mail.rja.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:71:bc:6e:4e:fe:8b:5c:84:93:2a:ef:1e:27:a5:44:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.rja.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:71:bc:6e:4e:fe:8b:5c:84:93:2a:ef:1e:27:a5:44:81
Serial Number (int): 266592274451751547680937815790523940947073
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:c2:89:2b:74:56:5d:3c:a6:46:5f:a3:8e:80:ac:70:61:70:6d:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:5a:09:78:74:de:ab:3e:86:63:ad:7b:fa:fe:5b:cd:1f:84:4f:0c
Fingerprint (sha256): 19:b8:1e:62:39:61:5f:01:57:62:34:9b:7d:d9:74:05:a0:df:03:c4:fe:9b:95:75:7a:dd:1d:7d:0e:75:0b:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.rja.sk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.rja.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.rja.sk

Other certificates including the domain name rja.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for mail.rja.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7BrHEnpvEjB44QgdL3Pm
/+ybMiSDTUWsKcSw3QyLaIWmcPb1o1wLeDUbZy4QxpomMr2QGtdiu43jkCU+erya
PM6jKS3ZEYIJbIz+eoVJ1Je/650HqvbLcc8dEz0fTWRD49wId6OvKtCgauVcQyb7
bgZ/QO8zCohZsIVclAz53alO9LCPhoUiFtQKUxJ/0zDOQG6QByv4z1K1imLVvHU3
BdycpFI3wKpThAOhnD7J8lT+K34BMeVtVVE41zLCo0tfzBAZUtCfS5nitFefhHyC
uxx4m5XfnZ9pQMpKkBjJdIanBo4Rppab6ffASBgiRJkz04iBVMwQwKBZX8nZ9R4f
qfwsiMOmHuHiYIXVKXKMA+9WT1xlVcUohu2wgHSJfbB2eBwMSntSmnSzy/nOVA8Y
J9x2n+zEkfoy/ERzqZsDiNZHXdfJjMZjzM1lnWVDx75qw/Ym7cM4WuHuDnZqD/B1
Hc8j2+6ywbZPUFfq+JNMWM2HwRr66/nWL+Q0E0TNjBLq5TRwsipXxaG/7299MzFX
E9oZhQpsPUViUo0wuSPpE/lNYUW/lD8D9xiqESBhFFDGR6GksYilfftILLjfqovA
Fv+tKLHn13rTH9OkatHAumNW7/I/7zRR3TBexv9tOkXQf55tpJNy85wfBGpsFv2F
4CEB95NHd3FO48xqoYFQgC8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266592274451751547680937815790523940947073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 03:49:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 03:49:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.rja.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963222731231915806154269884342035008299494928064491069722037292935208600972004326659063584451602751221762739346072617224559387755529382124230263621871950544471637745534314910348426267656503417993044221512552416308077524264123980897757513231709993916698755232856124572417179475291114282087381710584210832672184543200478097677570456410459289928625189053257989914963860614223223653943362649609580983719173308765772096781057190555294677854022607804106671521955009592083164320176905901795694398975869026870061674927771710088711995335295479370342926370059293257894445462374714211658258565937277946016187230497862347759489465094690083021299761230231526086157755367782255264201140861022102553147226653642338050369419872623800261504829030525994122883887967259698325005486624400220092885270459685342098015946498702387683811242254962826456030705980323353166777828012880400706872233221704930393919437280758498595199527548631507185837574689876131608903844393449750196345840366701628536395458588985267713591466831835841147679091037970619953388008421966572700452521568468922191818134425981203719615444341774429754685016160110088051810878995802189216031326601202248270018677069453455000196472061468189737166698040891554965034730450635072650662150191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8c2892b74565d3ca6465fa38e80ac7061706d3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rja.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b071290db00000403004730450221009dcb4feae6143b7bca5fb57d643dbabb795b9b140f7ff99c3660c3c0537cc29102204e57579359db4dfb7f18e75f3768cd2c842e296987673e5340873fd0e9ff8d63007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b071290f00000040300473045022100d6f2c378c923dfbf948e1c2f1ec476d3d5f4fdf2f1f6c6249a6a7542ac8953cc02204dbaf12678014cb1670934e7312012c0b013fe2b3f16a454ddec6aae65294ec2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d29f3c16811796a2e72b86632bd042f1a2175e43ca4c0d46da9ef4f4d762b35337a572fa925c735701c1e2e02095ba1d96ff099ab1fd64fe09f0cee37187a5fed9f86824e4638630d53949fdc104c9dc925f5f9ff0e8d935b7cc85d7f9a943acc8c21fb2919c884a028310e45073e5c45d9d9f079e225e9786a6c965023b6634f543c0e9da415132bf4ddccb3a1e055a34626d5634b66b18ddfd38d89a9962368fee8089a83b0c6f62ac8d705aa3a9c5990ff1350832870bd5469f754684188ea2a09d16023715af94131c43de382589d5d3c8c0ee77c04d6dbcaf71beb12d73f076a6be1ed4f4ddf5472acc2d17b44fde51ae6f0986b0f338a7e47b0ee0e29