duhovka-prace.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:c2:9c:aa:9a:e7:17:31:b6:1f:2e:f1:ef:ac:c9:95:df was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=duhovka-prace.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:c2:9c:aa:9a:e7:17:31:b6:1f:2e:f1:ef:ac:c9:95:df
Serial Number (int): 309915637587828495589423056079119303939551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:89:6a:fa:08:7f:ef:f9:1f:2c:fb:4d:8d:91:14:05:b3:24:46:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:ac:ad:3c:dc:33:1c:30:f9:56:6b:8c:b1:40:6f:d3:76:26:62:89
Fingerprint (sha256): 10:cd:9d:6c:5a:68:63:4b:13:a7:3e:f8:f1:89:4d:a9:43:0e:68:75:9d:5b:1b:99:93:db:1f:55:20:b4:1d:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate duhovka-prace.cz

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duhovka-prace.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duhovka-prace.cz
duhovkagroup.cz
duhovkagymnazium.cz
duhovkainstitut.cz
duhovkamontessori.com
duhovkamontessori.no
duhovkaskola.cz
duhovkaskolka.cz
mojezona.duhovkagroup.cz
mojezona.duhovkagymnazium.cz
mojezona.duhovkainstitut.cz
mojezona.duhovkaskola.cz
mojezona.duhovkaskolka.cz
montessori-trainings.com
www.duhovka-prace.cz
www.duhovkagroup.cz
www.duhovkagymnazium.cz
www.duhovkainstitut.cz
www.duhovkamontessori.com
www.duhovkamontessori.no
www.duhovkaskola.cz
www.duhovkaskolka.cz
www.montessori-trainings.com
zona.duhovkagroup.cz
zona.duhovkagymnazium.cz
zona.duhovkainstitut.cz
zona.duhovkaskola.cz
zona.duhovkaskolka.cz

Other certificates including the domain name duhovka-prace.cz

(limited to 100 certificates)
duhovka-prace.cz
duhovka-prace.cz
duhovka-prace.cz
duhovka-prace.cz
duhovka-prace.cz

Certificate

The complete raw certificate details for duhovka-prace.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03kJIVlIJZ0sw2JOPwZw
mdNm4itslqudm+uCtmTFs0CBYkhW1ePELiouGbRLCh/kOBpJovn+fZA86uO8SEwk
4AbeN7cANQoVmqsiUQqboG33UzlBujdE5JjbuqsjdUg/teWd/WN4zE0YVzlfiCrt
3Eebba+/vuQ2nH0J6tFKTX5OXHoakBMB6QazvWjoogD08uGpYF6P9ey7euMBl9rC
dIU9T71WZE89ewEarWyn8DDihsRU6sOl4ZouvHDzSawNEO3YF3UBSZp6PpaBN+Hm
wYi4MnA3ZthNdx24wagslouALz1yGfp8Ar9xeSCpsbk9i0ZPIhVPKM8/9dorv8gY
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309915637587828495589423056079119303939551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 06:43:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 06:43:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duhovka-prace.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26695967258792018802710239989292361003546573306110968772244416624429774247572865589403170893018292609588957718039802440730254741890159141488309966534661302253725237223445020629903139318430079033091908633251031540260717514105164199511725133059093233419039235985348485743462750650197387419011807306550460686672676474718275287452995379882741101770027552444090923562542380650933577567044147936319502321489726230582369086400490842745445953067192470964504734903174531618611895926612986071915179126353376657701581499209827317142384179009921341289236425473132872042367366059884078791144865415439357976885372023246092994353209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d896afa087feff91f2cfb4d8d911405b32446bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovka-prace.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkagroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkagymnazium.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkainstitut.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkamontessori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkamontessori.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkaskola.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duhovkaskolka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojezona.duhovkagroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojezona.duhovkagymnazium.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojezona.duhovkainstitut.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojezona.duhovkaskola.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojezona.duhovkaskolka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montessori-trainings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovka-prace.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkagroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkagymnazium.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkainstitut.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkamontessori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkamontessori.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkaskola.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duhovkaskolka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montessori-trainings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona.duhovkagroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona.duhovkagymnazium.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona.duhovkainstitut.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona.duhovkaskola.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zona.duhovkaskolka.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b60a36162000004030047304502207e7672f0a850852181f2a3eb7036bb177d82d472c3c53619d7534c05535fdcbd022100e011f3082ec9007d199188c3a522e2e7132e41e1bf6019291d2b76170d9a503800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b60a3618800000403004630440220436e4046cfde30f2ea22cbc91bb1205e2cf726d3410b5376bc7c9ef304edba3602205728a2c199dd8930bce9e696bf7b05e98c8b585afdaba18c37983850c8f959b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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