skola-agc.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:96:32:f9:70:d3:56:2f:d2:72:a1:3e:b7:92:0f:1c:1d:fe was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skola-agc.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:32:f9:70:d3:56:2f:d2:72:a1:3e:b7:92:0f:1c:1d:fe
Serial Number (int): 399559255335262468495393013002262326025726
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:4b:65:b5:e1:24:c0:03:70:35:7a:ba:fd:cf:45:0c:7d:ad:67:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:da:d8:14:6b:0e:b5:2a:c8:c1:5c:90:a3:0c:75:8c:e7:43:69:5d
Fingerprint (sha256): 10:60:93:c5:d2:30:13:e0:ef:70:da:d8:d6:45:3f:b1:5a:be:ba:95:4d:b1:e3:5e:fb:54:cc:3a:dc:3f:4b:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate skola-agc.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skola-agc.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skola-agc.cz
www.skola-agc.cz

Other certificates including the domain name skola-agc.cz

(limited to 100 certificates)
bakaweb.skola-agc.cz
skola-agc.cz
webin.skola-agc.cz
skola-agc.cz
bakaweb.skola-agc.cz
skola-agc.cz

Certificate

The complete raw certificate details for skola-agc.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgISBJYy+XDTVi/ScqE+t5IPHB3+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjkwMjA4NDVaFw0yMzEwMjcwMjA4NDRaMBcxFTATBgNVBAMT
DHNrb2xhLWFnYy5jejCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANSk
ypHUpT5hXrCXnDcvXC9KPVbM6nTIroJsAXFPI4Za/MI7cbb0H21z9d8RlrA3vwUw
wtvIIVcpHJ6UYnwATEW23/DyCLJa8ynF/9uR7scy6zYPKNI5rYnsbAGXiShZQwwJ
qUSULYRXkQUJWPbUelaGBrt6QY/tYLhixhrB1ZM6hhx7Ib0qw3aTNGl5sNHFqCdm
uSpq4SHnqIyYUUftp+Px4iABsDz9oHrcsKkBujTvpV46GRsvxxZuYdKFRZx//C7f
+5Oi3bpWeOHH24BYxAYGJgzWP0m7bdxR44PLo2uCYJoyRvynbyf89DRXz/Tz/SDB
CCR9plvkJHTCnk6jdeaBds3yUXJkYVLybZbNz7vDjOTNODmTTF/akEpMd/m3N28P
UeVTX6WT1uaBXNrPHoJJoPWzBS/l58vp276zg12pH3df6XJGY6RZaA3N0ikK9f40
2AEaX4Td1FMAiWoTd/9Ec5VO4FQIbje2hPZ2klvrElS2Jpg3FnE4X0qyx7xp79Gt
5InssB9DjVu6OenqZuXQWKjvCsKIbdV17H9wSo5AbF+8nqngox3tZpAQHbgCk/hd
7G/exVCR1oy33pR3ApZV6NiquAxkEBvW6ZfbGQ87pvCQvNb6uka08upozsNKw8wa
EHT1zqKcCY4jChgwn4rMEVrm/AUHa7PKZzAc9RoNAgMBAAGjggIfMIICGzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFFVLZbXhJMADcDV6uv3PRQx9rWcZMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDHNrb2xhLWFnYy5jeoIQd3d3LnNr
b2xhLWFnYy5jejATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiZ+e
ticAAAQDAEYwRAIgB2PiMz6lLJfz8hokREsHnEGM1f/s/Cy5Q8H/SoIsabYCICZo
MgHaT9RtoYrN8Rgv2XoGTK6hx+rJPFPNzRhQkS4DAHYA6D7Q2j71BjUy51covIlr
yQPTy9ERa+zraeF3fW0GvW4AAAGJn5619wAABAMARzBFAiAK7p/8KmaQr4tGTACS
Vf8lU2N2KeH6szhHPtgiNAwYzwIhAJ22eAiCnSoAnuhd3/hJngF/0gn0qrfZZx1N
HokaXozAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ/jSBZDzQ7GDVj2vb+XIW+sGz9Vl+
jtqVcMT+ioeh2kV6QOuBidqj17s2sYGhmUlQD1M1SJ1GHMcttGmWwl5bJxJH9Edc
DiqaHmCOl7WQzXYPkGHiJ0L4MfLk6hgyqU8IYl8lq0slV8jsh0gdtNVx9tDFovzJ
C3bUZfCWZlFJ9UIUbJweyQ/IUVxIG5d79dtnH4xRnB5dvBeP9pWa9tafjBbcgwaM
LqOECgU/oqvdCab1DxSid7zwLlumFfAXediGrKEdBONeSrR7elX1JWFHaSkNlyCx
mKMz/5NRduFPk3JYeWVEu1qHX7w8jbEganxFWTLHs+PudxokCXhsXXhn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399559255335262468495393013002262326025726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 02:08:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 02:08:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skola-agc.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867510674448872073631193801483502225859705758710151887847895126035825960942200214624922833672174409751838802322534998558162850172710457891430319967126990081717501460959435599412272948932364794257553826021337151928533181053208907606669760746507788852027010530913756094203898481342326634428982491458250343075828411148764209826527211910643250545655433718577703906116926570193048079667646348724471790043769867839077316679306250731450703029307159812505300520255174120959681766861364488057819264293982565313430309778062732082217343999184570074154425908172033707239822176790874764589251209755997215795003855104458351055904622610581162768803798749620889200563467050488579192978689980295228768292892623268549233217865430646498516856754639354405423166992847048730809532484657443124378620410786449884528717344969644735989428202541053009354477657356891737759771090850383868697987804090118514760144165981686811447252135043431571491516051506873056426199805795019672385515500626772539660145375390636577740816798077672880988047922935122408873457455521012842328935495300143613176360039609370526997152121490877351297365439261950592644132934952225272948533403840019090923844581258684176342532074684883403973611980322981804790225777824199703657782254093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							554b65b5e124c00370357abafdcf450c7dad6719
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skola-agc.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skola-agc.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899f9eb627000004030046304402200763e2333ea52c97f3f21a24444b079c418cd5ffecfc2cb943c1ff4a822c69b6022026683201da4fd46da18acdf1182fd97a064caea1c7eac93c53cdcd1850912e03007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001899f9eb5f7000004030047304502200aee9ffc2a6690af8b464c009255ff2553637629e1fab338473ed822340c18cf0221009db67808829d2a009ee85ddff8499e017fd209f4aab7d9671d4d1e891a5e8cc0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0019fe3481643cd0ec60d58f6bdbf97216fac1b3f5597e8eda9570c4fe8a87a1da457a40eb8189daa3d7bb36b181a19949500f5335489d461cc72db46996c25e5b271247f4475c0e2a9a1e608e97b590cd760f9061e22742f831f2e4ea1832a94f08625f25ab4b2557c8ec87481db4d571f6d0c5a2fcc90b76d465f096665149f542146c9c1ec90fc8515c481b977bf5db671f8c519c1e5dbc178ff6959af6d69f8c16dc83068c2ea3840a053fa2abdd09a6f50f14a277bcf02e5ba615f01779d886aca11d04e35e4ab47b7a55f525614769290d9720b198a333ff935176e14f937258796544bb5a875fbc3c8db1206a7c455932c7b3e3ee771a2409786c5d7867