git.uvt.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:45:6f:88:60:b5:d8:27:9e:14:b3:58:e2:65:04:a1:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.uvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:45:6f:88:60:b5:d8:27:9e:14:b3:58:e2:65:04:a1:93
Serial Number (int): 362493016613529807949430710799425591353747
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:27:65:51:c2:63:d2:ed:d4:ba:16:a6:3e:70:17:2c:bf:f8:6c:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:f8:aa:d1:1b:60:84:5c:36:88:f4:e6:74:0d:24:c9:cd:47:88:04
Fingerprint (sha256): 23:9f:79:8b:dd:f4:c6:5f:93:20:9d:e9:05:df:a6:86:3f:c5:35:20:9d:09:f5:52:1a:77:2f:64:fb:73:1c:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.uvt.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.uvt.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.uvt.cz
gitlab.uvt.cz

Other certificates including the domain name uvt.cz

(limited to 100 certificates)
opentis.uvt.cz
phpmyadmin.hosting.uvt.cz
letest1.uvt.cz
tv.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
spravait.uvt.cz
uvt.cz
mail.uvt.cz
uvt.cz
opentis.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
letest1.uvt.cz
mail.uvt.cz
uvt.cz
ncb.uvt.cz
git.uvt.cz
ncb.uvt.cz
ncb.uvt.cz
mail.uvt.cz
psw.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
tv.uvt.cz
uvt.cz
git.uvt.cz
opentis.uvt.cz
psw.uvt.cz
mail.uvt.cz
tv.uvt.cz
centreon.uvt.cz
tv.uvt.cz
letest1.uvt.cz
uvt.cz
opentis.uvt.cz
spravait.uvt.cz
spravait.uvt.cz
phpmyadmin.hosting.uvt.cz
git.uvt.cz
centreon.uvt.cz
uvt.cz
mail.uvt.cz
chat.uvt.cz
uvt.cz
git.uvt.cz
opentis2.uvt.cz
syspass.uvt.cz
spravait.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
mail.uvt.cz
tiki.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
mail.uvt.cz
opentis.uvt.cz
ncb.uvt.cz
git.uvt.cz
phpmyadmin.hosting.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
opentis2.uvt.cz
centreon.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
opentis2.uvt.cz
uvt.cz
opentis.uvt.cz
chat.uvt.cz
tiki.uvt.cz
mail.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
mail.uvt.cz
centreon.uvt.cz
tv.uvt.cz
opentis.uvt.cz
mail.uvt.cz
mail.uvt.cz
ncb.uvt.cz
tv.uvt.cz
spravait.uvt.cz
ncb.uvt.cz
uvt.cz
opentis.uvt.cz
uvt.cz
syspass.uvt.cz
centreon.uvt.cz
centreon.uvt.cz
tv.uvt.cz
spravait.uvt.cz
mail.uvt.cz
tv.uvt.cz
opentis.uvt.cz

Certificate

The complete raw certificate details for git.uvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362493016613529807949430710799425591353747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 17:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 17:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.uvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834931230742710979852028567849649241498955040075192892160187724566662105644249490885151689809702554497552669606882495067323997045485072451062244364888153645213033141149410277737280079934219564789090549070547559470746772684319186179098701910798484868144657871415340657087472146085519775045513971885587994022162992310616957382958519548907026651431360472655653277361282880928372416254179352189459860572089240657559525894384137762575083807576679897243198365698538899509299515750505182218945754464139446472239417656171769375779452400691793198323977694776184002549191853671687807640854539247356179827444742980774324572532721175822790291061028346914572694799563475485003562933612971784115744105804883238792874282200078331829576837272262220664745935786673841567609440494218276702159626077853552022696742821217082680009167555426649409417217592583331221023179515974360934899767246715708873984269975456410756515235149478659277049458847648666730337051154585827039941960995028731242881296575270459735095953963270506465563034617775455734466921069526073859564845249899741038116609219225971581836249742370086109686393463945147595870169998073376701158847438419514634564268966981685159388055180125096565528949364593918938657446927052830065502292898943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5276551c263d2edd4ba16a63e70172cbff86cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.uvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.uvt.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001668855dd9d000004030046304402202bb311b036e15abfc2da96a8b5f1ab351a6835f7d73b9ce4224d3333796540eb02206276407b024d81338f377224920948f8d8453bf6a21e15c9bf0f3b852cc5f21e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001668855dfb00000040300473045022100cbc94a7471b7350aef50d129b188ca3ee0c6e506e569b17ef5b8b8dd8681dd2c02207e1b3f3de100a620821e276068e69165853c7033d4cf63eae55ec78831fcf1d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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