bobek.nic.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:2c:8f:2e:e2:56:ba:02:2f:d7:00:03:f6:b6:c5:08:25 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bobek.nic.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:2c:8f:2e:e2:56:ba:02:2f:d7:00:03:f6:b6:c5:08:25
Serial Number (int): 340341596402127017319708140922326900607013
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:6b:ee:ad:9f:55:bd:76:2d:ae:08:17:87:27:1e:9b:65:be:bd:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:12:6c:d0:c3:ea:8c:c3:a3:0f:e1:1d:ae:12:c9:04:11:67:9a:6e
Fingerprint (sha256): 0f:bd:f4:3e:4e:c4:5f:ee:5f:ea:97:dc:f2:5b:92:43:90:00:70:3b:50:8d:ae:d3:be:9b:65:f5:16:37:12:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bobek.nic.cz

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bobek.nic.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bobek.nic.cz
bobek.regtest.nic.cz
bobek2.nic.cz
bobek2.regtest.nic.cz
demo.regtest.nic.cz
domainbrowser.regtest.nic.cz
epp.demo.regtest.nic.cz
mojeid.regtest.nic.cz
rdap.demo.regtest.nic.cz
verification.regtest.nic.cz
whois.regtest.nic.cz

Other certificates including the domain name nic.cz

(limited to 100 certificates)
sentry.labs.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
devpub.labs.nic.cz
mirrors.nic.cz
nic.cz
zonemaster.labs.nic.cz
mojeid.regtest.nic.cz
stats.nic.cz
cz-test.dsdng.nic.cz
rdap.nic.cz
stork.nic.cz
odvr.nic.cz
public.nic.cz
gitlab.labs.nic.cz
sentry.labs.nic.cz
dscng.labs.nic.cz
stats.labs.nic.cz
katalogrouteru.cz
mirrors.nic.cz
haas.nic.cz
onlinechat2.nic.cz
ethercalc.labs.nic.cz
mail.nic.cz
whois.nic.cz
redmine.labs.nic.cz
nextcloud.labs.nic.cz
rdap.nic.cz
mail.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
devpub.labs.nic.cz
mailing.nic.cz
stats.nic.cz
gitlab.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
test-ipv6.nic.cz
stork.nic.cz
mailing.akademie.nic.cz
kalendar.nic.cz
ethercalc.labs.nic.cz
blog.nic.cz
gitlab.labs.nic.cz
eidasnode-test.nic.cz
netmetr-control.labs.nic.cz
intranet.nic.cz
haas.nic.cz
akademie.nic.cz
kalendar.nic.cz
mojeid.fred.nic.cz
moodle.nic.cz
katalogrouteru.cz
lettie.labs.nic.cz
nic.cz
howl.labs.nic.cz
mdm.nic.cz
ext-mattermost.nic.cz
bobek.nic.cz
secure.nic.cz
yangson.labs.nic.cz
mirror-r-01.nic.cz
yangson.labs.nic.cz
sentry.labs.nic.cz
onlinechat2.nic.cz
nic.cz
dnscheck.labs.nic.cz
gitlab.nic.cz
jetscreen.labs.nic.cz
webid.labs.nic.cz
nic.cz
akademie.nic.cz
mailing-mojeid.nic.cz
devpub.labs.nic.cz
api.nic.cz
gitweb.labs.nic.cz
public.nic.cz
blog.nic.cz
kalendar.nic.cz
kalendar.nic.cz
akademie.nic.cz
yangson.labs.nic.cz
piwik.nic.cz
dnscheck.labs.nic.cz
sophie.labs.nic.cz
epp.nic.cz
akademie.nic.cz
howl.labs.nic.cz
bobek.nic.cz
katalogrouteru.cz
intranet.nic.cz
labs.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
sentry.labs.nic.cz
csp.nic.cz
howl.labs.nic.cz
piwik.nic.cz
akademie.nic.cz
onlinechat.nic.cz

