cmnauto.cz.vhost.omnio.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:dd:d3:54:8f:53:2e:e2:18:50:4a:31:1f:ff:3a:ab:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmnauto.cz.vhost.omnio.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:dd:d3:54:8f:53:2e:e2:18:50:4a:31:1f:ff:3a:ab:9c
Serial Number (int): 329688187856251827769474303567084790655900
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:38:8c:0b:c5:c1:2b:0f:c6:fd:93:aa:9c:8a:19:c3:3b:ae:59:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:fe:01:1d:53:e2:f8:e2:07:af:90:da:38:f2:2f:e8:9f:6e:33:41
Fingerprint (sha256): 24:28:e8:39:4f:38:e0:15:2a:53:9a:ea:87:5d:87:f5:d8:68:f3:53:61:46:d9:14:32:9f:e3:b6:a8:17:63:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cmnauto.cz.vhost.omnio.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmnauto.cz.vhost.omnio.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmnauto.cz.vhost.omnio.cz

Other certificates including the domain name omnio.cz

(limited to 100 certificates)
www.total-local.net
hladamedealerov.sk.vhost.omnio.cz
rts.renault.pl
omnio.cz
www.duhovkagymnazium.cz
duhovkagymnazium.cz
partykrupky.cz
cms3.omnio.cz
partykrupky.cz
lukasik.renault.pl
renault-bene.cz
www.automotolandcz.cz
nila.cz
renault-retail-group.sk
www.jih2000.cz
www.duhovkagymnazium.cz
www.renault.euromotor.sk
www.stillking.com
panthergym.cz
uni-car.renault.pl
karlik.renault.pl
renault-prerov.cz.vhost.omnio.cz
cory.cool
daciaeasy.cz
poznan.pl.vhost.omnio.cz
autodruzstvo-znojmo.cz.vhost.omnio.cz
www.automotolandcz.cz
dacia.inicial.hu
www.renault.euromotor.sk
www.total-local.net
bestway.nissanfinance.cz
dubnicki.renault.pl
bestway.nissanfinance.cz
uni-car.renault.pl
dacia.inicial.hu
autodruzstvo-znojmo.cz.vhost.omnio.cz
nemoczech.cz
www.karmayoga.cz
renault-prerov.cz.vhost.omnio.cz
renault-brno.cz
auto-pilar.cz.vhost.omnio.cz
www.autoposik.cz
transbitumen.total.cz
nemoczech.cz
omniodigital.cz
www.formontauto.hu
www.automotolandcz.cz
www.automotolandcz.cz
jirisoucek.cz.vhost.omnio.cz
transbitumen.total.cz
duhovkagymnazium.cz
www.formontauto.hu
www.total-local.net
rocketchat.omnio.cz
cmnauto.cz.vhost.omnio.cz
renault.autocb.cz
lyko.renault.pl
autostyl.sk.vhost.omnio.cz
polmotor.pl.vhost.omnio.cz
autecobs.cz.vhost.omnio.cz
*.omnio.cz
nila.cz
renault.adamowscy.com.pl.vhost.omnio.cz
www.duhovkagroup.cz
facebook.omnio.cz
pabich.renault.pl
www.lovesavage.tv
nila.cz
uni-car.renault.pl
autoset.cz.vhost.omnio.cz
cmnauto.cz.vhost.omnio.cz
www.formontauto.hu
autotichy.eu.vhost.omnio.cz
renault.yama.pl.vhost.omnio.cz
www.autoad.cz
www.autocentrumlis.renault.pl
www.renault.euromotor.sk
addmotor.renault.pl
winkler.sk.vhost.omnio.cz
www.autozieba.renault.pl
omnio.cz
*.omnio.cz
duhovkagymnazium.cz
www.stillking.com
poznan.pl.vhost.omnio.cz
nila.cz
cmnauto.cz.vhost.omnio.cz
renault-prerov.cz.vhost.omnio.cz
autotichy.eu.vhost.omnio.cz
lyko.renault.pl
transbitumen.total.cz
cmnauto.cz.vhost.omnio.cz
autaborek.cz
poznan.pl.vhost.omnio.cz
renault.rja.sk
duhovkagymnazium.cz
www.stillking.com
cory.cool
autotichy.eu.vhost.omnio.cz
mg-offers.cz.vhost.omnio.cz

