bobek.nic.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e8:2c:8f:2e:e2:56:ba:02:2f:d7:00:03:f6:b6:c5:08:25 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bobek.nic.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e8:2c:8f:2e:e2:56:ba:02:2f:d7:00:03:f6:b6:c5:08:25Serial Number (int): 340341596402127017319708140922326900607013
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 29:6b:ee:ad:9f:55:bd:76:2d:ae:08:17:87:27:1e:9b:65:be:bd:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ab:12:6c:d0:c3:ea:8c:c3:a3:0f:e1:1d:ae:12:c9:04:11:67:9a:6e
Fingerprint (sha256): 0f:bd:f4:3e:4e:c4:5f:ee:5f:ea:97:dc:f2:5b:92:43:90:00:70:3b:50:8d:ae:d3:be:9b:65:f5:16:37:12:b4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bobek.nic.cz
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bobek.nic.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bobek.nic.cz
bobek.regtest.nic.cz
bobek2.nic.cz
bobek2.regtest.nic.cz
demo.regtest.nic.cz
domainbrowser.regtest.nic.cz
epp.demo.regtest.nic.cz
mojeid.regtest.nic.cz
rdap.demo.regtest.nic.cz
verification.regtest.nic.cz
whois.regtest.nic.cz
bobek.regtest.nic.cz
bobek2.nic.cz
bobek2.regtest.nic.cz
demo.regtest.nic.cz
domainbrowser.regtest.nic.cz
epp.demo.regtest.nic.cz
mojeid.regtest.nic.cz
rdap.demo.regtest.nic.cz
verification.regtest.nic.cz
whois.regtest.nic.cz
Other certificates including the domain name nic.cz
(limited to 100 certificates)
sentry.labs.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
devpub.labs.nic.cz
mirrors.nic.cz
nic.cz
zonemaster.labs.nic.cz
mojeid.regtest.nic.cz
stats.nic.cz
cz-test.dsdng.nic.cz
rdap.nic.cz
stork.nic.cz
odvr.nic.cz
public.nic.cz
gitlab.labs.nic.cz
sentry.labs.nic.cz
dscng.labs.nic.cz
stats.labs.nic.cz
katalogrouteru.cz
mirrors.nic.cz
haas.nic.cz
onlinechat2.nic.cz
ethercalc.labs.nic.cz
mail.nic.cz
whois.nic.cz
redmine.labs.nic.cz
nextcloud.labs.nic.cz
rdap.nic.cz
mail.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
devpub.labs.nic.cz
mailing.nic.cz
stats.nic.cz
gitlab.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
test-ipv6.nic.cz
stork.nic.cz
mailing.akademie.nic.cz
kalendar.nic.cz
ethercalc.labs.nic.cz
blog.nic.cz
gitlab.labs.nic.cz
eidasnode-test.nic.cz
netmetr-control.labs.nic.cz
intranet.nic.cz
haas.nic.cz
akademie.nic.cz
kalendar.nic.cz
mojeid.fred.nic.cz
moodle.nic.cz
katalogrouteru.cz
lettie.labs.nic.cz
nic.cz
howl.labs.nic.cz
mdm.nic.cz
ext-mattermost.nic.cz
bobek.nic.cz
secure.nic.cz
yangson.labs.nic.cz
mirror-r-01.nic.cz
yangson.labs.nic.cz
sentry.labs.nic.cz
onlinechat2.nic.cz
nic.cz
dnscheck.labs.nic.cz
gitlab.nic.cz
jetscreen.labs.nic.cz
webid.labs.nic.cz
nic.cz
akademie.nic.cz
mailing-mojeid.nic.cz
devpub.labs.nic.cz
api.nic.cz
gitweb.labs.nic.cz
public.nic.cz
blog.nic.cz
kalendar.nic.cz
kalendar.nic.cz
akademie.nic.cz
yangson.labs.nic.cz
piwik.nic.cz
dnscheck.labs.nic.cz
sophie.labs.nic.cz
epp.nic.cz
akademie.nic.cz
howl.labs.nic.cz
bobek.nic.cz
katalogrouteru.cz
intranet.nic.cz
labs.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
sentry.labs.nic.cz
csp.nic.cz
howl.labs.nic.cz
piwik.nic.cz
akademie.nic.cz
onlinechat.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
devpub.labs.nic.cz
mirrors.nic.cz
nic.cz
zonemaster.labs.nic.cz
mojeid.regtest.nic.cz
stats.nic.cz
cz-test.dsdng.nic.cz
rdap.nic.cz
stork.nic.cz
odvr.nic.cz
public.nic.cz
gitlab.labs.nic.cz
sentry.labs.nic.cz
dscng.labs.nic.cz
stats.labs.nic.cz
katalogrouteru.cz
mirrors.nic.cz
haas.nic.cz
onlinechat2.nic.cz
ethercalc.labs.nic.cz
