DV SSL/TLS Certificate for mixland.cz

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the mixland.cz DV SSL/TLS Certificate

This certificate with serial number 06:c8:02:26:c3:f8:59:80:70:2b:b0:fe:e0:7f:c1:3c:05:a0 for mixland.cz was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mixland.cz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:c8:02:26:c3:f8:59:80:70:2b:b0:fe:e0:7f:c1:3c:05:a0
Serial Number (int): 590733048712767523181317319005698296382880
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 31:10:f8:ac:bc:19:2e:be:64:40:10:9c:04:55:69:3c:dc:d0:e3:a0
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): cb:86:6e:82:bd:1f:c5:1d:1d:07:80:cd:67:fa:af:b7:33:46:ee:c9
Fingerprint (SHA-256): d3:fb:d7:32:09:f3:e3:99:11:af:32:e9:76:41:8f:10:f8:82:37:9b:6e:d6:14:c8:00:88:74:72:45:f9:34:a3

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/33.crl

Check the revocation status for certificate mixland.cz
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mixland.cz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mixland.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISBsgCJsP4WYBwK7D+4H/BPAWgMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNjI5MDEzNjQ0WhcNMjUwOTI3MDEzNjQzWjAVMRMwEQYDVQQD
EwptaXhsYW5kLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRDc
o9JuVDhfbwUmrmjJ++BEZiEO+RIaPlwh4A8zzNFGihYh81pIbcAMa7A7LAfk3msw
08Q9A+FbH8Om8iLQtsW3EC0pLfjPOQK9bCzBqprEwABTQmJbOMMjCwBoGzH4Wa4h
vwLO+DbrnGCOztZtctgQ2LRAxb6q3vCHF5FnUk8WHVRN33I2fIR/63dU88E7RgES
+S/KXhLjXEhKgUxAPLTqkA6jppVV2jV1umejMS+NlaAoaBkYmm0fys9bGhVsiewu
+zXyrqB7lpO+IWPoVItvEZ1QKS0B5c7TNEPfTVu1ImXjOWEg27I5F4khFYjgPVoy
PEgLZc3IgFfnFVIc+QIDAQABo4ICKjCCAiYwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBQxEPisvBkuvmRAEJwEVWk83NDjoDAfBgNVHSMEGDAWgBTFz0ak6vTDwHpslcQt
sF6SLybjuTAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEu
aS5sZW5jci5vcmcvMCUGA1UdEQQeMByCCm1peGxhbmQuY3qCDnd3dy5taXhsYW5k
LmN6MBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6
Ly9yMTEuYy5sZW5jci5vcmcvMzMuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHUAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGXuYnwbQAABAMA
RjBEAiAY7ujKjFcvgUgl9rB23PuQmLSOFaKgf7Ju2dzh+HeKMQIgG0moPqDTA9bI
4qohPc1el6ctcoDXE3meckXM6xZGi90AdwAaBP9J0FQdQK/2oMO/8djEZy9O7O4j
QGiYaxdALtyJfQAAAZe5ifCrAAAEAwBIMEYCIQDp646opSOjZPYjKb+/9RNBiupQ
SYUTyHWsJ+RAdQGDqQIhAMQb0Uwkpu69X9g96E/k1fjzqtpKusOO4LjnfZ5Jh964
MA0GCSqGSIb3DQEBCwUAA4IBAQB6OGLFpf5353/GiLzl6knDUt1YAzamO2eWiyIC
zISAEgg8xnYFo38xbU7WAghXNi3eChCTCSUkNxuwTLLOL59M4yFC5mkbe4vQ8ZEQ
G9MqnUmnZR8L8dDFLQoTm7SpJfQhbo/aupIYr8TCtaomnmH8aBHGuDzamKBtEzTG
qKJGVE6t3UY0/xqtOwkJr5NkN6Nfy/oLcHqBshHBOPJnRN2XKRlGIwMjpUFJGdHw
CHYyxc8tdjDoiQrmg79989lOnpxA2TXFaZOiq1meHcwfs6fVTaNaV3Fa3WJpRriw
cw9lDhVsd3zsI2DVg27k5NqcFH/tkUwjlp3w8LPow2ugju2A
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRDco9JuVDhfbwUmrmjJ
++BEZiEO+RIaPlwh4A8zzNFGihYh81pIbcAMa7A7LAfk3msw08Q9A+FbH8Om8iLQ
tsW3EC0pLfjPOQK9bCzBqprEwABTQmJbOMMjCwBoGzH4Wa4hvwLO+DbrnGCOztZt
ctgQ2LRAxb6q3vCHF5FnUk8WHVRN33I2fIR/63dU88E7RgES+S/KXhLjXEhKgUxA
PLTqkA6jppVV2jV1umejMS+NlaAoaBkYmm0fys9bGhVsiewu+zXyrqB7lpO+IWPo
VItvEZ1QKS0B5c7TNEPfTVu1ImXjOWEg27I5F4khFYjgPVoyPEgLZc3IgFfnFVIc
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 590733048712767523181317319005698296382880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-29 01:36:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-27 01:36:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mixland.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20332681999863053197535200348856326424927318253336390867006854867094616877574712405595711398381317662212491682267220107340557765613666802468297560899818718120048776486085219007092359435080076616829866547918232162413242807079881717784246295333962066438658875195795842416287020362013849028461924889527138885155326059486889734665750491686758625540851121704313798263523926040633839829852483425628634525465692126125230101957634556641798694323898612034324284348402562176174506855688241115278321075808562418070436932189040954180540076691448903518038326797789117644533517489975731453707658227689807818591134535469655190019321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3110f8acbc192ebe6440109c0455693cdcd0e3a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixland.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mixland.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/33.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b800000197b989f06d0000040300463044022018eee8ca8c572f814825f6b076dcfb9098b48e15a2a07fb26ed9dce1f8778a3102201b49a83ea0d303d6c8e2aa213dcd5e97a72d7280d713799e7245cceb16468bdd0077001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d00000197b989f0ab0000040300483046022100e9eb8ea8a523a364f62329bfbff513418aea50498513c875ac27e440750183a9022100c41bd14c24a6eebd5fd83de84fe4d5f8f3aada4abac38ee0b8e77d9e4987deb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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