breclav.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:af:5a:dd:e9:db:99:ce:33:3e:d0:d3:66:f4:07:58:ae:86 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=breclav.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:5a:dd:e9:db:99:ce:33:3e:d0:d3:66:f4:07:58:ae:86
Serial Number (int): 408119340698631602046737443550524784291462
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:ea:d8:29:59:30:33:e7:0e:c1:cf:5f:63:5a:82:06:9a:cc:8b:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:14:7f:39:87:2f:e1:4c:3a:5e:2f:c4:12:fc:d2:17:cb:2f:65:a8
Fingerprint (sha256): 30:08:7a:2e:bf:59:62:65:bc:76:61:c6:e4:23:c6:24:1d:3e:51:da:bf:a3:9a:b4:1b:80:c8:c0:e1:eb:55:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate breclav.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for breclav.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

breclav.eu
www.breclav.eu

Other certificates including the domain name breclav.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for breclav.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408119340698631602046737443550524784291462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 12:21:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-22 12:21:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'breclav.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860284272384481887651142302462499325731644881241924351568978503747785780556684280993749275016294209505532503138945566327198997976808836894325871612865180515803337403659167067000987663928819467925466614315705575712898927287104999596567865109560788468230014717724866412850968467153992914847275941546687584855899253593552855345224119883495923491487829008282274926504363231406179138566410299189013491124572301537908763357972374642484169953104241480551740883432186098597843098927549412901884168630399144138811546795465700963590827821566469960187883764616611017463495593596223084221669218421960511936996635694238087497150342304742482716470481368371979543277443115815755851161924499803626176532865141945283057566671132958266383120297988366872480989439530336825367265453229503738681477738873406123790760194045413822631150868534674347348521554695387659379756623612566375576476522228968499647469198355388277993454583289676979768727735604169659939375385017932305311188936342469097072895605634821198985970179554190634150860423715304181135784272001547166746985925355499689509089062248004477568022236548151677244769281465078340070496034674137954649920182630022891931431426634675888147504500843783335398253739343244230962401998121048267517611519409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2ead829593033e70ec1cf5f635a82069acc8b85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breclav.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breclav.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001799e8a07340000040300473045022100ef00aec2fa8a6f8a8e9474758cfe111f1bb72f8d1eba5d1f8771f44cfe4cfedd0220020394d001893312d899089ac625b3153d14cbf8ce9700c905459748274355ab0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001799e8a07590000040300483046022100ec0f96793574366c2988db558486d33cd61ddb13f4956a796b3574336fa864f8022100ff4c029bd833f3349f0deedac1309cf521c3643bb043dc8eb616a63f0a4e6495
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024187aa3ddeeab0815d2c6a87aab5d79dc59abd313113108ea3a8b9ebb52152efdc061057a2405958ce242e53e8e298b9b02a62008c5612c8c270b73ee3ba48558b3481c9d3d2f2f565bd9316dd049e90ad06823b6294442b38f6a7d016462ab32d74568fd7b322bced941aac74f3dbf815fa2c35d6379ef3953d8a123efc36f68ae87eea4317b348ba3642e8e872d9522c50d6a9d538437bd6e88253ae3eb30fcc892a53998deefef53c8cc67bf4585890e9ca2c45dffdcc4357e99fd34853d4d9b7bbd7496e151d14a77a43787b103505db10710c732a29b4852344b7e32a5ea80dcc32190090ba04c3f9251873277f7daed8eaec77dd340524c59c4d89a0e