DV SSL/TLS Certificate for aukce.zakazky-online.cz

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the aukce.zakazky-online.cz DV SSL/TLS Certificate

This certificate with serial number 05:34:e4:49:19:da:de:42:4e:a9:23:55:0e:4b:07:e1:7d:ad for aukce.zakazky-online.cz was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for aukce.zakazky-online.cz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:34:e4:49:19:da:de:42:4e:a9:23:55:0e:4b:07:e1:7d:ad
Serial Number (int): 453559556283800432546804378569116510944685
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 6d:4c:9d:28:d5:97:4e:a6:53:7a:ba:bb:9d:49:e1:72:8c:9b:c2:c3
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 09:83:66:32:da:df:c5:ac:21:9e:e2:72:2b:c0:d5:be:92:b1:53:81
Fingerprint (SHA-256): 4f:7e:11:5b:0f:5b:b9:1f:6c:5b:a5:57:8b:52:e5:44:cf:8d:55:76:2d:6f:3c:aa:c4:5b:1e:69:b5:6b:87:c3

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/46.crl

Check the revocation status for certificate aukce.zakazky-online.cz
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for aukce.zakazky-online.cz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

aukce.zakazky-online.cz

X.509 Certificate

The complete raw X.509 certificate details for aukce.zakazky-online.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISBTTkSRna3kJOqSNVDksH4X2tMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNzExMTgxOTA2WhcNMjUxMDA5MTgxOTA1WjAiMSAwHgYDVQQD
ExdhdWtjZS56YWthemt5LW9ubGluZS5jejCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALlis+FEmAF9bZSFWnkoTcB9rc3pROd5LFGcRgTeBRK2qRiK+z7G
oBxL1EUuvDcZxvEGCMm66v3CoPMXelOIxr9f22Q/2Z9ZNKVefs6CG+Rc54H7Ypvc
qNHfuRGegsfA0njuj7cIej6IJPJcBSXfJKcgUgNIvXoh/StzBMgRMsltmhZfkKyF
f8FIqnwdl4DU0KF0Jn/wp1uVw+xA7UwBdfxEHSu4WysDC2NymtGUx90ZwfUjnBp4
Q0wgtwwvfnfAHFXQD5ypymW7seyUIOMkygdG6v/T0/pRI+T4z8mHbnRdvTYkhUtd
opfpC3Kldw1XJujwCDCBqBClieOUITAsw7UCAwEAAaOCAiYwggIiMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUbUydKNWXTqZTerq7nUnhcoybwsMwHwYDVR0jBBgwFoAU
xc9GpOr0w8B6bJXELbBeki8m47kwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAC
hhdodHRwOi8vcjExLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdhdWtjZS56YWth
emt5LW9ubGluZS5jejATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8EJzAlMCOg
IaAfhh1odHRwOi8vcjExLmMubGVuY3Iub3JnLzQ2LmNybDCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AKRCxQZJYGFUjw/U6pz7ei0mRU2HqX8v30VZ9idPOoRUAAAB
l/rr9RQAAAQDAEcwRQIgCsfzVgnx919dudouyVy/G3/H6RmyqBI8au6+e7+mhdwC
IQD5UzcljpekYD+1Cb+bisXerXSJoljowCX8u9M8ls7IsQB1AA3h8jAr0w3BQGIS
CepVLvxHdHyx1+kw7w5CHrR+Tqo0AAABl/rr9RQAAAQDAEYwRAIgR0U1PI1escRY
zGHYUwvTuzzin7qfpnKvmrYM8zPPfJ4CIGiD2aj9qHj946JKM0yowgPieRAT+z1a
CCV9vV9QyDJfMA0GCSqGSIb3DQEBCwUAA4IBAQB9X9PtYQGMtQcbXoDi9oXV4tCm
+5J5t+2IF0sRKPIsiuEkL2ghKmZz7ozCReRBpxzMP74wPkBhOh1nah3wHQD8/HnV
93C3aYh0Ic10l8vE5mMBjhVAX3Z1MjaJtJrLNASp90c0yi/y1SjIQXs/n6/y2NPU
wiy8wAqoqq/X1tk5mnVctnUpLeunQtRBcEurUQAOnXAlv0ISreDMhXzfjqs97djW
u4qcpsbixgkGfYcaG10O+3WuT2wwLQ/k5ejJpKkhT6MlfMBCCd6CDAi0RfbRRq/A
T17v+8iwXSHPpNuzFeJ6QJeW7arsTNLB3PObYD8M0xjFMiEu2Eevf853Q0Nf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWKz4USYAX1tlIVaeShN
wH2tzelE53ksUZxGBN4FErapGIr7PsagHEvURS68NxnG8QYIybrq/cKg8xd6U4jG
v1/bZD/Zn1k0pV5+zoIb5Fzngftim9yo0d+5EZ6Cx8DSeO6Ptwh6Pogk8lwFJd8k
pyBSA0i9eiH9K3MEyBEyyW2aFl+QrIV/wUiqfB2XgNTQoXQmf/CnW5XD7EDtTAF1
/EQdK7hbKwMLY3Ka0ZTH3RnB9SOcGnhDTCC3DC9+d8AcVdAPnKnKZbux7JQg4yTK
B0bq/9PT+lEj5PjPyYdudF29NiSFS12il+kLcqV3DVcm6PAIMIGoEKWJ45QhMCzD
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 453559556283800432546804378569116510944685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-11 18:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-09 18:19:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aukce.zakazky-online.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23402758512460788778346027284358773566050207117456767736160989711530695436073649854916525340806676498502210830792063440290815343715443808493105184980847672148671460404462345297679942667685933777063163893272618301876862929308128684256895684051945856455269524249668124826003307739840041048593930244759695623778563319320212634319723054301403464103782767489828598484244131621036635253934386840896942117999452948073500734265139824439386856328008662454826606322082828539634204143900446355595259804563313980266520343925732755729357224488890487132136206524658294354257819468420301721824334832954217326393616186567905233388469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d4c9d28d5974ea6537ababb9d49e1728c9bc2c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aukce.zakazky-online.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/46.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000197faebf514000004030047304502200ac7f35609f1f75f5db9da2ec95cbf1b7fc7e919b2a8123c6aeebe7bbfa685dc022100f95337258e97a4603fb509bf9b8ac5dead7489a258e8c025fcbbd33c96cec8b10075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197faebf514000004030046304402204745353c8d5eb1c458cc61d8530bd3bb3ce29fba9fa672af9ab60cf333cf7c9e02206883d9a8fda878fde3a24a334ca8c203e2791013fb3d5a08257dbd5f50c8325f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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