matrix.techlib.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:27:1e:04:74:34:34:de:90:bc:a0:79:a1:3c:5f:01:0c:94 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matrix.techlib.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:27:1e:04:74:34:34:de:90:bc:a0:79:a1:3c:5f:01:0c:94
Serial Number (int): 361760056002914309036943340027644464925844
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:1c:55:fc:4b:ea:0a:7d:cd:f2:c4:5b:53:c8:08:71:c0:22:ba:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:25:8d:8e:08:59:03:03:53:27:91:4e:91:6e:18:8f:f5:f4:c8:ab
Fingerprint (sha256): 23:67:99:ee:a4:44:e9:ec:c8:4e:ed:df:62:4c:96:a4:6e:11:7f:04:86:19:d4:f7:2a:82:66:6b:da:6b:75:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matrix.techlib.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matrix.techlib.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matrix.techlib.cz
techlib.cz

Other certificates including the domain name techlib.cz

(limited to 100 certificates)
elag2011.techlib.cz
vykukator.techlib.cz
icolc.techlib.cz
sfx.techlib.cz
matrix.techlib.cz
old.techlib.cz
elag2011.techlib.cz
caslin2013.techlib.cz
techlib.cz
space.techlib.cz
bigclean.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
blog.techlib.cz
bigclean.techlib.cz
*.ezproxy.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
old.techlib.cz
eod2013.techlib.cz
*.ezproxy.techlib.cz
caslin2013.techlib.cz
repozitar.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
ezproxy1.ntkcz.cz
summon-custom.techlib.cz
eod2013.techlib.cz
vykukator.techlib.cz
summon-custom.techlib.cz
indico.techlib.cz
blog.techlib.cz
liber-lag2012.techlib.cz
stanik.techlib.cz
bigclean.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
caslin2013.techlib.cz
eod2013.techlib.cz
old.techlib.cz
space.techlib.cz
bigclean.techlib.cz
stanik.techlib.cz
liber-lag2012.techlib.cz
caslin2013.techlib.cz
icolc.techlib.cz
bigclean.techlib.cz
bigclean.techlib.cz
ps.techlib.cz
elag2011.techlib.cz
doc.techlib.cz
matrix.techlib.cz
mail.ntkcz.cz
techlib.cz
bigclean.techlib.cz
vykukator.techlib.cz
liber-lag2012.techlib.cz
liber-lag2012.techlib.cz
psh.techlib.cz
eod2013.techlib.cz
stanik.techlib.cz
psh.techlib.cz
elag2011.techlib.cz
kramerius.techlib.cz
ifis.techlib.cz
matrix.techlib.cz
safeq.ntkcz.cz
techlib.cz
liber-lag2012.techlib.cz
vykukator.techlib.cz
*.ezproxy.techlib.cz
old.techlib.cz
rs.techlib.cz
elag2011.techlib.cz
eod2013.techlib.cz
blog.techlib.cz
blog.techlib.cz
blog.techlib.cz
eod2013.techlib.cz
aleph.techlib.cz
nrgl.techlib.cz
psh.techlib.cz
old.techlib.cz
nejtek.techlib.cz
www.techlib.cz
summon-custom.techlib.cz
caslin2013.techlib.cz
vufind.techlib.cz
www.techlib.cz
eod2013.techlib.cz
bigclean.techlib.cz
techlib.cz
aleph.techlib.cz
techlib.cz

Certificate

The complete raw certificate details for matrix.techlib.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361760056002914309036943340027644464925844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 23:00:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 23:00:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matrix.techlib.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779860957468474671483487337374996296242093404352740473666182356255164867909076150851108541841680382389733610465454667534792900340835226083281228715973485088052149624791396591692392538571892958762257194713011484082567514843856949184952475681449073671178191937506743018233668863687021495816257516595018832617115832447599201842204374000436293660254536195166662227815488846002442167501244508656986289192179143892497460947076450523355715081566141862231760706632893795606144747575542826722977291558102932792259886523115949414970921948485080100411233573861585796586452157792586306035485559055927291662643931138445538618346279553066904817925744993989201264476705503709819427815090680615983905232053466838798734647059905328915344207589773177457549821005531979249165052738356193118357677464139417260771962390509308862934942538874548983423934811685369354939646126941119281677857984085719803045527081336909558569544775483108204062764488140431248520982301428988948666264941487867781435952306658953713425799714040003990288357174375434204441624868320738730757200655528298557037196939092613014575795421978923852573139572886829724352361038635675456269003952335507301802642520182194325022208196364559173660853019197212328907792992495587271674279048009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b51c55fc4bea0a7dcdf2c45b53c80871c022ba05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrix.techlib.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techlib.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d4bf83a8d000004030046304402206b9ec93a21fe9fb41a4e958ec47080cd02cbdc1185cec91bfd7c504af0ff1b0d02200f5dd980526ca7e9f7e2508ed2ae93e5ed2ffc271c2534b0a9a383363e113ce200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4bf839e1000004030046304402201138cdae71c935226cea5dcb5786151f31bdeb49d43e3bf29bbcdeabd889e8ae02204355f0bc1b88033420675362be9741a91d55b47ca9991b79ecb6f6a3922db178
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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