www.jih2000.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:e1:2a:42:85:44:3b:9c:fe:56:95:e1:2e:1d:f6:4e:d5 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jih2000.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:e1:2a:42:85:44:3b:9c:fe:56:95:e1:2e:1d:f6:4e:d5
Serial Number (int): 295324107845170808860989036583840325717717
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:69:b3:e6:2a:a8:c6:7a:3b:f6:4d:d8:7a:ae:02:4f:89:a4:62:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:41:cf:e1:58:c4:bd:f0:44:40:27:bc:0a:ea:15:80:58:7b:09:46
Fingerprint (sha256): 06:49:88:38:e8:5f:51:6d:59:50:06:71:3e:31:af:51:db:da:13:52:7e:60:20:b3:7d:8c:26:e0:2c:cb:48:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jih2000.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jih2000.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacia.jih2000.cz
jih2000.cz
jih2000.cz.vhost.omnio.cz
renault.jih2000.cz
www.jih2000.cz

Other certificates including the domain name jih2000.cz

(limited to 100 certificates)
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz

Certificate

The complete raw certificate details for www.jih2000.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgISA2PhKkKFRDuc/laV4S4d9k7VMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjAxMTI2MjZaFw0y
MDAzMTkxMTI2MjZaMBkxFzAVBgNVBAMTDnd3dy5qaWgyMDAwLmN6MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzM+naIzxDxQSmlrk/dSpY65TqRP2LO8m
sYU7rogYSzsJu77Gr+bfiz/nq09QzuFJ1J+0a5OQtuNcRd1HRlt9fSPOcjr0HHQ1
X1rDiJJPDTEDwCoXtagu+W3GsOqdraTIIKY+5Vj0u/VAiArm6EpuHuTwDGV8G1n2
y87dyMtXPGVKztLKhzDebFWzL2B5bwDIe6wSU5SejRvm4+C53V3xIVbnhgRnoXzK
F9KchiH7NsGHr03SVrgvS7P3GBaPZML/3Xm8H040Z/ZJzvvwoBt1cbv2J0SZAltH
EwslQZTQK5wCsWNCbXLRAP1okraGOKoUaZ1qApFuC+aDeT8oVBACG9A87AjmPjki
0wM8w+UXYdfmWWwd4FSk4w4yHxN+wIB+Zp4bqROW5Q4V4bm8zWak9xkzAJqBLyQm
xWhpJUjd8BVgzggHwN+rq5h36mVW5K5VwGyZvvkbB4wYDSzhblZ2aPHl4L0whbnA
r7OXiS5Ai9dpEGxLMSWM8xgxj3V6+MpTY5RtBSxkpXdLHNXspkFwIMe8YnXax7Wp
OciSQC1HRKcs1O0Dd+12rBPq912aX6sqJHPlBK029DP7wyorq26/p8fiLZEEksgc
8JffI9CLNl9X6E/VhOLY/dYW4y3SninovGz8HV8MmuK0RFzqfXiBYxr6TCARQf7/
+8bayWvNoOkCAwEAAaOCArAwggKsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUz2mz
5iqoxno79k3Yeq4CT4mkYrowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzBmBgNVHREEXzBdghBkYWNpYS5qaWgyMDAwLmN6
ggpqaWgyMDAwLmN6ghlqaWgyMDAwLmN6LnZob3N0Lm9tbmlvLmN6ghJyZW5hdWx0
LmppaDIwMDAuY3qCDnd3dy5qaWgyMDAwLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIB
MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAXqdz+d9WwOe1Nkh9
0EngMnqRmgyEoRIShBh1loFxRVgAAAFvI0X8ZgAABAMASDBGAiEAoNFZ/qzv2Phl
pk/gvMXQloEz42IvBF7wUR9Ws9hPWJ0CIQCzM57SSeLaMY1J+v37EP7/pYI26NF4
S1FJC9+2Z3R9AQB1AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAAB
byNF/I4AAAQDAEYwRAIgTWeZWNu0ZguortgLCVVLAVxmMd4Zt1UEw9Co62cXhfUC
IHfYmQeOFofCUmLlgLSfY42hGQ39ITOcNaFOV1hUR+xAMA0GCSqGSIb3DQEBCwUA
A4IBAQB0dp6h7O0aDLbMXpdlP/hZQxDzev3mxG3hxDltGmak7hTgYq8xymZwcEx7
yQK/SBtrI3rk6Nx7OpGMsTbMA51IAlJ1U7nVGjB862u5MHK+zSmikIdi5hHgW3gp
A+kbicJ8oeJpn0u97qQXjtAIlJ4pw+JLKrG6LLx8ZNkcQokzmJPyL4BkYe8pKvLI
W+WpI5r7Ve61FN8vx4J3qMLEGV3iGt6NfkYS0pHE8uCI7tdcsG6cZuwnue9KL6k8
Klr6mB0GlSXl0DPKGHVLv8QbiVag5LbI4VEkIBuMeGc08b3IODBq4UytV1RzKsnz
fJKOy2J6SOrEjJo1+EpFsLPyrl3i
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295324107845170808860989036583840325717717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 11:26:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 11:26:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jih2000.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835556585816367161517626480463122744247957979543260710149327772218879845889892940435722897310172342942975796928095392511272846161390376023042163290029443358935219541092482497557250576981325224688214796239450906356114423990324488695392253542433154163569711569915791920216074407727253265341242024596563190167853204965429012187444801821947719236185160842924802516177200377567884156454701038363520925485195970257153834032471029365854347594510473914801864882699095858948056559074614462989763802487312089714348114334571491268817979369469222558997583470261249103413198557134339166837752436269688066025488007138873342717101739603416980836736777863062280300445622540152545277235602513224020422177499510166875398021434259140311526809221666078237154420727023008325294770671997031311511639743753488752351077649630609629320092503970908497948684323717170657574331688595389527272242918236261902968570733693587287710917167424560092893645873612827543350375209499561487119649740099853990487801042031367746008289594964431572169840836934164007292672261190485348476936032167268584359923953699914747020655615107999839107782642201070347819694878236198495001779770801207737319965946502205328139770177982756141762964664319124003136960069026089393832957157609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf69b3e62aa8c67a3bf64dd87aae024f89a462ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia.jih2000.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jih2000.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jih2000.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.jih2000.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jih2000.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f2345fc660000040300483046022100a0d159feacefd8f865a64fe0bcc5d0968133e3622f045ef0511f56b3d84f589d022100b3339ed249e2da318d49fafdfb10feffa58236e8d1784b51490bdfb667747d0100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f2345fc8e000004030046304402204d679958dbb4660ba8aed80b09554b015c6631de19b75504c3d0a8eb671785f5022077d899078e1687c25262e580b49f638da1190dfd21339c35a14e57585447ec40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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