skolyjh.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a4:61:63:b6:fd:63:32:e5:4d:83:d9:55:8d:2b:6b:17:ce was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=skolyjh.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a4:61:63:b6:fd:63:32:e5:4d:83:d9:55:8d:2b:6b:17:ceSerial Number (int): 317272618834768753261300040982998712784846
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 22:cf:ae:de:08:e9:ca:1b:eb:99:9d:e4:af:96:3d:69:4a:4e:fc:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cf:ba:09:53:84:0a:bb:bf:d7:e6:07:78:54:8f:6c:ad:f2:d0:93:ed
Fingerprint (sha256): 1a:02:4b:b7:2b:34:54:e9:47:cd:67:cb:01:a4:4f:2e:05:25:5c:00:0a:7e:53:b2:6a:b5:c3:37:4f:e9:99:b6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate skolyjh.cz
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for skolyjh.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oaeldo.cz
skolyjh.cz
www.oaeldo.cz
www.skolyjh.cz
skolyjh.cz
www.oaeldo.cz
www.skolyjh.cz
Other certificates including the domain name skolyjh.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for skolyjh.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgISA6RhY7b9YzLlTYPZVY0raxfOMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMzEwMTAxNDhaFw0y MDA0MzAwMTAxNDhaMBUxEzARBgNVBAMTCnNrb2x5amguY3owggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDEzXNRyEvSATbxtLm9RbSq02LZsM1kNvzbKfQU 7C2LEj2kfX/pNqZVamvNtqGUIAQEEL6raBiVJ51b42TyPQx93Z0y+FczK6yOd6RW Jt6p2/Cn4baJ4lnuAQcCBpvCein6hd/q7PQPG1//4q6ciX33DxQhKSNyB+qWMUj1 gm6Hv/IXITewpinycc0TcLE6L/YB97O07Es0Ma6HV+tLpZLQu/PFMXdSYsdPPIKJ f2IVc1Y6falSGdV9SYpLSKiI35lbzWkJvmLu6r/2+W/xgUnJDYoZuihWzPNY4DwF Qx6SjjTDTMRu6f8ujFIlsfCfoNh2NeUfzVNjf4hkN7HH3e94FypGsCBmI1eLw1kA fLVj0Z2CMrkrHgjY1wNz8+OI9r1GmpqCIE3WsUDaKxziBIPdT/2ACNTz8sQFIXxt 3g1owE7I+s9Ux3wzqbzeUK9djiYr3pAipBSQ4XGDFTmeJd+caV62SkFZrX6X8du8 NxbAVq3w7TgS3QLjO0BvPKRFs9IzbHKFIcgOGXi0N+8GfgmTBVONabC2uLvPHcjm e3u5XQQR4zkGR1Ljy1bUqzyOk1IH2r2XZy/kdatvVs2hZ5hr+nHlD3devaGcPjpN qnuhuUsFhgdJ/7hs/Puq2f5uLL4ED3RAHJ7YOJEUvr3U50MFHr3LKU/97ROn6rnC M6ahKQIDAQABo4ICijCCAoYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQiz67eCOnK G+uZneSvlj1pSk78YzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMD8GA1UdEQQ4MDaCCW9hZWxkby5jeoIKc2tvbHlqaC5j eoINd3d3Lm9hZWxkby5jeoIOd3d3LnNrb2x5amguY3owTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDR gkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW/5VTTSAAAEAwBIMEYCIQD4xnoK ZqRPxTtEhl7G0BBZHkXQgehjfHXkbgfVut2YUQIhAI+wcR+F9ol7FWNXukz/XtxU fwRokEW62lmnpjiMVNAOAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L kF4AAAFv+VU0ygAABAMARzBFAiBW9SBaYIg4W+3gDrikrpFgXd0iVAIEWOkbLLJa bUkd6QIhALdsSckMtclFbXnoXDeXKHxqLmri/wTVU/QQTHpdlev4MA0GCSqGSIb3 DQEBCwUAA4IBAQAW8DCHD27C4wsD0jVO3Lu7x0xttdRi7wcfVblgReBCeN1Waoqv OApBwMqeuMpyPjs0o40AMZqnYvy+9Hwq3fRdpaZbhoNlxcIJXs/sAVfKi/h2dg8U 9+AbXu/zJHwLGS2bOKMZu6xlbI6+dcXiESy3Zpo1en+VDpqtjXFEVTn5ux9yNc8l qhEBrVDx06SLB2c1GB69h3VfU8/uO4c4/ENgRY6mm2voE02DylHpKvHp354NgHrA SjeiNKVtEcTS7ufKov+UKhQXzNFc0reU3jYV9tDTKFwrYS8JG9qdyyuaEdMipfk8 mLfWJApFeLeXQ8QH5iVUBEr41tfx4YtlfHcH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxM1zUchL0gE28bS5vUW0 