skaldo.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:86:89:8a:17:0d:d9:0a:87:a3:36:e4:b8:b8:3a:f7:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skaldo.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:86:89:8a:17:0d:d9:0a:87:a3:36:e4:b8:b8:3a:f7:e1
Serial Number (int): 270022747665208058258325150764869564954593
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:a9:e8:25:e5:25:b3:30:8b:48:5f:c3:47:68:27:a6:53:cf:be:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:86:90:35:a6:76:d3:ba:1b:5a:d2:2d:e0:df:3d:38:bb:4f:b9:25
Fingerprint (sha256): 02:66:0e:c9:17:99:44:8b:2b:17:a3:5e:de:fb:1c:97:95:d4:49:82:9e:ea:2f:c3:a4:9f:0e:2d:63:3d:c9:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate skaldo.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skaldo.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skaldo.cz

Other certificates including the domain name skaldo.cz

(limited to 100 certificates)
data.skaldo.cz
skaldo.cz
skaldo.cz
skaldo.cz
gsep.skaldo.cz
gsep.skaldo.cz
www.skaldo.cz
gsep.skaldo.cz
gsep.skaldo.cz
skaldo.cz
www.skaldo.cz
www.skaldo.cz
www.skaldo.cz
data.skaldo.cz
skaldo.cz
www.skaldo.cz
matomo.skaldo.cz
skaldo.cz
data.skaldo.cz
gsep.skaldo.cz
skaldo.cz
data.skaldo.cz
gsep.skaldo.cz
data.skaldo.cz
www.skaldo.cz
gsep.skaldo.cz
data.skaldo.cz
realtime.skaldo.cz
realtime.skaldo.cz
skaldo.cz
data.skaldo.cz
skaldo.cz

Certificate

The complete raw certificate details for skaldo.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270022747665208058258325150764869564954593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-31 11:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-01 11:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skaldo.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 650256448767066703986516112860054904733814237090314046756187087765011301587986457103166762513903686428039595346919259286498709853514563976761077235161200017695925558034094856458079672854878907679420001450071596394941772481175156435969538340817517377086266155495307793839584723948609562274439712225772203265949067503343139291733485933766105454130974419777301962308316152784059490275232363231556612927292840079881573758302939709802577981736929263514135807152387982238004560908744534835584516067023522575923828179737606845797710542514320269624812296798444558749863987412098713627658568409000515030715302321774218667354245260487952473964907057393566143592272194034079205386878460250366242099732427843866411820479669898471632506451963623178995305434605479088888469648890232510271987949676470757791927691108739630806608362853460920043930432175511722330476796756386639393689257593030229348417286996660045355292850642968938472499281603438754629411898905812924478087619940516327808928247700524343603205997877742428063048797196230338734758091455288370509237525700016587123810227994133704777754486841708688932994545785436303464424008829333907652710573935054283970551410847765591342678054357706034018128569862812800906642614798083546164492184249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82a9e825e525b3308b485fc3476827a653cfbee0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skaldo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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