cheb.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:6b:9c:68:c0:6c:b3:e7:40:41:9d:33:08:4b:4c:e5:c4 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cheb.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:6b:9c:68:c0:6c:b3:e7:40:41:9d:33:08:4b:4c:e5:c4
Serial Number (int): 326473829395654951746233876989362171602372
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:a6:12:a7:c2:be:06:ba:3b:81:a2:8a:a9:8c:dc:6c:46:6d:fa:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:e7:34:0c:00:e2:64:c5:7a:fa:38:f7:2b:93:a8:bf:80:a6:8b:e9
Fingerprint (sha256): 0d:51:0b:79:29:bf:69:f2:16:41:91:2f:b4:fd:cf:78:c5:db:4a:e4:b7:7f:d6:d6:7d:cc:84:dc:ec:61:cb:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cheb.cz

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cheb.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cheb.cz
cheb.eu
mestocheb.cz
mestocheb.eu
www.cheb.cz
www.cheb.eu
www.mestocheb.cz
www.mestocheb.eu

Other certificates including the domain name cheb.cz

(limited to 100 certificates)
ssl.cheb.cz
cheb.cz
zakazky.cheb.cz
*.cheb.cz
cheb.cz
zapisyzs.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
cheb.cz
anonymizace.cheb.cz
zakazky.cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
cheb.cz
*.cheb.cz
cheb.cz
tic.cheb.cz
cheb.cz

Certificate

The complete raw certificate details for cheb.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoozemVXelndA0myVWpeh
+vDm78Uuy58ybyj8xUKRarmoco72PduTJj73YdaS0MxcvQMiy9uRzXL5gi7u4T0r
Ss1iIKBkCIIHFM12AD0TzMqItN1UVLBbRC5rHeDxT7AVrGxQriVBJqCRo5cj/I9D
5c8d8CT7qD4jMd2XlyAKTDh8KdFHd6qgB8Vvh5xvke0Ypdqq6sEdS4PCbj9XqT6S
tUBPV2nhSTJkJQjN0KibZ9Tm98cuNsZq+MVVLom8Q2lkNpl0ZK6daZlcg5Cr0u7o
BCcEiszKvmJKpwXeWRVoGvMND18HFxeyDlJh0wWZ8wnz9r71BDfcn/ZI4lm6tUvK
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326473829395654951746233876989362171602372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 16:09:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 16:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cheb.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20520070757379357938055503085447247486622360821101415800640312010440411204739677820789407892992984734262622564156633536347702288338017717487864995090313944703953103796839717552766334048742214047502106612755295425490464145527211644467071966504158457815576074245699187696881170728045647765963120112936077339247742928929438104150421187536228756234577694314955189892395972929758409199439427736844353327751017676228850197307384062742476866006592234837447355763812881041796177860952156948863111793380910768241448416099047165621218338271802659021773639050500291909644735101456844448514363258341749311829272787840120327490137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3a612a7c2be06ba3b81a28aa98cdc6c466dfabd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mestocheb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mestocheb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mestocheb.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mestocheb.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a660fab600000403004830460221009bed9f39a6d0bb44c1e30bba525b367bdf6c093e84bdff54512b2dc0b768684a022100db8497142e2d9f986f0348890e7c4d607fb8f7620e3b269981422f8b41779ef2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169a660fb0a00000403004830460221008cffcc8fe823bd336cb61e9668833276bd665011efc77d90793e49eff552f3680221009ff43d4847ba688944e84424daa3bfa17f7461a330cc43a281b1a3447a5ab05f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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