mail.nic.cz
whois.nic.cz
redmine.labs.nic.cz
nextcloud.labs.nic.cz
rdap.nic.cz
mail.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
devpub.labs.nic.cz
mailing.nic.cz
stats.nic.cz
gitlab.nic.cz
bgpcrunch.labs.nic.cz
nic.cz
test-ipv6.nic.cz
stork.nic.cz
mailing.akademie.nic.cz
kalendar.nic.cz
ethercalc.labs.nic.cz
blog.nic.cz
gitlab.labs.nic.cz
eidasnode-test.nic.cz
netmetr-control.labs.nic.cz
intranet.nic.cz
haas.nic.cz
akademie.nic.cz
kalendar.nic.cz
mojeid.fred.nic.cz
moodle.nic.cz
katalogrouteru.cz
lettie.labs.nic.cz
nic.cz
howl.labs.nic.cz
mdm.nic.cz
ext-mattermost.nic.cz
bobek.nic.cz
secure.nic.cz
yangson.labs.nic.cz
mirror-r-01.nic.cz
yangson.labs.nic.cz
sentry.labs.nic.cz
onlinechat2.nic.cz
nic.cz
dnscheck.labs.nic.cz
gitlab.nic.cz
jetscreen.labs.nic.cz
webid.labs.nic.cz
nic.cz
akademie.nic.cz
mailing-mojeid.nic.cz
devpub.labs.nic.cz
api.nic.cz
gitweb.labs.nic.cz
public.nic.cz
blog.nic.cz
kalendar.nic.cz
kalendar.nic.cz
akademie.nic.cz
yangson.labs.nic.cz
piwik.nic.cz
dnscheck.labs.nic.cz
sophie.labs.nic.cz
epp.nic.cz
akademie.nic.cz
howl.labs.nic.cz
bobek.nic.cz
katalogrouteru.cz
intranet.nic.cz
labs.nic.cz
moodle.nic.cz
dnssec-validator.labs.nic.cz
sentry.labs.nic.cz
csp.nic.cz
howl.labs.nic.cz
piwik.nic.cz
akademie.nic.cz
onlinechat.nic.cz
Certificate
The complete raw certificate details for bobek.nic.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgISA+gsjy7iVroCL9cAA/a2xQglMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDYwNzAyMDNaFw0y MDA3MDUwNzAyMDNaMBcxFTATBgNVBAMTDGJvYmVrLm5pYy5jejCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMNaEcOaMoOQDPXtGGuHtMU9R4fGHfjzhW84 GTfxg7FvOQT/MZhji0oWD0E+SBPzVIe1b0hWIoKYvhC7+jOlq9i3qADGBWRCpiYM PcKWu0ph3drpH4r6+HUL5ASfYReBb9jzJ38QfdMlGdmSaQVovPFvoSZ55WejmnPv M5B/ue/DymN4qmNN/eB3m1uatzpMJv2r/OWlPq105h5KFTKTCKXgMUF6mZTHhEmn c4tI1qxEHrDcnuvXjPP4w9lEzbegD0kiYLIaPcABwYRjigR+4XtcDLzOBAHMfUFU J5Rf4h9coyfdwzr6meqLVpvQ6Lp/DzSjPL09a7TmnF60h9Rdw1nRKzVkThuncicM 4Wmu4BXrSrX24V9+W6LMAqCI1zlrRZEHBIpI8wBiV3fOLzR0GBBnYSb1ksrTFXM/ wxo/SL+jCz+uW4ITJdTXCufXEEfa6nJSbJlSisTTIfxjtZy+vNfFtlQFxMji53VH BLaZBAtYA0Xb10I0dLaQ9ZinXlATn+yu9AjkJC/liMPtqGIDVCYnBKHHAhmBcZrD vwcQ/ZuousCEgzpbcZ19lFmlxPxPTGCea1Eh5YLXf4LDZMTkyUWle9Y/BwTxdjzI UzLi0+8zokelYduWSwLY/XebmmauLGANby6pNrAn3ag1R9BaO977Xxj6YjgTb6Y6 K71BBlMjAgMBAAGjggNSMIIDTjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFClr7q2f Vb12La4IF4cnHptlvr0OMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wggEFBgNVHREEgf0wgfqCDGJvYmVrLm5pYy5jeoIU Ym9iZWsucmVndGVzdC5uaWMuY3qCDWJvYmVrMi5uaWMuY3qCFWJvYmVrMi5yZWd0 ZXN0Lm5pYy5jeoITZGVtby5yZWd0ZXN0Lm5pYy5jeoIcZG9tYWluYnJvd3Nlci5y ZWd0ZXN0Lm5pYy5jeoIXZXBwLmRlbW8ucmVndGVzdC5uaWMuY3qCFW1vamVpZC5y ZWd0ZXN0Lm5pYy5jeoIYcmRhcC5kZW1vLnJlZ3Rlc3QubmljLmN6ght2ZXJpZmlj YXRpb24ucmVndGVzdC5uaWMuY3qCFHdob2lzLnJlZ3Rlc3QubmljLmN6MEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFxToK/NgAABAMA SDBGAiEA8Nsn1QsFG6MSJ29xBudyKsH3G2I6OSgKFuQtJcpLMGwCIQDttP4Bd8Jp 1uTqyXZQ1O5pSgdQx/6mvaUzbuK4eONvggB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABcU6Cv2IAAAQDAEcwRQIgY9c9UEyhZoQfmuSZYAZ9/Cff X6SwaXrzsNwK8+vEzUoCIQDWpQGU7ym6Rc0edw7ji8o3toe3PmzET9sBdMKqjA29 SDANBgkqhkiG9w0BAQsFAAOCAQEAAup3vSB0Hlzsh23ETN8ox0KIR2Ralzr5UjqT iyVaeuvfpWIXh+3FbAgUt8hCvxoYGV6v83OEjkHp5AjJp0+47kW/ZptrN+GR3eH0 sq3ZzfibjSLrFV8L1xi1B9uSD80qIH8o4QyhWoYVBP0D1LADo0r3QTK7GGfLaLlQ Pl0ienrEVBI/65VMx+YkEBq4hzNzLKVsZEjVMq/4wbis4MdVzBkXnDycG8gt62SI qlFWbVjaiV4I2yHUj+0IlN8bJN/BHsFb4sgJsz5EKISRpzaEwUIdtRAJ13hwsre3 