kurzy.satomar.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:9e:1c:6f:79:f1:28:63:b6:6a:b6:4a:fd:c4:ef:98:c5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

kurzy.satomar.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:9e:1c:6f:79:f1:28:63:b6:6a:b6:4a:fd:c4:ef:98:c5
Serial Number (int): 317693614005890350479261318398332212582597
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:1e:98:4a:d8:7b:72:09:2b:14:b1:d3:62:26:36:d2:2c:17:c1:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:3d:e1:ce:34:ee:50:b0:84:4b:73:4a:b8:29:5d:ec:bc:a5:de:b1
Fingerprint (sha256): 00:0c:40:d9:e7:fd:64:f9:6b:49:d8:04:b7:ab:3b:b4:97:26:9c:fe:56:1c:cc:1a:a5:64:94:98:81:99:79:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kurzy.satomar.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kurzy.satomar.cz


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kurzy.satomar.cz
www.kurzy.satomar.cz

Certificate

The complete raw certificate details for kurzy.satomar.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317693614005890350479261318398332212582597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 02:41:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 02:41:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kurzy.satomar.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701970118820763111235957091487300877464574980159762200422714861047158446797670792982703885950664051751261694652899869096987815078421766869819405457872166497006716951785794411950703418127809600020720439475714917869366475593731399155487842798757191129917892922026518023004507673307161198917889459896043728838674519208291189367811888824312413734466186436355030300756393814285057547088334161216539906716993348991076670521075871254140757610089273537198162127909279782623111428582504507411893230759823017673893095717838609683681882256562516019943328607425320144557225675512132480586076576719823565206812689192003721453770882402952321724236563112602682931726063885333359191250834215056954174407038037963121830745829024589566545382968666343356518443575365430662600112879005973721637646137119093344966564471408403666795577278640127768653432795831399592912474093556385431480215755545335605285595697308153418397340500253599952394796675249315294789488890521983868683642212072705692568432132455373851591518976290442150997222918482244843878165147078558172798891812651206348219441537377793634028619602158672887965834325206601401033209658769252510571968118860053205694829853921363009932245788561832381851409498835440376575155836164834781437907705961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							591e984ad87b72092b14b1d3622636d22c17c11a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurzy.satomar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kurzy.satomar.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00762afecfe057884e30b0af21635d0a9aa2c0eb8de0d93e8afa1d358915e8719d4feb21db0c8b25ab462c4738e123b33b2ce7dfcf74996589f58b4eea9e30e7c90478f37755b23312d9a935707422f3feb303d2a28976973732aed186a7a284e53c70667426b1594a26385b058907cfa94b15dddc0c30e73828a6a5bef288d402f38fd08c8de49ad4d6d489bc420bc23102a4f9fcaff9001d9b0d621195e3dc7b834a7cab5dab483eca22cf12368a4d535c097ada08ee276447a3b9fa1e2f162b05d1cccff434fdb43e7cc9f7978db5e5df01b4b76a3ad1ea6256604ef6fc97870c6a1535b073e23de09fcff23713b9bc8bb0fc29d37fdf094420fbba62f06c5d