zbraslav.opac.nm.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:50:54:5b:f1:18:63:47:0e:8c:a6:50:46:a7:69:5c:19 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zbraslav.opac.nm.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:50:54:5b:f1:18:63:47:0e:8c:a6:50:46:a7:69:5c:19
Serial Number (int): 270290975592624858942960517073572266073113
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:89:15:3f:d6:0d:dd:3c:ba:f3:bc:67:10:e4:8e:31:dd:7c:ba:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:6e:49:5b:b5:cd:34:2d:74:1e:db:e6:bc:a2:cd:14:e7:2f:5e:28
Fingerprint (sha256): 17:68:aa:83:fa:b0:5c:50:0a:3c:7c:85:06:71:e5:b8:c6:18:ac:3d:e4:47:6d:71:4a:f1:01:5e:da:e8:dc:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate zbraslav.opac.nm.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zbraslav.opac.nm.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zbraslav.opac.nm.cz

Other certificates including the domain name nm.cz

(limited to 100 certificates)
nm.opac.nm.cz
mbssceny.opac.nm.cz
rezervace.benesovavila.nm.cz
kanesh.nm.cz
kanesh.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
vademecum.nm.cz
intro.nm.cz
nm.opac.nm.cz
vavobd.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
kanesh.nm.cz
nm.cz
stt.opac.nm.cz
npm.opac.nm.cz
nm.cz
npm.opac.nm.cz
prazskestopyantoninadvoraka.nm.cz
kanesh.nm.cz
sumerian.nm.cz
nm.cz
cmhdok.opac.nm.cz
posta.nm.cz
antonindvorak.nm.cz
kanesh.nm.cz
amusing.nm.cz
publikace.nm.cz
nm.cz
botanika.opac.nm.cz
android-app.nm.cz
amusing.nm.cz
intro.nm.cz
mbssceny.opac.nm.cz
entomologie.opac.nm.cz
oncd.opac.nm.cz
kanesh.nm.cz
kerio.nm.cz
edukace.benesovavila.nm.cz
grepo.nm.cz
mbs.opac.nm.cz
botanika.opac.nm.cz
publikace.nm.cz
botanika.opac.nm.cz
cmh.opac.nm.cz
nm.cz
*.opac.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
intro.nm.cz
helpdesk.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
csds.opac.nm.cz
eshop.nm.cz
posta.nm.cz
odtvs.opac.nm.cz
antonindvorak.nm.cz
stt.opac.nm.cz
odtvs.opac.nm.cz
zbraslav.opac.nm.cz
odtvs.opac.nm.cz
bedrichsmetana.nm.cz
rad.nm.cz
*.opac.nm.cz
navigation-app.nm.cz
mad.opac.nm.cz
no.opac.nm.cz
t.mailkit.com
no.opac.nm.cz
admin.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
ms.nm.cz
kanesh.nm.cz
amusing.nm.cz
mad.opac.nm.cz
npm.opac.nm.cz
antonindvorak.nm.cz
onedrive.nm.cz
p.pozvanky.nm.cz
intro.nm.cz
helpdesk.nm.cz
rezervace.pamatnikpalackeho.nm.cz
t.mailkit.com
prazskestopyantoninadvoraka.nm.cz
amusing.nm.cz
intro.nm.cz
t.mailkit.com
oncd.opac.nm.cz
ms.nm.cz
rd-gw.nm.cz
onedrive.nm.cz
mbs.opac.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
muzeum3000.nm.cz
oncd.opac.nm.cz
helpdesk.nm.cz

Certificate

The complete raw certificate details for zbraslav.opac.nm.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvGyAdwH/Z4iCSxNhyeCh
lvyEINKFDljgvVoQKHdk9F3pYwBMgafWWL+wiqiOxsbdLLpcVIjLcjIqtSo47vj5
JUcLbTGT9K0bJLo1YPK8yBCECi8wCo5q2EFVJ3rkqQk/GD8aeSftaii7HagWNU8q
Q45doUGE55NUgWkpjPaFO46RrVEH/ouTJVzxMrI9Sf2B5wyZLBUPpWdbdxofwT2o
GwSwVla882FVL/R7WcJgeq5dOMyNblzjMOCFIGhs7xLrZ5E2swg34WqMjWVVcOnA
OC+d9OyBkpiRYa+jY8U6t2BqL8swJwU5yBV4d/TzP1Qt8vWQu/L3ZJ5eb2O31XzQ
CRRhYn4nJtIM9Lwg7c3CMw1ujpMiRr/kVDYnccWtoaLG++ekzIMJzjFnAk2PTC3U
LtBHxWRUxZRKMqq149ncLdbAuyKD8e6OTdlhOry0BCQcVYDIeN/5SdrVVAw8gNTg
+QsyZc/JwCKV5uVKRAiZHUbVyYebylzAfebwKu2/IU+kul1DlLFJkvgnEAcUIukZ
Do2WvulDfAK4l4w0LDTGpR1SjnpCAqTX+834sirWQafZnM/ciMKF82ghqCyX5jxk
9gxcrxpe7EzPgTYGyh+e0+a4Sn0pcmqjpJajgN+YkK/SgBgdTSaF0rxt7AOrzTfN
ngkZrmDoKfRYrQ0Dbqmu2/UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270290975592624858942960517073572266073113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 19:11:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-01 19:11:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zbraslav.opac.nm.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768702181622420260106183914353704755478207546194858370548769237210348086596862344261494208686581189334498069974904090912846492238196366464355052732499210011759412848613599155942888031711467070995686652059437433340829640767381567603740529442393911352555641008656944435797661734528601377019352681208774673908948479224602407151309240058177275842624585764781123314835914485321463771249682199280868371892447024324844569866675001677801442982365838522639238003735443492910619166160533191326541875181345060059039654549569153661855963897332610627233869652316097276554159073974473222928661009224584435751085674733594130685696704927203980238994463169665080155327858239335854188750210638330981917977679438864803209615707653143469718121224865587008600463292595873161623730140817879471794133363489176190794636552868084871242007891230589205063284399544377914265628166293764325297510612786890702549581639608316760066432452304172442659413357545610800100843465817648287517825822115393500662311756891095847284930036945148209751976031961054904598014375619915664194549247619588851396642342554676473763333949152174786947555170107659241798192226200507190508097400440773218198828672421588835144395786970166639999405643591991297250906482874242799824502971381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b89153fd60ddd3cbaf3bc6710e48e31dd7cbaa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbraslav.opac.nm.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001775a127d3800000403004630440220287967efef8a72131629f311a06f8c3e99706bcb962c26d46c5214249100922002200a81308d78cf98b175876dbbbef4fdc63165718003b0e794b4fdbdecb0c00d270076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001775a127d9b0000040300473045022100e9da88b628ee73593f4f46d13fc66adfddcf2e5c8f4d020de6fc90e7667ed352022040480746f0f3f26a51bf10d45841db6563b66ea7c1b23aa2ceaed9077f07437e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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