www.bezouska.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:6a:e5:9e:86:4b:1a:20:de:2a:0d:c7:dc:19:2d:56:81 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bezouska.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:6a:e5:9e:86:4b:1a:20:de:2a:0d:c7:dc:19:2d:56:81
Serial Number (int): 341785586807416556992180036909322472347265
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:95:58:84:3e:d4:ae:9b:69:05:f9:a2:76:81:65:02:d8:89:3f:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:18:34:19:07:0c:97:e7:6c:93:60:74:65:9b:3d:0e:52:2e:2d:a1
Fingerprint (sha256): 2b:71:30:64:21:13:7c:0a:91:5c:e0:1c:f4:98:3a:d4:3f:36:ad:d5:e2:c5:5d:da:4f:b2:12:bf:5a:ab:e0:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bezouska.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bezouska.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bezouska.cz
www.bezouska.cz

Other certificates including the domain name bezouska.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bezouska.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341785586807416556992180036909322472347265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 23:11:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 23:11:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bezouska.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867253563006712378977989255593306722186116038716576270026718148686916061039435989740001765267885947514114924517557818120344698693737914661039075015289359761672586275292257746234348176130164182763681670877314240959711494926774851631771300312632397225053726018080055865128644584239000269582054819701001842504259311792648088037402591519853692972975114369519095052109186749044040905919884335912643284200613284244239364150333464778060442658555872928127159455848829848054182791707660665008064167492509291616619937321757921758256270685945581057475687900017102910294131447779497782444318768733185714840333118324457426686643596177349555426433763973050641534286892795065936347875142863594843214043302820463128025951763073553032854850017530027628872250414075801420225069620909400808431482509322352308770827341440981158096457413179138907592566121673792990683669619292572655359523366854216641227445585348886212178301323536803643602592595503635079159154745189924596938676788706397812414963531248402177326629019213899407507718464242234988937531127763105322106614499566542178129285425714835547147355414148765748468296953831633322627353005947519403219590829293207453173883875100872045736979829533258534638182368471559822380588328361909042211421633213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f39558843ed4ae9b6905f9a276816502d8893fb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezouska.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bezouska.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4859c181000004030046304402207eb6d7f5c245b9096faea845acfd7b77e56a5e1a2d9331d26e8e3757363fc42102201bfbcd645343bccc76313594ee37b317fbaeaa5c8f7b7b9e58a321f294c6bb4a0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4859c3880000040300463044022064da15dfc10fa1418c5296fe721a596e5b8de253826e4830fb51312eabfd3fee022053955d1b54be3e705b72fbd4fea9693e2b31db16ae7b5de1d53987108ac8b3c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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