socn.ptma.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:d7:63:d0:21:66:cb:82:10:03:9b:b7:d1:bc:ca:8e:20 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=socn.ptma.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:d7:63:d0:21:66:cb:82:10:03:9b:b7:d1:bc:ca:8e:20
Serial Number (int): 308241844341319601714627943732942887095840
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:61:68:04:1c:9e:5d:6e:44:77:29:4c:b6:5c:63:fd:19:2c:ee:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:de:76:db:f8:b9:94:d6:25:99:eb:45:2a:47:4f:69:6f:57:5d:8d
Fingerprint (sha256): fd:fc:99:ef:79:10:3b:16:ea:60:22:d9:0e:80:d1:2f:ee:ec:d3:5f:a6:8d:c0:6f:96:3f:a5:3e:2d:3b:90:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate socn.ptma.pl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for socn.ptma.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bialystok.ptma.pl
gliwice.ptma.pl
kielce.ptma.pl
lublin.ptma.pl
pulawy.ptma.pl
socn.ptma.pl
www.bialystok.ptma.pl
www.gliwice.ptma.pl
www.kielce.ptma.pl
www.lublin.ptma.pl
www.socn.ptma.pl

Other certificates including the domain name ptma.pl

(limited to 100 certificates)
sok.ptma.pl
ptma.pl
katowice.ptma.pl
spa.ptma.pl
socn.ptma.pl
sogz.ptma.pl
www.warszawa.ptma.pl
alps.ptma.pl
spa.ptma.pl
lodz.ptma.pl
spa.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
pulawy.ptma.pl
www.forum.ptma.pl
sok.ptma.pl
alps.ptma.pl
lodz.ptma.pl
ptma.netstrefa.pl
ptma.pl
sopiz.ptma.pl
rozdrazew.ptma.pl
ptma.pl
som.ptma.pl
alps.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
alps.ptma.pl
www.wroclaw.ptma.pl
ptma.netstrefa.pl
ptma.netstrefa.pl
som.ptma.pl
sopiz.ptma.pl
ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sos.ptma.pl
som.ptma.pl
warszawa.ptma.pl
socn.ptma.pl
islandia.ptma.pl
ptma.pl
sos.ptma.pl
forum.ptma.pl
historia.ptma.pl
sogz.ptma.pl
wyprawy.ptma.pl
warszawa.ptma.pl
ptma.pl
pulawy.ptma.pl
ptma.pl
sogz.ptma.pl
katowice.ptma.pl
wyprawy.ptma.pl
katowice.ptma.pl
sok.ptma.pl
www.grudziadz.ptma.pl
www.ptma.netstrefa.pl
ptma.netstrefa.pl
gliwice.ptma.pl
sos.ptma.pl
rozdrazew.ptma.pl
socn.ptma.pl
sopiz.ptma.pl
pulawy.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
sok.ptma.pl
krakow.ptma.pl
www.krakow.ptma.pl
alps.ptma.pl
wyprawy.ptma.pl
sok.ptma.pl
alps.ptma.pl
periapsis.ptma.pl
mail.ptma.pl
ptma.pl
sos.ptma.pl
spa.ptma.pl
pulawy.ptma.pl
spa.ptma.pl
lodz.ptma.pl
rozdrazew.ptma.pl
warszawa.ptma.pl
alps.ptma.pl
katowice.ptma.pl
www.poznan.ptma.pl
krakow.ptma.pl
ptma.netstrefa.pl
sok.ptma.pl
socn.ptma.pl
pulawy.ptma.pl

Certificate

The complete raw certificate details for socn.ptma.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AGw9qrfNqxP0oCwUpTj
Sk4N9Lh7BybkZHxekqQl4EPy4ALR41PAg99qbYxd6CRXRNic8iYrfpUpiFvg3bAz
FvFJB40i2fqtEYPF2T5GajzQSQQlg7JXO6cdtdg6GayTzXq+vyad8CfUbRe87MFS
gVPG3sU1ur7B0VzNm5t4Lut0pyCENS8JUsiC6RrAxN7eAQGzzBk44d+FpHHCT0by
JDqW0urdufdYAZaQdy6DXY8PFzvp9WDgC1KnmnZRujeAP43Jex2rRifhbTlmbwzp
UYKQM/6DErhhWr0zxmNBe6DTJjulu9XRSq8PXNxWcCv7CU4qqtnBaLjIN78S1ApZ
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308241844341319601714627943732942887095840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-01 01:19:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 01:19:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'socn.ptma.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30298027185140316366363253949361952442531688765396062191504403479246478229210489009919158189495475980168945881253692314073461670355249996551844317868882566526275314189226801323871522277476191750956218890126911425187391895275801952967831709287646523853629412845634219249738949082536494209730810331933916362349920981179937205381333809294473311078292311311786045096493663803996220253208756699188122017540635475004582995652414921813751885159409527326421663112525831070147003803486013198266462463825361181221131290417432570243120159770002279786827955748304331266018029477862885464030919317574952995443397693447599727204819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f6168041c9e5d6e4477294cb65c63fd192cee8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gliwice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kielce.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lublin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulawy.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socn.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bialystok.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gliwice.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kielce.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lublin.ptma.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socn.ptma.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001662d6c68a30000040300473045022100fab381b353ea2e4db9fa69af795fe58af3fc0499b316327930ca81eb71555ed002204e39b2d2da6229ac226adaeac8b4ad2206367db71d125397cfcd1bdd53576a5b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001662d6c68b5000004030047304502210094430eecba6d3be9b3e515602c2eab8c7b3aa2652649f4f3534a9875eed71a5802206c9be6e8563a3f148c9a3f2025e5e2bc3778b440a70ea083b55ec43bd9e461f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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