zapisyzs.cheb.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:80:b4:16:05:58:0b:0a:96:27:7a:c6:76:63:6b:db:d4:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zapisyzs.cheb.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:b4:16:05:58:0b:0a:96:27:7a:c6:76:63:6b:db:d4:b5
Serial Number (int): 392244662071080825986101147811191382070453
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e9:df:25:ef:9c:7b:01:80:cb:52:de:2b:bf:03:e3:6d:c5:57:12:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:5d:c2:0b:8a:cf:e1:90:4b:eb:cb:19:4e:35:5f:df:2d:d7:c9:68
Fingerprint (sha256): 2b:7b:46:6a:02:af:7e:d6:b4:d6:f9:29:c6:58:26:3a:c3:1f:6d:4a:22:95:88:52:10:24:0f:dc:08:98:6e:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zapisyzs.cheb.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zapisyzs.cheb.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zapisyzs.cheb.cz

Other certificates including the domain name cheb.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for zapisyzs.cheb.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392244662071080825986101147811191382070453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 21:08:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 21:08:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zapisyzs.cheb.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702845404749993255298587193602113829367624640837785961858039778328273000674457552174501124366796757840579562876466268949898414241537697624833406379047950203293558958273847016819068889917623813808382184813639697399458576737416726015811670408372044801709809026232514817978451507975311742177037822883085786690710025761694366804004996966625045644555871666484989597757389182348577916931528809357063454882600354300153423576367469793876435623164105668632885996884693376316387502521982860936842250915906783471570443600130847606812238440569367948540680647728759025865566976812671256846685011963537398100849189368868612473441479718273561902088366920706570795183419814038902347238480527627423395878704807571790836628708358323646608744046805460915829120051862928827294171047934848188596797075612902431285255365410937924102301459222473377620088270016838998528562722126326876095620242226174349851194256003465144285012508039838425025933737895300075569808417746968717569632305984521238842242033110808933190562920973116958833429334310760371068316230264052786938688787012280524889729728373686281450639874232366960627933412153937264399349045284294254797782572494065677512883243919483478696339192849090530239464870329289556151404635157820152598579232601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9df25ef9c7b0180cb52de2bbf03e36dc55712d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapisyzs.cheb.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e563f989000004030047304502203ccfff622a7b6c13023d23421f1d49d6978a28767455da966473da4b727cb31f022100d34c0f6db3b1e5d9a9978970af6422d69e5054f3cb92538f279f0a67ab1ce896007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e563f97c0000040300473045022100ff16415ca7207e9e07a1e9fa5eb309f559324e3f0865d36bca95393867955a3002204946fa54c0dae54cf3685e39a0bb43469241d03b2ba79bd7d775eebe10b1dd84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b4ec600b430b04f4d03975774ff7f3a462077e68052ee337eaeb0b3ee403ee5143c73af356c2df29d4886f0a06d5e0d5f95a5f99497c825b66376c1b1dd62d756684d67d26895974e03e88de27cf5825d21416fdc973e6a5451a88ca2815f7ec437f35f6e4ae8fd9e170907874b58cb1bc2de76b13a931db12706b6459b54694e0a1cf2de71428bab9448142dbccc9fdda1e072c84866cc3900dbadeef61c126772f05ac3ca44e98493198b9d32c53cbc41832141b836ddcddd454ae5c1bca06a49a3bbc1bd20ac1ab733c5d23f8edd35d270f3aef11e6a8f2257991ef049498956350f3357d10d56db5d03070ecbb177d3381167fc99cb56859924146e1b98