DV SSL/TLS Certificate for netshops.cz

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the netshops.cz DV SSL/TLS Certificate

This certificate with serial number 06:5a:91:6c:c9:93:2d:7c:3d:bd:7a:88:39:9b:5e:c0:96:4a for netshops.cz was issued on by Let's Encrypt.

With 12 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for netshops.cz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:5a:91:6c:c9:93:2d:7c:3d:bd:7a:88:39:9b:5e:c0:96:4a
Serial Number (int): 553492431529320423401787870038546461005386
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 88:30:b4:ed:18:45:6c:a2:85:93:92:d2:92:41:67:a9:a3:7b:a0:cf
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 76:c0:cb:79:83:dd:d0:04:d2:28:56:6f:1c:e0:10:6e:b2:cf:05:ca
Fingerprint (SHA-256): 50:0a:e9:50:c9:06:0a:46:4b:55:b4:48:4b:1d:51:34:1b:96:53:e9:7c:b6:98:dc:68:33:c6:9a:83:5d:6c:f3

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org
CRL Distribution Point: http://r11.c.lencr.org/75.crl

Check the revocation status for certificate netshops.cz
12
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for netshops.cz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

demo.netshops.cz
diary.netshops.cz
helpdesk.netshops.cz
message.netshops.cz
najdi-poklad.netshops.cz
netshops.cz
tbb-bike-b2b.netshops.cz
tbb-bike-shop.netshops.cz
tbb-bike-www.netshops.cz
tbb-bike.netshops.cz
www.netshops.cz
yoggies.netshops.cz

X.509 Certificate

The complete raw X.509 certificate details for netshops.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jnGl3nqripn8D1ZqslH
PI2MMNKBP6fWn1/HO1AS76ijWAZTLnIceGM9IOG/pvc1g62y26NB5+O2oat6X8Lb
mg8yGvJPvoScpAi3X3DvTiunwLfzHbEUqKqhUPJrEBAnEtZudEuTh007UVYTC/oC
9m6w7fN1P7c+2pKcWOJhrd9IAmbnDx603WkXv3ZSiPY5C/Vb+H8GbhRP6UIjTDxh
T56dQveqzpWd2CHg6t2wOpyPOOYdQpuAeaE9vxuqoOixC2jAgMnks5Lb70bucyc9
kXdf/C8ZomPIO8/3ner6/TzQWv0i3B5Mr9Rwr1DUl0Y5c5x+KShnNobRiZ3eHBwK
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 553492431529320423401787870038546461005386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-28 05:57:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-27 05:57:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netshops.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29063300425795846887731946009528107980895639834144970306457370796160650056287784802304686790516573433189068957516142018633028927955622516882714005042066810967883647785794796001071646076450039666848475950594586818732602558248466637630744689571514309367612194019086694775243343095850249503801321308912298442460976828133259427599413517474711740143636035878037163487654669498625637311693197302216935678979355614294652141961569560472245068717008581624858515638081523258806280141834767321342887219637928105762085767954332306703456902982532412574040574677050628593530202095613496608213398795474600082886648083468635338443297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8830b4ed18456ca2859392d2924167a9a37ba0cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (262 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diary.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'najdi-poklad.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbb-bike-b2b.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbb-bike-shop.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbb-bike-www.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbb-bike.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netshops.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoggies.netshops.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/75.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001967b2e3e7400000403004730450220169986126191cc4720d88def29da94db0d81297e8708db5106616c61f756932d02210080baec62cc98df4a8c47e6dc87689481fe8c271e2a74199cc3e51bb3c1c62180007500af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d000001967b2e40de00000403004630440220365a37361e37bbefcbfa5d29fa7dd97b2c134ad7bd36a19a4f060c8e2c866fa20220282a32d921e7c5bb6256f74ec36e6599ba580e0648e497a774632fc5774eb09a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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