petriska-nabytok.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:45:82:06:87:fb:55:71:12:e3:aa:92:fe:bf:a8:3e:52 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

petriska-nabytok.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:45:82:06:87:fb:55:71:12:e3:aa:92:fe:bf:a8:3e:52
Serial Number (int): 340374758783707275777668071101804231278162
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:29:2f:09:95:48:09:ac:79:60:eb:44:01:7c:f4:7f:da:ed:e9:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:b2:94:54:42:16:0a:75:b7:4c:13:53:94:e8:8e:64:ff:53:a5:7d
Fingerprint (sha256): 00:3b:23:04:8d:f5:2f:2b:c8:4d:f6:14:14:cd:bc:0d:65:08:52:ed:9e:6b:f6:59:cd:d8:73:67:40:77:14:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate petriska-nabytok.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for petriska-nabytok.sk


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

petriska-nabytok.sk
www.petriska-nabytok.sk

Certificate

The complete raw certificate details for petriska-nabytok.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340374758783707275777668071101804231278162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-07 05:09:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 05:09:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'petriska-nabytok.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724942166157482356363290570376131352749879971677416305086943407006641315281288236078788219178682961292371583122731366574517687745790420347139105880641129531952310279852154149606992495257694801797133748749490934410648164587065051196154460813727116202470314497973808988419704909043644590023797988203128354239039175498672065703133540648659984961385065875481701416015561261155828175008940610793421674584513237380075562334893395713236945454833134680372354680609638341146464158340834616144700975357551590660706313927804043826410784343637262383496513639707291626729290671537204036639177563041880070488575042148199698457133802738260574864378954412830909242970724599359051915371410662562728379940605512622456511091235663890152123066989612719033850292494324325770243930216969821490819559401257944009607948677776490422826899274855673029388292103692527963955335194744194188064284318617657214567458577508168168124612172947082581422920395472617025752928796478755484384426760288243150784124365577385919476527257600260722951433905002900518153116008480039721012307738398249828413720297074630537729393963375945565531405960798701897548311229054062323379150598707612286229600110886678404536719038421075931949654847212375129333412994565844923885850740953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5292f09954809ac7960eb44017cf47fdaede9a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petriska-nabytok.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petriska-nabytok.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001629eb8f2d300000403004630440220630a2d18a6caa2bd8febe188a5d67665078626f807504c187f8251676bb94b0f0220468c705495347c903efd6eb71207b8fe5404d3b10b42c9fd93535428bbc0cfd0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001629eb8f38c00000403004630440220570cabd20fca41c9e8d938dd101c907870c3bc7d3ed8817f405a1c490427b95902205bce8715b66ce077a812c93a19fb4088f77b54433ad3ae8e753a3d5c714b68c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003889383957e87fa6e1c176e9ff4957a0b6e162f04cda8c019a4cae6935cb3190ce6a9194ec035361abc888d2f4cc733246521750b751910a4f64b09ada2246de481cf19d2c92d2e5052a985f48d23659a1d836c1de4d8fbb78ff57f77ae134339d9e8fdcb7fdfda0502b8459debbdc88b6e2665924e3797b4b3ee5c9c17117c0f0160d8b16a747becdd7349cd8e555cec0effb16f20518d8c69a1f99e7f03da31d5967acedc4c540e99701b72bb1bacba1618bf482d8da701847a261984c18b6d343b5797bc8a63673b087e62946a8a27957dff5793ac18a31fe446d006e39d350cea492a26b8f409f82fd6cf81193990b3ca2007fc1f8a0e985ca8c6b25613a