www.bezouska.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:1f:2a:d3:4a:d1:fa:15:53:dc:2f:59:13:67:28:e2:20 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bezouska.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:1f:2a:d3:4a:d1:fa:15:53:dc:2f:59:13:67:28:e2:20
Serial Number (int): 274989580901971964429009326212365224043040
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:00:e3:5e:10:6c:62:fd:5d:37:76:c3:6b:6e:44:5e:74:1f:e4:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:17:f5:a8:25:5c:9e:10:ad:e1:64:e5:09:72:06:16:c0:78:e4:e3
Fingerprint (sha256): 11:62:10:e2:18:bc:d8:a8:0f:41:2e:02:b4:92:2e:f9:c4:1e:24:dd:c2:f7:3d:cd:bf:0c:90:26:37:52:2c:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bezouska.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bezouska.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bezouska.cz
www.bezouska.cz

Other certificates including the domain name bezouska.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bezouska.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgISAygfKtNK0foVU9wvWRNnKOIgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDUyMzAzMjBaFw0x
OTA2MDMyMzAzMjBaMBoxGDAWBgNVBAMTD3d3dy5iZXpvdXNrYS5jejCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALgg8s3rttfEn6sYk5DT+aLa6sPJcD2h
HCv1eT/4JN/1dP+H3rKaWA4xJZJiU1CLNvfca81KZ4VikXtQtmwaBPxG/0IJOvyk
ynW4sID0ztIGJWB05F18Cb4uVebHDFVHTVWstRZlK1wyiSi7fi5StC7HW6vnNdmE
s/zTVoiPOEUtbdPzwVxRw7K7cy0yPO0LPEcuaBZwGEPIm4aIfpt2lO5ZljEYsxGk
A8I65w4sO8p465V5YCqaBdOuR4AyWg120URg5C1g28UoiZ18P+XX9TX8LmtZhT/W
gT0y1aK9pb+mSVDD19bkzWaHi+D/4Dm2hY/fIOD1/qITEss8/Q0ShDzdHO0tWzm/
I+0NF520Q7TKQqyrPI0mgoekltaPJhAOQghwuOtbnM3Ebsc9WVdkSy5HXja0BkeW
jMrIB2PWkBEAXL63x92AzABVt4HpNTR9i2MQwvspPRr93Pt2JDsj6p/S1c1ljB04
ijVE1F10+BkmgasnTlNx3gyzr2aKx76V7MDruRmebq8UCAvrR/nJ2jjH26hfnpgE
GH2kLOJlrbqOWUvrIZJwIEoMhXOHifjR4lelWpZWzYLVBJvy/PEcnKmepkX/YKC+
Q4rQ/wLB8ko1NlGzdrOL0hIg5YWybjilDIWbNVukqvp1gd1mKedXxdPBYXTlCvxy
39RQiR7mm2kjAgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFB0A
414QbGL9XTd2w2tuRF50H+QLMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wJwYDVR0RBCAwHoILYmV6b3Vza2EuY3qCD3d3
dy5iZXpvdXNrYS5jejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1
eeYQe8xWAAABaVBPycsAAAQDAEYwRAIgWT+8G64F0P1yeRSK8HF720mQkZX6WTsk
+3APyxTzVUACIHJxcL+0d/GK0CDPfBeKmTAOQJLcBwW/fMMHID3WP+w8AHYAY/Lb
zeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpUE/JywAABAMARzBFAiEA
xb6VNeCL3VONX7aef+NTVbq0n/waFJp9b0h3hM5qXP4CIC9RTuJa7R7HINenFzVa
3SQ82S3X2CE/7fHq4IV+vkuXMA0GCSqGSIb3DQEBCwUAA4IBAQA75N5BgAvGNj4y
p4bM/QRuU280VM8tRCuNQ9Dcv6SKV6TdQklJVkkSAJS3F4+tw9UdBgaicbtycdfl
+vkwy0ZGWQsIEY81HSNLjS/xcC6hExJW8l3HOk6feDDqALme7ANPfagCv5Z5rv+Q
hfkP2Oig61b0W60Vl+yrPJbFm8YeNg17j8qeNwuAlewyPqZKJBqRVeq0sDVc5jP9
rAZ4Q0p3Fi8YeDnPWuIscVdYMo3h7V7rXP7gGOO0zH+2bwQdjhq6OnC+nZj/KZgr
MKaVCuxlwTlzO5ynVYDF35fd/8TNYcTScCLPfA6U5MV8p3YKtNbh3CueY9EKAaHz
S0f9QtSZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuCDyzeu218SfqxiTkNP5
