archi.gov.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:7b:b3:89:df:0a:25:0a:e2:37:a7:ae:5f:20:c2:ca:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=archi.gov.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:7b:b3:89:df:0a:25:0a:e2:37:a7:ae:5f:20:c2:ca:ea
Serial Number (int): 320710416900504390541721529339155109300970
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:b6:45:51:39:f2:52:b9:eb:4e:d0:c7:7b:19:24:39:47:c6:6f:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:b3:eb:41:3e:f2:45:e6:88:9f:07:4e:7f:4b:92:4d:50:0f:e5:db
Fingerprint (sha256): 12:a4:c3:1c:f9:e3:6d:a9:82:a9:75:a9:c2:da:c3:f1:0b:69:48:93:12:8d:09:bd:e3:0a:d0:71:53:50:54:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate archi.gov.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for archi.gov.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archi.gov.cz

Other certificates including the domain name gov.cz

(limited to 100 certificates)
copernicus.gov.cz
zony-idsjk.kraj-jihocesky.gov.cz
ctu.gov.cz
rpp-ais.egon.gov.cz
odok.cz
eru.gov.cz
ov.gov.cz
data.gov.cz
pruvodce.udh.gov.cz
cms.gov.cz
ov.gov.cz
data.mvcr.gov.cz
portal.gov.cz
smlouvy.gov.cz
rpp-aism-pub-test.egon.gov.cz
cert-externalauthapi.caais-test-int.gov.cz
irop.gov.cz
data.gov.cz
upv.gov.cz
frs.gov.cz
digitalnicesko.gov.cz
zakony.gov.cz
vzdelavani.gov.cz
data.mvcr.gov.cz
slovnik.gov.cz
voda.gov.cz
*.gov.cz
geoportal.gov.cz
xn--slovnk-7va.gov.cz
data.kraj-jihocesky.gov.cz
testrs.gov.cz
rpp-ais-test.egon.gov.cz
twist-gp.kraj-jihocesky.gov.cz
mids.gov.cz
zony.kraj-jihocesky.gov.cz
www.gov.cz
code.gov.cz
viap1p.ros-iais.egon.gov.cz
vea801.gov.cz
desu.gov.cz
viap1t.ros-iais.egon.gov.cz
biap1t.ros-iais.egon.gov.cz
opendata.gov.cz
ext-mattermost.nic.cz
ria.gov.cz
admin.gov.cz
rrtv.gov.cz
*.szpi.gov.cz
covid.gov.cz
www.gov.cz
vea801.gov.cz
zony.kraj-jihocesky.gov.cz
*.kraj-jihocesky.gov.cz
spektrum.ctu.gov.cz
vyzkum.gov.cz
razr-pub.egon.gov.cz
testrs.gov.cz
ra.gov.cz
mids.gov.cz
archi.gov.cz
zds.kraj-jihocesky.gov.cz
nap.gov.cz
rpp-opendata-test.egon.gov.cz
cms.gov.cz
opendata.gov.cz
rpp-aism.egon.gov.cz
museion.kraj-jihocesky.gov.cz
prod.frs.gov.cz
tsl.gov.cz
isnipi.gov.cz
testrs.gov.cz
vea801.gov.cz
rpp-ais.egon.gov.cz
www.snsu.cz
tsl.gov.cz
uohs.cz
registrace.udh.gov.cz
gov.cz
admin.pruvodcepripojenim.gov.cz
vyzkum.gov.cz
smlouvy.gov.cz
rpp-aism-pub.egon.gov.cz
brvpn.ros.egon.gov.cz
uzsvm.cz
scitani.gov.cz
eru.gov.cz
mids.gov.cz
obcan.portal.gov.cz
upv.gov.cz
voda.gov.cz
code.gov.cz
ares.gov.cz
chciidentitu.gov.cz
biap1t.ros-iais.egon.gov.cz
viap1p.ros-iais.egon.gov.cz
czechtourism.gov.cz
anonymizace.gov.cz
*.kraj-jihocesky.gov.cz
mk.gov.cz
isdv.upv.gov.cz

Certificate

The complete raw certificate details for archi.gov.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0g2dNVEtyqMwJwe0gmkX
g3H2YnncyTozHAX0n2WlKG+jz+3iSc/UNCgsVLWNygVffZl/1Q0x+zLfbVi+UnwP
IYhHf07wzj9Iq0qYxy9lWrf73/1AFSRu5pPE8Yy1JkEOwNFGuHJIlSBVTRpiGVp7
xxQotF0Ql2l4ltYIp7y5hJ5gFq0FoKzXPUNj72NY1LMoj8RWqEzBsQI2OXzSLx6M
Fiv7EoC0DItbJq6eh2AL430V8G+S6y0phmvUpEjllezCH547LQwnBj7CLe5R1kPk
EFXoWmmSZZfxaXxc4wS6PkrJ91WtdGX+uYstt0qtixOvk7Tpy0tIky7b00wl6e8M
KuMLQ4SsK5dNw5e4FOnwjoFueJSUKP1JXm/PceK/QS7Zz5Ze2EGX2ZiYqdzyt9mN
iZZ0csoGYCO2UUwB+Mz790RObEuLasQk2m2nabsDYPndKImfi4HSK+G7LmZd0DhX
YGwORQE6fJRV6X6tpPEPF/ioIFwwd+eWDhvD5q+qDojfiblyn9tz9rzPbDFtFMg2
ojp4tdui+PYhfqapt3OX9jrtfBmXhPvJVk7HckqdA/slVCnQKzkl5h+yjqt4ikRE
ylklo8Uj8pYCPWrB08T1W2jmn/kG7H9LBSYdqfRtj2nC3yFDlu/52DPBl3v0ewp7
Td7zUlGY9nzgeQ1ARaeXhk8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320710416900504390541721529339155109300970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 14:28:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 14:28:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archi.gov.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856942209991689445299112121027565424117415421098377791156034330753777955824286400221630596095503104415301558196760853924116544286978820700256191669059478865900942236894459877274709217082449307780487212439249654273198377741479469605854098311178585155250680929108316366221440427828763666739428092629410610802143437893594954108765814317348803712414597406588763711910895023204664825059219741691254008690122144119118576481510656168665385918460053738000653734620157716455925674078666665296549137388905199750832702060288676078509314261801218070864336586805009179470275463865409735796875905143364168931696737592930488220970965509027177713140569325593193058323689759230467097946211990258297746396190654616036787702905162442474392988099818071333542088820533371163455786521372178682546658312114310261712995679276283369953235707124034707397552328066102227782392780881328449748641668399061421920338529710043047505647680417529934386926874456266541131336617961440950779317756369910878850297015372828438248354960612696865721212564276555436636637021455420228683322258342151788974294510972781147041177198697383620623131841842014667115744783102723326730261084662826409840282478683544755512939652349785090643820941133855554729802598932160525376232588879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63b6455139f252b9eb4ed0c77b19243947c66f8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archi.gov.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c71d8ebfd0000040300483046022100995a25b1259c293714b8b52207b6c9d27a36cdb983cb7ddbf41bd9a88c2d1b1e022100b6b3fd8333d63ecadb735a55c16fedce1678a55882fd364619d687b41720d71500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c71d8ebfb00000403004730450220121983cad0495580535edfda0c019dc67464b22ee6c122d07259e4b9b06bd662022100e354a45a7ba03e80e46dfa96895de1fd3edf75543ede0d030cb7b6e04574c761
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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