unizdrav.sk

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:e4:72:de:d1:fa:68:4f:ef:f8:c5:2d:35:31:f4:5c:20 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unizdrav.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:e4:72:de:d1:fa:68:4f:ef:f8:c5:2d:35:31:f4:5c:20
Serial Number (int): 405579959427049659108637184563434092780576
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:0f:0d:5e:29:27:67:16:05:30:15:69:df:bb:91:71:46:85:83:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:3e:0d:c8:e2:b8:f5:84:fc:20:07:f9:b5:85:de:46:a4:ba:14:2e
Fingerprint (sha256): 18:d0:45:a1:b3:69:e2:f7:63:7b:11:6e:ee:97:55:67:36:e2:85:c2:be:68:3d:3b:89:61:4c:92:95:f3:91:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate unizdrav.sk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unizdrav.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autoconfig.unizdrav.sk
cloud.unizdrav.sk
email.unizdrav.sk
emailcom.unizdrav.sk
emailcz.unizdrav.sk
emailhu.unizdrav.sk
maps.unizdrav.sk
mobile.unizdrav.sk
repasmont.unizdrav.sk
s.unizdrav.sk
software.unizdrav.sk
unizdrav.sk
webmail.unizdrav.sk
www.unizdrav.sk

Other certificates including the domain name unizdrav.sk

(limited to 100 certificates)
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
unizdrav.sk
app.unizdrav.sk
app.unizdrav.sk
unizdrav.sk
unizdrav.sk

Certificate

The complete raw certificate details for unizdrav.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405579959427049659108637184563434092780576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 22:00:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 22:00:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unizdrav.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725210085359261121616446086050647433496717264659055170093522450660770772191838592450707836508791698015838470766905748428519907026190917350159923175058774579221389965257476124176735627357282262224880185967471119652668191026642659234462066550965512988146805954416743163433135213564747770740464550373623818739916223078912110266146010754738736077037582271454416129105549179196179761089013637208202503274007595439862587038702188917340039338592492610431217859489140198921143490138875240004122399882963282293486512010556990832973245487239665811815132145411388666402634783918911236282273679853681950042526445439559699873399410038135133051984952161786496297453963087404471278246765837876619874864242363243314200237727576680247897554526849422650576541701182163069698248528747263412057517608100399456567471429526853155949784239448256616587489577598830747688024444161222701983696268224260117248439531658393667941999403362521137642256836524706795219484279745576706432338793718096317613107556331155372607039971814362728586513051707596810442896555498136465374680390092729269764453733710114812184767555094523079226980340132752517241122649617812916124591541388941527232919356344826453592499350981543091929634160557428138781505461890420529358926257607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							350f0d5e2927671605301569dfbb9171468583ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcom.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcz.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailhu.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repasmont.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.unizdrav.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unizdrav.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001863d8f1746000004030046304402203a5a3b990b31bb18c074815a0ddfd91daa9dfaba8fd92371d48d6c11373f8c2802205cf36c55b7f7d5b4fd31fedfc791bfe00057cb743ce640b50779644e223c3fa90074007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001863d8f17590000040300453043021f1102087ebe024e59a82b33e4e711eafc8192f254d60698ae8969dcbaec9cb302200420c8cef7f6f2e97be29219c50ecb1f4f61f6feaa66150f99eeee8bd90bc319
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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