www.pneusystem.sk
Issued by R3
About this certificate
This digital certificate with serial number 04:34:7b:25:f3:9a:65:ea:31:9b:6b:5f:74:42:c9:92:41:0b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.pneusystem.sk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:34:7b:25:f3:9a:65:ea:31:9b:6b:5f:74:42:c9:92:41:0bSerial Number (int): 366307518906253308951029808199669814280459
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 18:e4:89:15:c4:92:3f:30:21:1a:14:1f:b5:96:bd:6d:c3:3e:5f:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 60:c6:ec:3f:dc:3a:18:e6:79:28:24:ef:47:84:ff:f3:77:90:e0:28
Fingerprint (sha256): 2d:64:70:1b:ac:c8:69:67:7c:4b:a3:33:46:0a:64:e9:f2:86:bb:86:a3:9b:16:44:de:2f:12:8e:a2:6f:92:6a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.pneusystem.sk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.pneusystem.sk
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pneusystem.sk
www.pneusystem.sk
www.pneusystem.sk
Other certificates including the domain name pneusystem.sk
(limited to 100 certificates)
yofardev.fr
pneusystem.sk
www.pneusystem.sk
reservation.pneusystem.sk
www.wasteleaf.com
easl.co.nz
pneusystem.sk
pneusystem.sk
pneusystem.sk
reservation.pneusystem.sk
pneusystem.sk
trinidadrugs.com
pneusystem.sk
trinidadrugs.com
www.potenzafx.com
pneusystem.sk
pneusystem.sk
pneusystem.sk
reservation.pneusystem.sk
pneusystem.sk
pneusystem.sk
urbanpeakhour.com
www.vidaimoveis.com
pneusystem.sk
www.pneusystem.sk
reservation.pneusystem.sk
www.wasteleaf.com
easl.co.nz
pneusystem.sk
pneusystem.sk
pneusystem.sk
reservation.pneusystem.sk
pneusystem.sk
trinidadrugs.com
pneusystem.sk
trinidadrugs.com
www.potenzafx.com
pneusystem.sk
pneusystem.sk
pneusystem.sk
reservation.pneusystem.sk
pneusystem.sk
pneusystem.sk
urbanpeakhour.com
www.vidaimoveis.com
Certificate
The complete raw certificate details for www.pneusystem.sk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgISBDR7JfOaZeoxm2tfdELJkkELMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTQxODI4MTJaFw0yNDA2MTIxODI4MTFaMBwxGjAYBgNVBAMT EXd3dy5wbmV1c3lzdGVtLnNrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAz0H9FwgG9sDEx9utoiAI0AGoxrLbCtnCshzqtiTewq0we5XJq6yirB2qhWz6 SAVVoAKiBbRwZjfAhBG3wJ+4YbpJ5bH6X68PcyABi0dQL71YravOy/GXAb+VrrQW YmAe+eLudLCQygL3DftV242nwigKJ341wpB6Fy9cQKnlN4zX5kwzuqUReHILcU6M qEEEsYu18O+RJonl1+JodyVeCl/YarfJlroXW00VEBU3JTDV3cGBpSPSA3T6nedU UXkQAQ5xGF911E29PUzNfdj+YhJbs898t9VnLNH83gTb7waj4ciGJBBVkSQsu7Qv 9SgcJAbZ564jQ0RLumSqrIi1H4tfyiRB1MFo9Bo0DsHuCquY2jqBb4cReyx/3ygc EAOGdN+oNjiXibIKVkuLlL2Rmt/TDebY8ZBoIKBUOoGlcxSaxWugbMSKc4b73qWM vm43n+4N+XSevQACXpdyOL051RpD5/1bkhtPfZERKF6fxexiaMMh+zIJXmYL3H0N 1l39d4tY5KeesqZ+5+vUV2dQQxoDsE2e0Myykkze++yH0A41SfOWgQz+enUxTZwi so4s2YpUvUHZE8Lc6zwE+XWr1fnxvR0YJpkYh2WL5S6qkJr9gbN4Z4vvJYnXRy+H qhUmB0ELeJuCjdwFYSWo9xHiKYxq23O1Dz73wvIm6xDzQ8UCAwEAAaOCAiMwggIf MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGOSJFcSSPzAhGhQftZa9bcM+X+swHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKwYDVR0RBCQwIoINcG5ldXN5c3RlbS5za4IR d3d3LnBuZXVzeXN0ZW0uc2swEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX 2AAAAY4+b7XUAAAEAwBHMEUCIQDu5ITTe1v/h/Yagm2Ti6js3VU0TA5/i8Tsqi2e TkFiXgIgJVcdHtiYfe4f7K8fmo2ovbHYFkrIjwu8kh0lPennv/gAdwB2/4g/Crb7 lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY4+b7YDAAAEAwBIMEYCIQCfNUW2 uaOaJUiTJFlwaceo0HcVmVwn469uQn1Yl8R7WwIhANMePs0cAQFo5NoKBR8F93Fv m3bjZzfB9twTB43sYPWxMA0GCSqGSIb3DQEBCwUAA4IBAQAZE4KBq1f7iCQEagb2 