uvt.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:16:e0:79:2f:9a:34:3f:6c:13:81:39:29:3c:d0:23:ce:8a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:e0:79:2f:9a:34:3f:6c:13:81:39:29:3c:d0:23:ce:8a
Serial Number (int): 356233732103767894944401287731694352453258
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:88:09:d1:c9:2f:15:8e:9b:9a:fe:d7:08:d3:08:36:b5:48:f0:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:6f:11:e9:fa:83:18:b0:de:71:48:b3:84:c1:e9:9a:b9:af:91:71
Fingerprint (sha256): 21:34:ef:a5:21:b2:af:2b:26:c5:8a:e0:6d:59:7e:53:3b:1c:8b:27:e9:c7:2c:cd:d9:6e:7e:00:68:e3:15:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate uvt.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uvt.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uvt.cz
www.uvt.cz

Other certificates including the domain name uvt.cz

(limited to 100 certificates)
opentis.uvt.cz
phpmyadmin.hosting.uvt.cz
letest1.uvt.cz
tv.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
spravait.uvt.cz
uvt.cz
mail.uvt.cz
uvt.cz
opentis.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
letest1.uvt.cz
mail.uvt.cz
uvt.cz
ncb.uvt.cz
git.uvt.cz
ncb.uvt.cz
ncb.uvt.cz
mail.uvt.cz
psw.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
tv.uvt.cz
uvt.cz
git.uvt.cz
opentis.uvt.cz
psw.uvt.cz
mail.uvt.cz
tv.uvt.cz
centreon.uvt.cz
tv.uvt.cz
letest1.uvt.cz
uvt.cz
opentis.uvt.cz
spravait.uvt.cz
spravait.uvt.cz
phpmyadmin.hosting.uvt.cz
git.uvt.cz
centreon.uvt.cz
uvt.cz
mail.uvt.cz
chat.uvt.cz
uvt.cz
git.uvt.cz
opentis2.uvt.cz
syspass.uvt.cz
spravait.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
mail.uvt.cz
tiki.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
mail.uvt.cz
opentis.uvt.cz
ncb.uvt.cz
git.uvt.cz
phpmyadmin.hosting.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
opentis2.uvt.cz
centreon.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
opentis2.uvt.cz
uvt.cz
opentis.uvt.cz
chat.uvt.cz
tiki.uvt.cz
mail.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
mail.uvt.cz
centreon.uvt.cz
tv.uvt.cz
opentis.uvt.cz
mail.uvt.cz
mail.uvt.cz
ncb.uvt.cz
tv.uvt.cz
spravait.uvt.cz
ncb.uvt.cz
uvt.cz
opentis.uvt.cz
uvt.cz
syspass.uvt.cz
centreon.uvt.cz
centreon.uvt.cz
tv.uvt.cz
spravait.uvt.cz
mail.uvt.cz
tv.uvt.cz
opentis.uvt.cz

Certificate

The complete raw certificate details for uvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356233732103767894944401287731694352453258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 18:00:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-25 18:00:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683294863272342751209535713781113667214007703106512476712040157702710967082748238496714403173229112632621267795421952302099812335402976202249488703291602354156638757596310105223963320330521600315242394554507792350721174232923319455334138572691956838837778434846261723398397950901211934533655803097848546025372349114999900509954680990832708402912888892656627467817475014328310013819064483927082851059592163783967165789510885921720273399111425697880589940717122952284882023247026281242221487551932377858836240188114595005014649271008665498038263924046073016763414856551076639912542748158132317596387853123576658860633005696976577074823548023080651371164010730669614052309595970497557453115681579703998099579611567127001101355943797259187473933128580778085570062587010983051748074958247171156008170940210925163397689063093685098940183948367466376517696245922506039744474519009581429458576345440441285354450202986578534058837170326518612337599014643927447377811277536873799172445639835027170702725476128593137147410307302421549399038319815738680005481150265037242190062978234865917127038887714272817818312023262982129987556534955303459474669961575723901199835743778890241645969932463042415855926819691524543492728179109930439699905929513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db8809d1c92f158e9b9afed708d30836b548f0f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uvt.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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