Certificate

The complete raw certificate details for cmnauto.cz.vhost.omnio.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+vHP3/o7I4dlj3uBoD8a
3Bp0J3sB2w5Ef/Et3gDZq9f/8ZRpkMRRkShELbcaWWY5wiB7XjAKwR5iUbX8+cV0
kAg1wKZWe8oCyRRF5HxHWFCbjaBm8ZQ10cPVMNnAYdR3XcUI5rr262znEf841fhL
STu+V/oFhfzWNaNdMqLEn8bK62r6/C5Ny+dfV9cBiktdEW15FahmbEkzQv8NLidD
FvepgSBVSr+hRM+asc0zRq+bNehnduN0vDuC/LCdS4Ss7ayNLvBRfJqepNphD+oZ
f9g9H2J+WsBUduLehLPqj5nJklTfxy0W6Qsr2gKA44xEy7VdJT/8tglA2LBw+M7i
sWgSaaYva3hqCa75GBZwBDWXHbjupdeQA1ZeS/tc1vdqsc98QlEYI6JvYhcHWZ9l
n8ryZr8/C314vj6JODp7WmJLuGf9tjMZh+dcGozFnkUOkeGSpMYzlqNlN69XLEpd
7lKdLTDaamd0XHrTVW4hC/TfQKSYqFIVx+Vl9R2i1ZM7cNOGI6naScwRhhn9JONO
lLh5TXRCsayBAgrUKFdDk+uVZkNDUPt2U0LKp3Ct1+OvNN6JxpfHwnXMwPPr50oL
2SbGE/FWrWpAI1D2cuzeGnyVg8+c11V0yAjcHmk2VwUOoCu4twcBd6TIZkGJgaLT
89RBkt84Y30uJ+tu+0NEDJMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329688187856251827769474303567084790655900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 19:50:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 19:50:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmnauto.cz.vhost.omnio.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1023764559730741086161249744006835318859344119354342385423916690178242534155596330492527485017630906765609447040937410797908173376596111974199026092358581435371950131139693720662456889945604059637700574761762291296513854117049495784837523982705147198792471532625383494841920731181711831124498487505281921947728277752244210647631731616404760877059856050428484044872979863119640548312107198986816687660456756442335919298877356795289202567022383902537221818316729511948275788609428286057048137833370418976940952966953524034415874488417518294249155725773500511396983990862170838986234773152719665003520537609700408111031228995087174999131267785183490298558246046226890790012345878103812823816261965020575611134382108045240593566774457822859841539171263487858638843430951363904196154967092537681155613836827476864917378547051882686855133026063331801804956550476775448446830882622752207130022335911775469066062908545718842203307137023050825760696110960863394575196827723241204396109189794010953273914772633010981781134330604363565491824417882094215704156985644646400368061638607019511374899674408952833422094243470962194076586616007391527973748689504862778650648559906503995465036081450427042907833162023567916105458896720300736535341567123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c388c0bc5c12b0fc6fd93aa9c8a19c33bae59e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmnauto.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b33b51f8e000004030047304502207895e06dc9228943aa11e2befb624a6f3019ef81b019189aae224a4ca61f70a8022100cffc4073d59f68bcbccd222b567f364d98cc2cc524178a310bfce24a6d38fd7700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b33b51f8b000004030046304402204f9dc2b3eb0c45a64a0157419de82979aa82994c0e8fc164c62da87e93f7ce5f02203f752f3a46b545b111a815f4ec334764beb3ca15ecc1c4edf4e31afb04a8f37a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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