pneumatiky.renault.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:81:05:49:5b:8c:f4:f4:16:fb:ad:14:a5:6c:ac:9b:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pneumatiky.renault.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:81:05:49:5b:8c:f4:f4:16:fb:ad:14:a5:6c:ac:9b:cf
Serial Number (int): 306085345722733513362642861156509632207823
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:d3:1c:2e:64:68:f2:85:42:73:9b:48:69:c7:22:8a:97:a2:c1:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:ff:f5:6f:82:46:76:93:8a:ea:0b:60:f1:e1:56:3a:ab:b1:a9:7b
Fingerprint (sha256): 21:94:7f:6d:c1:59:15:0b:f0:bb:d0:d2:1d:ab:b5:c0:fb:a2:df:31:65:4d:c0:ac:e6:5f:db:76:6b:34:0e:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pneumatiky.renault.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pneumatiky.renault.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pneumatiky.renault.cz

Other certificates including the domain name renault.cz

(limited to 100 certificates)
seznamka.renault.cz
disky.renault.cz
soutez.renault.cz
pneumatiky.renault.cz
multi-sense.renault.ch
www.autosalonkromexim.cz
ojetevozy.renault.cz
www.autoinzat.cz
motrio-uat.renault.com
helios.renault.cz
espace.renault.com
clio365.renault.cz
dealer.renault.cz
www.renaultvysocina.cz
pneumatiky.renault.cz
www.renault.dk
clio365.renault.cz
nouvellegamme.renault.fr
ojete-vozy.cz
www.ramachauto.cz
media.renault-local.cz
kadjar.renault.fr
ojete-vozy.cz
pneumatiky.renault.cz
RENAULT s.a.s
archivprislusenstvi.renault.cz
multi-sense.renault.ch
renault-local.cz
odc-ctrl.alpinecars.at
disky.renault.cz
accessoires.renault.fr
nouvellegamme.renault.fr
renault-local.cz
motrio-pprod.renault.com
seznamka.renault.cz
renault-local.cz
www.rpz.cz
www.francecar.cz
disky.renault.cz
bezcekani.renault.cz
autaborek.cz
advent.renault.cz
www.kncar.cz
RENAULT s.a.s
advent.renault.cz
easyconnect.renault.ch
seznamka.renault.cz
media.renault-local.cz
accessoires.renault.fr
soutez.renault.cz
easyconnect.renault.com
pneumatiky.renault.cz
ojete-vozy.cz
espace.renault.com
pneumatiky.renault.cz
easyconnect-staging.renault.ch
ojete-vozy.cz
RENAULT s.a.s
disky.renault.cz
*.servisnismlouvy.renault.cz
ojete-vozy.cz
seznamka.renault.cz
renault-local.cz
advent.renault.cz
www.primocar.cz
autaborek.cz
ojete-vozy.cz
www.autorn.cz
seznamka.renault.cz
ojete-vozy.cz
disky.renault.cz
*.wrd-aws.com
bezcekani.renault.cz
easyconnect-staging.renault.ch
scenic.renault.cz
selection.renault.cz
gdl.renault.fr
www.autoposik.cz
servis5plus.renault.cz
renault-connect.renault.fr
media.renault-local.cz
clio365.renault.cz
daciapruhonice.cz
advent.renault.cz
gdl-ctrl.renault.fr
motrio-pprod.renault.com
r-link2.renault.com
clio-rs.renault.com
media.renault-local.cz
kalkulackasplatek.renault.cz
www.opportunity.cz
motrio-uat.renault.com
disky.renault.cz
soutez.renault.cz
conf.renault.fr
gdl-ctrl.renault.fr
kalkulackasplatek.renault.cz
ojete-vozy.cz
kalkulackasplatek.renault.cz
media.renault-local.cz

Certificate

The complete raw certificate details for pneumatiky.renault.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306085345722733513362642861156509632207823
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 10:30:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 10:30:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pneumatiky.renault.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651279914396949062256536415990402018048866794482970438462257611393000871617753942874016871620371851801852757130058529690435976781162129384185444391494560944101064669957293144682631749914600451656335245709730526904362264412827668475467516114524729154508763486413669384033802375239215686394235233905666439713449444292959374834721153257683745007691591033551574688257078673736070816472288244504419066277466025983503478860180387306534319554241448337925211280909360820123067473188119017668509822902503061123664946791021828556485013366840664597915628001082775638490908371868757789492384164779250734398341943517713799062666931031558451276656594898376663483330457895620814739134779286873661354224984817926417358577456422997358647056048270096021710175698555001543180338588175073138965348980482035626465629321824009549080374753385868671879714929603551127110576177042705766063746688195679217130026114926602742765054783561509195090400807896749025388433382688469568548231459745299888373337147664730703875103784529268867470756702300491019164696492998609595546940624825143116918549792251507848334601225831413236605443515600450102093374019761942839679110941760229232486435498821397315209635327799981936297166829182181907877243538722801199542136910189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61d31c2e6468f28542739b4869c7228a97a2c1c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pneumatiky.renault.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dcf2f525f000004030046304402206effb221c00d279ead94c84b030cb12c29afc2b7180f1c9a925f9b9c360622e0022077d84292bbb2e414f6afee250ba099e053a400802c757784c1a9571e9a6b57df007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dcf2f524a0000040300473045022100fb54d67c94bcdc6e0835359ed6ad27b70e2ad0776e7507bef55ee3036a7dc98f0220063712a43e770a3cace05db62fc75b3bc762b0728cb658e52d072a2d0dc2fcef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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