Certificate

The complete raw certificate details for bobek.nic.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw1oRw5oyg5AM9e0Ya4e0
xT1Hh8Yd+POFbzgZN/GDsW85BP8xmGOLShYPQT5IE/NUh7VvSFYigpi+ELv6M6Wr
2LeoAMYFZEKmJgw9wpa7SmHd2ukfivr4dQvkBJ9hF4Fv2PMnfxB90yUZ2ZJpBWi8
8W+hJnnlZ6Oac+8zkH+578PKY3iqY0394HebW5q3Okwm/av85aU+rXTmHkoVMpMI
peAxQXqZlMeESadzi0jWrEQesNye69eM8/jD2UTNt6APSSJgsho9wAHBhGOKBH7h
e1wMvM4EAcx9QVQnlF/iH1yjJ93DOvqZ6otWm9Doun8PNKM8vT1rtOacXrSH1F3D
WdErNWROG6dyJwzhaa7gFetKtfbhX35boswCoIjXOWtFkQcEikjzAGJXd84vNHQY
EGdhJvWSytMVcz/DGj9Iv6MLP65bghMl1NcK59cQR9rqclJsmVKKxNMh/GO1nL68
18W2VAXEyOLndUcEtpkEC1gDRdvXQjR0tpD1mKdeUBOf7K70COQkL+WIw+2oYgNU
JicEoccCGYFxmsO/BxD9m6i6wISDOltxnX2UWaXE/E9MYJ5rUSHlgtd/gsNkxOTJ
RaV71j8HBPF2PMhTMuLT7zOiR6Vh25ZLAtj9d5uaZq4sYA1vLqk2sCfdqDVH0Fo7
3vtfGPpiOBNvpjorvUEGUyMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340341596402127017319708140922326900607013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 07:02:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 07:02:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bobek.nic.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796965948952654149604538792791679989435224496597701799416949851656791059958808080889168481763794486693073809651092714167679898117269492899675712967183525738654997432149616561220929215365612919068174840449424766475291278683655536958866956788096544593905550245063806565332711063683246426842485649586601923666170456185083302742612172856880300598436780069275765275172717820797323302209928142651220109210858334341443864821139408864773340091686625251803716751632994062306130694143033959604279785087328505424338121581724823902442258341272388488031996201520474650219655368788597436012813297820198215820089461829972207243611271407324665910105220830826989708403124565830068204138689968564192990859439456808797876744000931659651004471385246288100367661032842600553278880182617521060072092283022188028315721122426851171282629105884328026838600839519075616583762659301637757889435325682419359511698003651391070194351125133799572033305747953119856676139355723102296167778907595304519287721176817025016775329806527523534313327573748135216549896719079128253999479808467146689983479055668388482455393582752888117203098245461353091785001414592227325241389005103092805756724302644897985314054298761705615751736677551581839473039117472351395102738240291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							296beead9f55bd762dae081787271e9b65bebd0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek2.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek2.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainbrowser.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epp.demo.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojeid.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdap.demo.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verification.regtest.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whois.regtest.nic.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001714e82bf360000040300483046022100f0db27d50b051ba312276f7106e7722ac1f71b623a39280a16e42d25ca4b306c022100edb4fe0177c269d6e4eac97650d4ee694a0750c7fea6bda5336ee2b878e36f8200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714e82bf620000040300473045022063d73d504ca166841f9ae49960067dfc27df5fa4b0697af3b0dc0af3ebc4cd4a022100d6a50194ef29ba45cd1e770ee38bca37b687b73e6cc44fdb0174c2aa8c0dbd48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002ea77bd20741e5cec876dc44cdf28c7428847645a973af9523a938b255a7aebdfa5621787edc56c0814b7c842bf1a18195eaff373848e41e9e408c9a74fb8ee45bf669b6b37e191dde1f4b2add9cdf89b8d22eb155f0bd718b507db920fcd2a207f28e10ca15a861504fd03d4b003a34af74132bb1867cb68b9503e5d227a7ac454123feb954cc7e624101ab88733732ca56c6448d532aff8c1b8ace0c755cc19179c3c9c1bc82deb6488aa51566d58da895e08db21d48fed0894df1b24dfc11ec15be2c809b33e44288491a73684c1421db51009d77870b2b7b7226b46dce3c3b729399871956ece717ebdd253132f0ad2095764ec74e9e841ec05ffca73f6