p5ez8YO0vXg189gsQpTzN8DSfiYBsz4DJqXoaf8Tfr/B/4/9GpW5xsALv8vIan3s wIAJ5/XAVV6kkbyEtT7PeS1uMI+XHabKH0ogCYRo6llFO/+G4X8IgXc0TXavkljQ IkD+EfY5+uTn0SMdMQvcUfRrsm93uSZeaXLxelCRkwjFq1np3XiM6UC13kQZ5SRT tanJ1a/xuWm0z/guhxCE7M+8f+gk9UM9JpJo2ZR/ZX8CslksK1xj8nY4Kp9eoa2a LCQ6kdWP7M9IskccsXkOKLylV5IAPNuUIaHScbQv2kCTPr2kUzoa4pHQOLEC6TSZ hp8r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz0H9FwgG9sDEx9utoiAI 0AGoxrLbCtnCshzqtiTewq0we5XJq6yirB2qhWz6SAVVoAKiBbRwZjfAhBG3wJ+4 YbpJ5bH6X68PcyABi0dQL71YravOy/GXAb+VrrQWYmAe+eLudLCQygL3DftV242n wigKJ341wpB6Fy9cQKnlN4zX5kwzuqUReHILcU6MqEEEsYu18O+RJonl1+JodyVe Cl/YarfJlroXW00VEBU3JTDV3cGBpSPSA3T6nedUUXkQAQ5xGF911E29PUzNfdj+ YhJbs898t9VnLNH83gTb7waj4ciGJBBVkSQsu7Qv9SgcJAbZ564jQ0RLumSqrIi1 H4tfyiRB1MFo9Bo0DsHuCquY2jqBb4cReyx/3ygcEAOGdN+oNjiXibIKVkuLlL2R mt/TDebY8ZBoIKBUOoGlcxSaxWugbMSKc4b73qWMvm43n+4N+XSevQACXpdyOL05 1RpD5/1bkhtPfZERKF6fxexiaMMh+zIJXmYL3H0N1l39d4tY5KeesqZ+5+vUV2dQ QxoDsE2e0Myykkze++yH0A41SfOWgQz+enUxTZwiso4s2YpUvUHZE8Lc6zwE+XWr 1fnxvR0YJpkYh2WL5S6qkJr9gbN4Z4vvJYnXRy+HqhUmB0ELeJuCjdwFYSWo9xHi KYxq23O1Dz73wvIm6xDzQ8UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 366307518906253308951029808199669814280459 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 18:28:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 18:28:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pneusystem.sk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845537924165604555951902990209511029393806552200762541925020661016382946523374917659525013250008626070604588108149911507887788287406499646536422341190527265944258546421327184612633736406226307069350280099302948737547801541563682107366914641751669276763653660327820256823886557462336419831135574192562774315518133535031149412108693363376288649243138298521752676726607323820712617952793635650574880440554252177908477596978159486934844572131178178964277950139014623479315980094225098396868445476037732607255599737360275942292057888836529184065842987049848964603163875723930522693379285730638905756560364973542235601999256221285116377816606711747487648845388050015773019385018505324577069262499466780149703769184919098043733687842956956328186039777302356466489658046106021239711019530807928858904640320230807420901678249295255497504816694461577083600320440216278093260799707445427560418541414314203604049883212254275177098944845388825010332077081771328487196793539121453685362581400806857434699931928414518470371234499274701265061781257872679546333572522758187348024320072662502628963589419986951644382867110419662524508400334616058448658776386346795008583431388021606406463016852345307922785823074477325324346457673230216269347767403461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 18e48915c4923f30211a141fb596bd6dc33e5feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pneusystem.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pneusystem.sk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3e6fb5d40000040300473045022100eee484d37b5bff87f61a826d938ba8ecdd55344c0e7f8bc4ecaa2d9e4e41625e022025571d1ed8987dee1fecaf1f9a8da8bdb1d8164ac88f0bbc921d253de9e7bff800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e3e6fb60300000403004830460221009f3545b6b9a39a25489324597069c7a8d07715995c27e3af6e427d5897c47b5b022100d31e3ecd1c010168e4da0a051f05f7716f9b76e36737c1f6dc13078dec60f5b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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