letest1.uvt.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bb:88:3c:1a:58:1f:e0:ec:90:9a:0b:d1:45:44:e3:13:b8 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=letest1.uvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bb:88:3c:1a:58:1f:e0:ec:90:9a:0b:d1:45:44:e3:13:b8
Serial Number (int): 412263033420819333850551948594427656868792
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:c6:b9:38:40:50:f1:a1:72:b0:ee:f5:d7:35:70:9f:09:e6:fa:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:44:20:f9:73:fb:91:0b:47:d5:8f:c2:46:14:38:9a:5d:c6:92:f0
Fingerprint (sha256): 06:0e:99:f8:4b:fc:f9:83:7d:24:89:d7:c9:69:55:9f:35:56:16:6d:f5:da:5d:83:c2:d2:db:11:bd:88:d2:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate letest1.uvt.cz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for letest1.uvt.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

letest1.cldn.cz
letest1.uvt.cz
letest2.cldn.cz
letest2.uvt.cz

Other certificates including the domain name uvt.cz

(limited to 100 certificates)
opentis.uvt.cz
phpmyadmin.hosting.uvt.cz
letest1.uvt.cz
tv.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
spravait.uvt.cz
uvt.cz
mail.uvt.cz
uvt.cz
opentis.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
letest1.uvt.cz
mail.uvt.cz
uvt.cz
ncb.uvt.cz
git.uvt.cz
ncb.uvt.cz
ncb.uvt.cz
mail.uvt.cz
psw.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
tv.uvt.cz
uvt.cz
git.uvt.cz
opentis.uvt.cz
psw.uvt.cz
mail.uvt.cz
tv.uvt.cz
centreon.uvt.cz
tv.uvt.cz
letest1.uvt.cz
uvt.cz
opentis.uvt.cz
spravait.uvt.cz
spravait.uvt.cz
phpmyadmin.hosting.uvt.cz
git.uvt.cz
centreon.uvt.cz
uvt.cz
mail.uvt.cz
chat.uvt.cz
uvt.cz
git.uvt.cz
opentis2.uvt.cz
syspass.uvt.cz
spravait.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
mail.uvt.cz
tiki.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
mail.uvt.cz
opentis.uvt.cz
ncb.uvt.cz
git.uvt.cz
phpmyadmin.hosting.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
opentis2.uvt.cz
centreon.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
opentis2.uvt.cz
uvt.cz
opentis.uvt.cz
chat.uvt.cz
tiki.uvt.cz
mail.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
mail.uvt.cz
centreon.uvt.cz
tv.uvt.cz
opentis.uvt.cz
mail.uvt.cz
mail.uvt.cz
ncb.uvt.cz
tv.uvt.cz
spravait.uvt.cz
ncb.uvt.cz
uvt.cz
opentis.uvt.cz
uvt.cz
syspass.uvt.cz
centreon.uvt.cz
centreon.uvt.cz
tv.uvt.cz
spravait.uvt.cz
mail.uvt.cz
tv.uvt.cz
opentis.uvt.cz

Certificate

The complete raw certificate details for letest1.uvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412263033420819333850551948594427656868792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 09:05:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 09:05:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'letest1.uvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861819582381658287436855677983081110434631360111390986212318547400994569147859052271013031538878173117686106237171329224803067650829049431601471738505719138016338349389392156866771077199159995339792104583851421397197087557103061492836484807859218667388960620954627054321714952929653075664709512901137447396129831957107675820220946432456864888662109907206797095190507318661912833653246849134282386297196056567527610137862449627295297042891502176594204167126327146244954082785848401179596973932843263293788057777540921299752498973838998006057917323348786639903323044998718173145846714688712878881953268375611808247450815417844278329253590431239596784850892847763203214353242229544010718172576995291096543329698485080205434617912664845266304177963180821361171957104230296426900347370001862834240522424910906702623827372747281287097946965036468998676199624155627721092311506444428763480938836591672232741748652564795809482744727223657789024140990764097479144926930518739501861590614268614197051399411334160320891295801670483150636698289801020635120751003720220216711149581085841697760186205084666141995597585167339644558187495405282681934559181071591273108414755008395207880032203511914779172953311683298722461726630405514346815229863199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dc6b9384050f1a172b0eef5d735709f09e6fad5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letest1.cldn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letest1.uvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letest2.cldn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letest2.uvt.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b797fd91d0000040300473045022100a2e0cbcdef2ead0c0fcbcc472f1eaf17d15dd8a632ac7f2e76c495235ace016002200f31c9213d4cc4c29fc27d38f86ae38328ae48f4c560fd14b1c16b87c182961400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b797fd91d0000040300483046022100989a56a61eaf17018ac0bcd870a7cb554c2403760cadee87eb2db8e28e8d5f84022100b843c3cc66f40f3cc9fef6ca77b591719d4f161811985913affc575529e176a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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