renault-bene.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:9f:7c:71:29:ae:e4:31:07:8b:ec:b0:71:f8:aa:c8:e8 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=renault-bene.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:9f:7c:71:29:ae:e4:31:07:8b:ec:b0:71:f8:aa:c8:e8
Serial Number (int): 337772101376925981832139803098026013804776
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:e7:b1:34:eb:fe:01:b0:9b:44:4b:be:b0:52:ce:2e:91:02:61:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:ac:93:32:06:32:05:6c:4b:23:38:ba:fe:4f:1d:36:97:c0:75:a6
Fingerprint (sha256): 04:fc:2f:f6:4a:a1:d1:40:3a:9c:39:0d:e1:80:75:c5:4e:38:ad:11:29:94:e6:ac:a9:76:53:de:c7:e1:17:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate renault-bene.cz

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renault-bene.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacia-bene.cz
dacia-bene.cz.vhost.omnio.cz
renault-bene.cz
renault-bene.cz.vhost.omnio.cz
www.dacia-bene.cz
www.renault-bene.cz

Other certificates including the domain name renault-bene.cz

(limited to 100 certificates)
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz
renault-bene.cz

Certificate

The complete raw certificate details for renault-bene.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337772101376925981832139803098026013804776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 10:33:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 10:33:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renault-bene.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912037809779418264324146768902669825713117750585826888211870338509204157506038727189465337993704081280019160204610569498288223613714883100198571950597600333833516976993294893716837062207842666213826717345714840991278446783698904335955909759254711950100747405820547042711563171622364102090004499742280942448335939874473193785062540337441809271667421926194500989569634579548876496588270391770677901553014494821062040432796304501083485648694456255496724060971850883440623335697888774293114411502416137966595676741472531988597234594038990273553494645348296517368816136488497904048340948086310954124282860399132274662418846596302120259920017520024773712108841437056856947760014193564292231254522243302648081760838293313310737535198805748171672296135225708028991067513055440680224349221771382402130047513148154037234084729308620473678424504981630766964980831431353315148447538958958831163820295855580570549785843987310293642494870938990774382842050716657517338914972110944529556229957105705516022802392157382228747318410158380593070450878865148057486908873495057986434605385980977158166638866446165026793963593757340790452066130243445518864555800660666608253002830788413657974803397081842490834073542678191347409583587435725356858221455113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bee7b134ebfe01b09b444bbeb052ce2e910261f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia-bene.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia-bene.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault-bene.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault-bene.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dacia-bene.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renault-bene.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dcf315ce700000403004830460221008c7e8d990591bf8485e59f85cd56a06c4892844a72acfac1b2fbf5d8c8909f06022100c66c42d7b26d9cb67e6f839c80d588ed196bd2084618ea384a76474490f3e11b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dcf315d19000004030046304402201336db954072e9da65fac319fce1c1c814563c4110dc665d216c415e740cfffc0220582252f77e3ef42bafbb6c4c87297976f6a40628800d61fa72528f2e847dc644
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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