otrqw8lwPaEcK/V5P/gk3/V0/4fesppYDjElkmJTUIs299xrzUpnhWKRe1C2bBoE
/Eb/Qgk6/KTKdbiwgPTO0gYlYHTkXXwJvi5V5scMVUdNVay1FmUrXDKJKLt+LlK0
Lsdbq+c12YSz/NNWiI84RS1t0/PBXFHDsrtzLTI87Qs8Ry5oFnAYQ8ibhoh+m3aU
7lmWMRizEaQDwjrnDiw7ynjrlXlgKpoF065HgDJaDXbRRGDkLWDbxSiJnXw/5df1
Nfwua1mFP9aBPTLVor2lv6ZJUMPX1uTNZoeL4P/gObaFj98g4PX+ohMSyzz9DRKE
PN0c7S1bOb8j7Q0XnbRDtMpCrKs8jSaCh6SW1o8mEA5CCHC461uczcRuxz1ZV2RL
LkdeNrQGR5aMysgHY9aQEQBcvrfH3YDMAFW3gek1NH2LYxDC+yk9Gv3c+3YkOyPq
n9LVzWWMHTiKNUTUXXT4GSaBqydOU3HeDLOvZorHvpXswOu5GZ5urxQIC+tH+cna
OMfbqF+emAQYfaQs4mWtuo5ZS+shknAgSgyFc4eJ+NHiV6VallbNgtUEm/L88Ryc
qZ6mRf9goL5DitD/AsHySjU2UbN2s4vSEiDlhbJuOKUMhZs1W6Sq+nWB3WYp51fF
08FhdOUK/HLf1FCJHuabaSMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274989580901971964429009326212365224043040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 23:03:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 23:03:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bezouska.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751179578700723351009676971048129756954375834724311570793826967918349012883823064350540405328166065561088315276343877102901471441904467358614482592296724245349892011170026464695784547323301108037737907591646699111871776195801445962328776933603182978579870677128211710042241428896403706519657589489482598473289333658962548511474378284170413514731125078906509213059856721422758137362877170097610830288384101689687657936086800114534889434255751834362382063286072010458812513789678248987317470238134410398252988257090199165221513175658316451429047718344873353151869897649835594978094681355699967035057630819239292682044189368230730499410892688436444290521479709685847761663401305382938576315268210548707513940956273219793700977766878328924803416777314741837812147106035438396836573881436783376189213685112120204774801382308384935306596775888225436729939090262180755726911607094289267898693388913154841079978542904611323432490569548039700045201870787670648257840966791591608417425090786514265282074317632204723935684312695517728644733458909438798829186520659951148260202965869428977782261084492377522393024509565154527636999569101136089032331219487380289507301355523465100650817277746844020014677016868654726436683563333487472261434403107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d00e35e106c62fd5d3776c36b6e445e741fe40b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezouska.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bezouska.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169504fc9cb00000403004630440220593fbc1bae05d0fd7279148af0717bdb49909195fa593b24fb700fcb14f355400220727170bfb477f18ad020cf7c178a99300e4092dc0705bf7cc307203dd63fec3c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169504fc9cb0000040300473045022100c5be9535e08bdd538d5fb69e7fe35355bab49ffc1a149a7d6f487784ce6a5cfe02202f514ee25aed1ec720d7a717355add243cd92dd7d8213fedf1eae0857ebe4b97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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