zlatnictvo-els.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:67:60:1b:f1:be:81:04:45:c3:96:14:a6:c6:ce:8a:1a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zlatnictvo-els.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:67:60:1b:f1:be:81:04:45:c3:96:14:a6:c6:ce:8a:1a
Serial Number (int): 288696856659798087283309075561192021199386
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:4e:99:11:d6:25:c7:ca:0d:9a:d2:88:a6:6d:5d:93:e1:d1:46:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:14:ac:aa:67:56:af:11:94:a0:06:a1:05:cc:9f:a5:a2:71:8b:8f
Fingerprint (sha256): 26:8e:0f:2e:ee:ab:5a:ca:dd:9e:9f:0a:e6:cf:f1:af:18:16:ab:2f:96:71:b5:d2:6b:99:d3:c7:f0:59:da:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zlatnictvo-els.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zlatnictvo-els.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zlatnictvo-els.sk
zlatnictvo-els.sk

Other certificates including the domain name zlatnictvo-els.sk

(limited to 100 certificates)
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk

Certificate

The complete raw certificate details for zlatnictvo-els.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288696856659798087283309075561192021199386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 01:34:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 01:34:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zlatnictvo-els.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765465699035143884810734021761372100607885387846143612896760718977358961970385028361591801599030966809798307488541625241086220973150830320146165576883602035131187964159193549548017877794333714346333147339045345582678446090121678504309115169702886134350538175902919827587928362843728495301876221288358514667630752593998560479164575568875374737062759035333078271183202057005031011894846680061644706117056998676246499202017420238489132409679265169892457847152656954997834973903260768352517137887623330571393770534235986143905931815886576864932332757253141641910794541889389576188813806335978473518947966058964353186586550503832653923871358478944270496413063904859970753367903705664066422139576863730044484448183430026223385429365792128962547576344202555249902544684784942348087727510590483324606371114756321828632099648054600077485167990984132614860280974694880828395416260217370435997911489544930405307311939253821097308409856914612621621276479462940758459044646098877722014997752565974367507871995060149071239756412567442662405713647313089202312477060403037287363736173666134921296807889539550490360487299554234487315433485302376232981969476401719823035182791320960784453241577770857513543785454644580153988310563909183201757254093693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a04e9911d625c7ca0d9ad288a66d5d93e1d14608
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zlatnictvo-els.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zlatnictvo-els.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bfdc7a12d000004030046304402207aba92ba0af0121c1548977927091baac9b8136586dde79b03b5c22ef920a89702200ca986fdf68521f8293e2d95e14f096910e3d51cffcf2bcd026f44d3bf8fd3cc007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bfdc7a313000004030048304602210093f0b77da110f41e354006928647976f152e7bac875ea23f978013b7858c816b0221008b97445b0e85324940bdb72872fdf9e7be93257bf5bff0e41c123a1a5700f22d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0095b44a82ac45c1143162c2ce1976d41e58327be22ad3d7c896252548ad704f4e3b88a03c3542adb29f91f3ccab8834cfe998c332a966f1a2ad8cb17a5b11d70085c4989fbf8a2413620e5f9856773a5ee7677f135f5e9c669e309ca38526c4cedcb663d8c55ec613415894452402a9372b1db394d5a8df3460958f58bf0b44ea5fb0976162f3e7a6b8231bbead5f40a3b407d286c17da334531991571592bbe1a4b39a3a2f475f434b36e7340f91b72fb978ed48ed59a50563a37ec990d74004f303e8fae3c00db7f9fce2404c089d39fe3f156397bf97fb681f53b26ae2eb6cb9bbaa7f439fbed4f87dbd7f2681e402e4d49acb6499da5a2181e74e94f00167