fbcliberec.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:3f:da:d8:a4:a6:d2:cb:3a:88:ea:02:09:ca:09:6c:6f was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fbcliberec.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:3f:da:d8:a4:a6:d2:cb:3a:88:ea:02:09:ca:09:6c:6f
Serial Number (int): 301575054770446611307838659848014463069295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:c0:3e:39:82:44:a5:5f:19:f1:86:94:84:de:5b:e5:5b:92:b8:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:f9:e6:87:e0:80:a2:9f:e3:0d:9a:03:75:40:02:8d:47:32:2b:58
Fingerprint (sha256): 09:6b:08:6c:ae:22:6c:f3:e2:16:1b:32:9d:da:e4:1c:48:99:40:1a:15:f3:8d:cb:29:d1:33:61:e1:54:38:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fbcliberec.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fbcliberec.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fbcliberec.cz
fbcliberec.vesna.esports.cz
www.fbcliberec.cz
www.fbcliberec.vesna.esports.cz
www2.fbcliberec.cz

Other certificates including the domain name fbcliberec.cz

(limited to 100 certificates)
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
clen.fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
clen.fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
clen.fbcliberec.cz
clen.fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
clen.fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz
fbcliberec.cz

Certificate

The complete raw certificate details for fbcliberec.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XOKwPQH4mhlD7TKkIlD
1ac6w38gl5QPeMk2g6uD+jae1686ethGdFq3WD8+12X+RLqPGyA7YNI0opYa//xP
CKBE/slPcCdapS4zWPqNrB/LwtW09DjWdiXwX0hwvdnsXGW5Hi4504f2YQmqlt6k
v32DchJwPDVT/UkDWQ+igHWRO47dLCZc+lIwImG+/ZoaNccZhNWVJ3bIhc8mh2C8
8gMhFWRpXRDKI5iTWlnGZRjb/OtaYxn3RAuQxX1TdSax2PqE9suflNYkQQU1dsuo
R/3DlFNMMVp+M1G+izAHkdGnEt/Adk+BOAQ47KN8FPMdrBZMQnm3sKU3olmcrCe7
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301575054770446611307838659848014463069295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 18:38:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 18:38:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fbcliberec.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26440781624946620501642274585125084213553228171683378759477154058212458802940753688750855452222646359126500981602579883979063407812599660000233441426732952765669045094584870184686091340784109165684843405469957454532797987069415309471182216477381214644308567531954685524238079982027495919703368918657050813093194655440810947532537779250721837527700533980784497957195644338934460065571226252761523900814288922747510499655986847230136713078066979568810547055773670685962915052576856971373951584360237932002990309303697966258295809172054723306965401728005638064760479071589555124486473387216558334750805833465957479594883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3c03e398244a55f19f1869484de5be55b92b814
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbcliberec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbcliberec.vesna.esports.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbcliberec.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbcliberec.vesna.esports.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.fbcliberec.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001658c588058000004030047304502205577533e952413e56bc2d60b60c9ef6aa025bae1ec07c0a76f870adbb089809502210088d5864d8619ced0b4763a317f64270830ee73ad0f7a363c8711727a0ba64f83007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658c588214000004030047304502201edf7aa37d61cbc8feb7e67968e704157f84cb8320cfecaf4b82f06ad078e598022100bf942d5157d75574b038c1123878ba55fb71e5394040bcc28d9341fd4317650f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069c76c3b1f6f840bb6e1da5c5793aaa93bc055ff850c9592250ee2078c19573354c39a1fd45c71c62d47c8c3618fddb41bd7f8fc282a4442b5da4dd3e2bacd4728b985bbe0f50bb44c9e664d010e8223f777f97d98995ca008abf8929c421d67e90e1fb335adaaf5d94c5f280888f2c9a8cfe94ce1ef5dfb02bf226ed2c352a54b6e5684469821211b129467f7e02b27bbabced8d848089ffe3f1711fd800738198d6598f80d8d48a1012f92c91851e1c0afa0ac27453d05cdc7fc9c08b627f7fd926c3c842b98f131d03a58ed946b561a32bf7a830279d811a6a39cc24883bbd4c3b9cc8bc57dc6c7ca5c2cf4d7da630c5fd27ccdae8a7b132ff87eb883deaa