projektyporsenna.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:70:d7:2d:a4:20:15:1e:45:3f:2a:f2:72:62:c3:7e:3d:6d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=projektyporsenna.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:70:d7:2d:a4:20:15:1e:45:3f:2a:f2:72:62:c3:7e:3d:6dSerial Number (int): 299734503891735250807007028802223884615021
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1b:1d:2a:d2:54:03:16:32:09:c8:98:2b:5a:14:78:a1:d8:fe:02:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 40:e7:26:1b:d3:ce:4d:05:dc:59:86:ad:19:29:1b:f4:39:f6:73:58
Fingerprint (sha256): 29:46:90:70:05:a0:89:47:9a:7c:7b:a9:7c:c8:fd:34:74:f1:bd:81:ce:41:c9:b5:53:f6:6f:df:68:a7:23:b6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate projektyporsenna.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for projektyporsenna.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
projektyporsenna.cz
www.projektyporsenna.cz
www.projektyporsenna.cz
Other certificates including the domain name projektyporsenna.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for projektyporsenna.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISA3DXLaQgFR5FPyrycmLDfj1tMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDIwMjU2NTFaFw0y MDA3MDEwMjU2NTFaMB4xHDAaBgNVBAMTE3Byb2pla3R5cG9yc2VubmEuY3owggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkY7zH8SHH7ieF28cPmWTYp5BP 5dgBC473pfbrGkcABzLpeGVNkVFQX8X96DfyPD/3Lbru1gVSFLoBYJzTOUFO4xkD 99iTv6CquDY0zs8pHjUf00Z9yc2fZLCE1ydJksL8n5jUiOM4RSgWwqK/8H2CYghj BkvmpS4mOFrOTgJ4YP+jbkZCxOmUGXV+UL4s6Wk0ZtvMnyvO3g0u8spSOm22guiB FwWF24msTBAs3LisDJCyPW6dSkxIX38HgIK0FziE9zx3VVL1Sw9GH7fQ/2WSAfNs gMsnWTmoZzJeik2exwqdl1y+d7K3sOyjvrHtKNXfq8jxL/Odto3rfDSoq/kLAgMB AAGjggKCMIICfjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBsdKtJUAxYyCciYK1oU eKHY/gJFMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wNwYDVR0RBDAwLoITcHJvamVrdHlwb3JzZW5uYS5jeoIXd3d3LnBy b2pla3R5cG9yc2VubmEuY3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ 4dA0prCoqo6ycwAAAXE5CNIFAAAEAwBHMEUCIDpP3P1e8GK4KRviq79i848lAoAS hqNkNc2Jq/Mu9iV9AiEAvL/1HC1KMj/a7vi0DCpDYETLzQ+mKMeHvzAeUQ+VtIgA dwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXE5CNI+AAAEAwBI MEYCIQDVpOg8JhSFdgeoHbNjL4P0kfWuQvXquwLTQwk+Yxab0wIhAIzKEISdG30P pA8uZmu9vduJXHGzlp+lu9TBscJkAh/RMA0GCSqGSIb3DQEBCwUAA4IBAQAEByRi h9RAN251BZ64tPIF+yT9+NCi2b5oKJ9/E3HErxslM33kT7HM/WCw4icCIpAB4FCE CpgleorGsAPL9KIVanL+tDGJDwyh00vSJYWOr3Kg7lHp8qLj1pI1LSEw6wMb4Dvp yEZDO5A0olb7HhNeDENdJPdeaiQUdtP5M8dp8gbHY8dvhGAI7YdHN5uG/FWnyFXy JOzqvSQ2TcESVPjgu8FFEbs3ZSBIxtx/Tu7Lm9RU1avFG8AMrE6onmBlm10vmNJy Y4q/+HWc+tWgRZjcr6H6LNRf1jgpBBgEOSa99aeCFJZpBotgmtT9JzD06RN3ocAk gBWJltoqjlVYFOOm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGO8x/Ehx+4nhdvHD5lk 2KeQT+XYAQuO96X26xpHAAcy6XhlTZFRUF/F/eg38jw/9y267tYFUhS6AWCc0zlB TuMZA/fYk7+gqrg2NM7PKR41H9NGfcnNn2SwhNcnSZLC/J+Y1IjjOEUoFsKiv/B9 gmIIYwZL5qUuJjhazk4CeGD/o25GQsTplBl1flC+LOlpNGbbzJ8rzt4NLvLKUjpt toLogRcFhduJrEwQLNy4rAyQsj1unUpMSF9/B4CCtBc4hPc8d1VS9UsPRh+30P9l kgHzbIDLJ1k5qGcyXopNnscKnZdcvneyt7Dso76x7SjV36vI8S/znbaN63w0qKv5 CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299734503891735250807007028802223884615021 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 02:56:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 02:56:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projektyporsenna.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20752264372182480166808471482541170834221461949485134570590278342479157028222292557369260199158908988944257876484528652192953587381416368992843746813882233658153126704858149959075948374488701219882059843044152181649247832838243030002392459212866879746459313261622192010627963155691386316412384391761462631303718482468376929358818552981883580331306205319276034300634468510838089686673492050964835683536491587415496427265032525520637252410944854255603701093757768290738084738201108184128047920366153654808491348510255691281384134907125219111304840582653737774445378693947582638963698506483402560800916715280395001395467 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1b1d2ad25403163209c8982b5a1478a1d8fe0245 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projektyporsenna.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projektyporsenna.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001713908d205000004030047304502203a4fdcfd5ef062b8291be2abbf62f38f2502801286a36435cd89abf32ef6257d022100bcbff51c2d4a323fdaeef8b40c2a436044cbcd0fa628c787bf301e510f95b48800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001713908d23e0000040300483046022100d5a4e83c2614857607a81db3632f83f491f5ae42f5eabb02d343093e63169bd30221008cca10849d1b7d0fa40f2e666bbdbddb895c71b3969fa5bbd4c1b1c264021fd1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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