www.autoposik.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:4b:72:42:b6:f8:e8:b2:45:e7:8c:aa:5d:61:59:f2:a7 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.autoposik.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:4b:72:42:b6:f8:e8:b2:45:e7:8c:aa:5d:61:59:f2:a7
Serial Number (int): 311458651107320028743508149589646681698983
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:ed:ad:31:86:98:2e:2e:6f:48:f7:a2:14:c3:f7:05:5a:9a:c6:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:af:95:92:05:f2:e1:19:ad:b5:aa:f3:c6:78:f6:09:a3:63:82:35
Fingerprint (sha256): 14:b3:aa:6d:48:c5:31:d7:ca:80:12:63:d1:ab:f1:59:4e:db:f4:52:50:20:58:1a:4a:50:30:9c:7b:d9:ba:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.autoposik.cz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.autoposik.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autoposik.cz
autoposik.cz.vhost.omnio.cz
www.autoposik.cz

Other certificates including the domain name autoposik.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.autoposik.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311458651107320028743508149589646681698983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-19 14:17:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-18 14:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.autoposik.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765501262591999738110268703634208080583867734660563049969936681566055363831910879825251825980661089117263615826637889781224240963594184380218477511069439056618170697791360028761581217166167220680813037612881183426299398327279793292069655207242142544607701668384364754786635501346250363158584641777142701329928775763989673098511079690330646123544146703541591372438816832061358847481324192620120379515622577331064805363145045246510802918776946902924429033375702080307802920175244115189155893712478564344041683308527107553727694402150560555826057997082944121398169186235477615708927428956005517656423269546611035848790417954071146439555557076530598568158615281387024954342287161341925321868703060629842075751340216742554479994744033514767165556478666165663490376912993088574836219165535467880000750558900606325514948214838433265838147360671436817924393149188683135834407493833897989558404693004177746212662294696426259654465067582989859898121050134091708395651593086462097708994976861466805256959784596578784440977533053574929119747109700591166084705739059572571642420409919848160350000033784343187469651284897213278850914249525247757761504557767266450030359328211503816393505690933168215285471736413462932381563245493136310561459774711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1edad3186982e2e6f48f7a214c3f7055a9ac696
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoposik.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoposik.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoposik.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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