mailing.nic.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:26:e2:2c:de:74:44:23:f6:d8:06:c0:85:ce:a4:79:b6 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mailing.nic.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:26:e2:2c:de:74:44:23:f6:d8:06:c0:85:ce:a4:79:b6
Serial Number (int): 337952075385472407170116861445821773937078
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:65:bd:3b:f5:49:4e:b0:51:f9:3e:e8:c0:e3:94:4e:68:27:7a:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:e4:5a:04:26:31:e4:61:2b:0f:8e:1f:d0:4c:ef:95:5d:ec:9c:6e
Fingerprint (sha256): 07:77:1e:29:6a:00:fe:bd:e4:6a:8d:50:a3:95:ec:ad:ff:eb:cc:cb:f0:81:d8:7c:be:d5:b2:35:f9:73:e3:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mailing.nic.cz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailing.nic.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailing.akademie.nic.cz
mailing.labs.nic.cz
mailing.nic.cz

Other certificates including the domain name nic.cz

(limited to 100 certificates)
sentry.labs.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
devpub.labs.nic.cz
mirrors.nic.cz
nic.cz
zonemaster.labs.nic.cz
mojeid.regtest.nic.cz
stats.nic.cz
cz-test.dsdng.nic.cz
rdap.nic.cz
stork.nic.cz
odvr.nic.cz
public.nic.cz
gitlab.labs.nic.cz
sentry.labs.nic.cz
dscng.labs.nic.cz
stats.labs.nic.cz
katalogrouteru.cz
mirrors.nic.cz
haas.nic.cz
onlinechat2.nic.cz
ethercalc.labs.nic.cz
mail.nic.cz
whois.nic.cz
redmine.labs.nic.cz
nextcloud.labs.nic.cz
rdap.nic.cz
mail.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
devpub.labs.nic.cz
mailing.nic.cz
stats.nic.cz
gitlab.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
test-ipv6.nic.cz
stork.nic.cz
mailing.akademie.nic.cz
kalendar.nic.cz
ethercalc.labs.nic.cz
blog.nic.cz
gitlab.labs.nic.cz
eidasnode-test.nic.cz
netmetr-control.labs.nic.cz
intranet.nic.cz
haas.nic.cz
akademie.nic.cz
kalendar.nic.cz
mojeid.fred.nic.cz
moodle.nic.cz
katalogrouteru.cz
lettie.labs.nic.cz
nic.cz
howl.labs.nic.cz
mdm.nic.cz
ext-mattermost.nic.cz
bobek.nic.cz
secure.nic.cz
yangson.labs.nic.cz
mirror-r-01.nic.cz
yangson.labs.nic.cz
sentry.labs.nic.cz
onlinechat2.nic.cz
nic.cz
dnscheck.labs.nic.cz
gitlab.nic.cz
jetscreen.labs.nic.cz
webid.labs.nic.cz
nic.cz
akademie.nic.cz
mailing-mojeid.nic.cz
devpub.labs.nic.cz
api.nic.cz
gitweb.labs.nic.cz
public.nic.cz
blog.nic.cz
kalendar.nic.cz
kalendar.nic.cz
akademie.nic.cz
yangson.labs.nic.cz
piwik.nic.cz
dnscheck.labs.nic.cz
sophie.labs.nic.cz
epp.nic.cz
akademie.nic.cz
howl.labs.nic.cz
bobek.nic.cz
katalogrouteru.cz
intranet.nic.cz
labs.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
sentry.labs.nic.cz
csp.nic.cz
howl.labs.nic.cz
piwik.nic.cz
akademie.nic.cz
onlinechat.nic.cz

Certificate

The complete raw certificate details for mailing.nic.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337952075385472407170116861445821773937078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 07:02:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 07:02:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mailing.nic.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657862638681317830498659255574855656742224260298756432280851118198622087010104530363681127661782348398301371501517483777550710240554390133846068228369636331627327283182232956056890790027733561547007472129824312750007289671123633377379363787573868700104008288089755460182948043073543668412686339963200803896944916953712476232565040076368489787125214122535847242137572704105706396853317289024661254973904595926071961676899254383777166771586149647729340579197964349881509991895165161289138352581066603837542622680867187474321322286444595499462684096911756086308690770459508756448356576258984285584328617974130558790225952644716217488526125979105305948318383483421247874693622360123146259008337195110095975677145447830830384773667830482604761442923422031550946213354582591121632003139606486051297686045524386767925201237164329030146242973769456799029192052896339152448459592963799913161711209145778013179594791266964225354558922951235845683252407816089192398827287710347743708896450816299954559838532658839072403492855057312549779161312589886403608012925859621861269923417159121143341815409770380693979750271772429899058739676261261809680081466424263509865904943830663874857464142938088206182875903857463781501749342327711638846063653487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2965bd3bf5494eb051f93ee8c0e3944e68277a9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.akademie.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.labs.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailing.nic.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b8881d66600000403004630440220171d601bca508550e1c6ea59cd2a4ed6d9132fe87759f42cb071c98c79ca8fee022052d9280c317528fe01dc1b8559e294661e3670ef9bbd7a02cf68164dba91b18d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b8881d6870000040300473045022061c52324c89120f9badd85caaca82633f8a1eda6f91c957a9228a2931110a795022100f2727e62cc86e3e20c0193473d51c3e33cae620c491e3110694307c8a211142c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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