVlkYfzBOB/YYbZRJm
Sa4Fdcd03lH3pCnDUEFX2+f5TXQBq7BiTDLXaw/dG4DoTafedlfWw77CJBDS/IH2
EMZk1JqJ6O5qFGl48t6w1xZeGzssY6TA5JYSwq35jIcWobt+p9Ol02wigv1au+G1
0FrSuWSTWm5Cg8pmSarzxN/0ckzI1nkcJbHi0oAW9D3K4m2rHblt8co5qLV8JXw5
MYTLEs2tyI7H/hzdg+mVFTNtoDkwrGE/jbqbkGBuSxwHf1waxaYDg61DF6nu4W+a
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20724060148578214426206533300994425123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nazwa.pl sp. z o.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'http://nazwa.pl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nazwaSSL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 19:35:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 19:35:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'jestnaswiecej.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23958593622158445271370235837873165562371797445202206040275563698384047380399342055847841552515861817046397153533589453484272661842146546668419002705788952368132077194440803048975156958570066447048061178218160552376325456853503891662535851891499707671367249298865561695721421031484271551971991661045333506045151672951506621887234139127741046882762656922567528218531722116781591132061761872065340212961059357583281477943223017036789551131507488188930147564858472662571422033459137697274424338398837849215191637183133761744236550135312601009138926314694668814248784700301325608514963235421496241757851655727083068299879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/nazwassl2sha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://nazwassl2sha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/nazwassl2sha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 54dc90bb9d471951c379682c84ed2edf5f46bac7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							934ae4f4d179bd3ce946060059a664442732034c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.9.2.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jestnaswiecej.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jestnaswiecej.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167c2cc28630000040300463044022067c77e11017b117b23d119149fc0de7a2df263e6106a0eb9751ccf194b6d3fdb02206efc85c9a069b66feb02b1f8ae13ec04d50b0d956eaa6f763583d53871ea1cbc007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000167c2cc28660000040300473045022100ecea26c94d2e29af6df09949378cbc9e640a3ffb03294e73a5c9047007be0d8b022038956330b6627adac5bdda319c2c87312211fc9f9468608440b11ee36a7ad1870076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167c2cc29b100000403004730450220062de61ec4048fdad6c4edbad7b9bb2e0ecfc10209d376e2a496fb6ebebc44ad022100eeff96d38acd7d1d76bf4a4d564bf498be35c69596169dd1e3846e84ad92630b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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