ImtG3OPDtyk5mHGVbs5xfr3SUxMvCtIJV2TsdOnoQewF/8pz9g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw1oRw5oyg5AM9e0Ya4e0 xT1Hh8Yd+POFbzgZN/GDsW85BP8xmGOLShYPQT5IE/NUh7VvSFYigpi+ELv6M6Wr 2LeoAMYFZEKmJgw9wpa7SmHd2ukfivr4dQvkBJ9hF4Fv2PMnfxB90yUZ2ZJpBWi8 8W+hJnnlZ6Oac+8zkH+578PKY3iqY0394HebW5q3Okwm/av85aU+rXTmHkoVMpMI peAxQXqZlMeESadzi0jWrEQesNye69eM8/jD2UTNt6APSSJgsho9wAHBhGOKBH7h e1wMvM4EAcx9QVQnlF/iH1yjJ93DOvqZ6otWm9Doun8PNKM8vT1rtOacXrSH1F3D WdErNWROG6dyJwzhaa7gFetKtfbhX35boswCoIjXOWtFkQcEikjzAGJXd84vNHQY EGdhJvWSytMVcz/DGj9Iv6MLP65bghMl1NcK59cQR9rqclJsmVKKxNMh/GO1nL68 18W2VAXEyOLndUcEtpkEC1gDRdvXQjR0tpD1mKdeUBOf7K70COQkL+WIw+2oYgNU JicEoccCGYFxmsO/BxD9m6i6wISDOltxnX2UWaXE/E9MYJ5rUSHlgtd/gsNkxOTJ RaV71j8HBPF2PMhTMuLT7zOiR6Vh25ZLAtj9d5uaZq4sYA1vLqk2sCfdqDVH0Fo7 3vtfGPpiOBNvpjorvUEGUyMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340341596402127017319708140922326900607013 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 07:02:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 07:02:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bobek.nic.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796965948952654149604538792791679989435224496597701799416949851656791059958808080889168481763794486693073809651092714167679898117269492899675712967183525738654997432149616561220929215365612919068174840449424766475291278683655536958866956788096544593905550245063806565332711063683246426842485649586601923666170456185083302742612172856880300598436780069275765275172717820797323302209928142651220109210858334341443864821139408864773340091686625251803716751632994062306130694143033959604279785087328505424338121581724823902442258341272388488031996201520474650219655368788597436012813297820198215820089461829972207243611271407324665910105220830826989708403124565830068204138689968564192990859439456808797876744000931659651004471385246288100367661032842600553278880182617521060072092283022188028315721122426851171282629105884328026838600839519075616583762659301637757889435325682419359511698003651391070194351125133799572033305747953119856676139355723102296167778907595304519287721176817025016775329806527523534313327573748135216549896719079128253999479808467146689983479055668388482455393582752888117203098245461353091785001414592227325241389005103092805756724302644897985314054298761705615751736677551581839473039117472351395102738240291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 296beead9f55bd762dae081787271e9b65bebd0e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek2.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobek2.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainbrowser.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epp.demo.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojeid.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdap.demo.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verification.regtest.nic.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whois.regtest.nic.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001714e82bf360000040300483046022100f0db27d50b051ba312276f7106e7722ac1f71b623a39280a16e42d25ca4b306c022100edb4fe0177c269d6e4eac97650d4ee694a0750c7fea6bda5336ee2b878e36f8200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714e82bf620000040300473045022063d73d504ca166841f9ae49960067dfc27df5fa4b0697af3b0dc0af3ebc4cd4a022100d6a50194ef29ba45cd1e770ee38bca37b687b73e6cc44fdb0174c2aa8c0dbd48 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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