www.pneusystem.sk

Issued by R3

About this certificate

This digital certificate with serial number 04:34:7b:25:f3:9a:65:ea:31:9b:6b:5f:74:42:c9:92:41:0b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pneusystem.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:7b:25:f3:9a:65:ea:31:9b:6b:5f:74:42:c9:92:41:0b
Serial Number (int): 366307518906253308951029808199669814280459
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:e4:89:15:c4:92:3f:30:21:1a:14:1f:b5:96:bd:6d:c3:3e:5f:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:c6:ec:3f:dc:3a:18:e6:79:28:24:ef:47:84:ff:f3:77:90:e0:28
Fingerprint (sha256): 2d:64:70:1b:ac:c8:69:67:7c:4b:a3:33:46:0a:64:e9:f2:86:bb:86:a3:9b:16:44:de:2f:12:8e:a2:6f:92:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pneusystem.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pneusystem.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pneusystem.sk
www.pneusystem.sk

Other certificates including the domain name pneusystem.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pneusystem.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366307518906253308951029808199669814280459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 18:28:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 18:28:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pneusystem.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845537924165604555951902990209511029393806552200762541925020661016382946523374917659525013250008626070604588108149911507887788287406499646536422341190527265944258546421327184612633736406226307069350280099302948737547801541563682107366914641751669276763653660327820256823886557462336419831135574192562774315518133535031149412108693363376288649243138298521752676726607323820712617952793635650574880440554252177908477596978159486934844572131178178964277950139014623479315980094225098396868445476037732607255599737360275942292057888836529184065842987049848964603163875723930522693379285730638905756560364973542235601999256221285116377816606711747487648845388050015773019385018505324577069262499466780149703769184919098043733687842956956328186039777302356466489658046106021239711019530807928858904640320230807420901678249295255497504816694461577083600320440216278093260799707445427560418541414314203604049883212254275177098944845388825010332077081771328487196793539121453685362581400806857434699931928414518470371234499274701265061781257872679546333572522758187348024320072662502628963589419986951644382867110419662524508400334616058448658776386346795008583431388021606406463016852345307922785823074477325324346457673230216269347767403461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18e48915c4923f30211a141fb596bd6dc33e5feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pneusystem.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pneusystem.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3e6fb5d40000040300473045022100eee484d37b5bff87f61a826d938ba8ecdd55344c0e7f8bc4ecaa2d9e4e41625e022025571d1ed8987dee1fecaf1f9a8da8bdb1d8164ac88f0bbc921d253de9e7bff800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e3e6fb60300000403004830460221009f3545b6b9a39a25489324597069c7a8d07715995c27e3af6e427d5897c47b5b022100d31e3ecd1c010168e4da0a051f05f7716f9b76e36737c1f6dc13078dec60f5b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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