qtNi2bDNZDb82yn0FOwtixI9pH1/6TamVWprzbahlCAEBBC+q2gYlSedW+Nk8j0M fd2dMvhXMyusjnekVibeqdvwp+G2ieJZ7gEHAgabwnop+oXf6uz0Dxtf/+KunIl9 9w8UISkjcgfqljFI9YJuh7/yFyE3sKYp8nHNE3CxOi/2AfeztOxLNDGuh1frS6WS 0LvzxTF3UmLHTzyCiX9iFXNWOn2pUhnVfUmKS0ioiN+ZW81pCb5i7uq/9vlv8YFJ yQ2KGbooVszzWOA8BUMeko40w0zEbun/LoxSJbHwn6DYdjXlH81TY3+IZDexx93v eBcqRrAgZiNXi8NZAHy1Y9GdgjK5Kx4I2NcDc/PjiPa9RpqagiBN1rFA2isc4gSD 3U/9gAjU8/LEBSF8bd4NaMBOyPrPVMd8M6m83lCvXY4mK96QIqQUkOFxgxU5niXf nGletkpBWa1+l/HbvDcWwFat8O04Et0C4ztAbzykRbPSM2xyhSHIDhl4tDfvBn4J kwVTjWmwtri7zx3I5nt7uV0EEeM5BkdS48tW1Ks8jpNSB9q9l2cv5HWrb1bNoWeY a/px5Q93Xr2hnD46Tap7oblLBYYHSf+4bPz7qtn+biy+BA90QBye2DiRFL691OdD BR69yylP/e0Tp+q5wjOmoSkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317272618834768753261300040982998712784846 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 01:01:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 01:01:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skolyjh.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802884318494220920022480723640660811857818428154969728998183326457809174685857892525914694943893801633825671779948740811491672623457422434131535921728625133438597207250201252168460107737157241698662612139079587321746227752529817838631858469910514443205641032709511235441980770801500081573496489425892906038775881993537005019890132728523724161126872430802395711432296177008496212328269640665410291464334603428328327376728683863410651807452396886960793498340893095968095674621837854466868822797081518277859221120509364009724079413021171641470556030032303989796246697198695359368507804631371447410481287373144975456448234755346199495567366780004587303941660213807877054030279475249489195172789197714585110003442202684641186434850393184206479498669640543150760821741490997527372101510346015929538866835518558477890259836596264384202197875309785171206454901488625609034819274123682755647010207671991162726299552114897972989895817886658636920782802610476997648599165186417462878958547776393441290895680189334033281912891615448515548274170310255394713660606043030389876486210011886421285473446223846667902089783941686854693278016604678854842899795458265123513576090059389537315461427522616220066722984666428645309645791183665650029176463657 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 22cfaede08e9ca1beb999de4af963d694a4efc63 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaeldo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skolyjh.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oaeldo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skolyjh.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff95534d20000040300483046022100f8c67a0a66a44fc53b44865ec6d010591e45d081e8637c75e46e07d5badd98510221008fb0711f85f6897b156357ba4cff5edc547f04689045bada59a7a6388c54d00e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff95534ca0000040300473045022056f5205a6088385bede00eb8a4ae91605ddd2254020458e91b2cb25a6d491de9022100b76c49c90cb5c9456d79e85c3797287c6a2e6ae2ff04d553f4104c7a5d95ebf8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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