rocketchat.omnio.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:17:57:c1:ec:05:d7:b1:b4:fb:9a:af:c1:d7:2d:6b:64 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rocketchat.omnio.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:17:57:c1:ec:05:d7:b1:b4:fb:9a:af:c1:d7:2d:6b:64
Serial Number (int): 327042382517956317024819978219700326591332
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:dc:7d:7d:86:5a:ef:f0:a3:fa:de:98:2f:7f:d3:6d:1f:5e:4f:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:7d:b2:2b:3e:d7:16:c7:61:c6:f2:73:11:bb:bc:81:07:75:d3:6c
Fingerprint (sha256): 30:b6:9f:3a:26:13:04:a1:3d:08:13:0b:81:6f:a4:51:b9:0b:fa:dd:37:9f:63:9a:26:26:da:7e:a8:27:02:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rocketchat.omnio.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rocketchat.omnio.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rocketchat.omnio.cz

Other certificates including the domain name omnio.cz

(limited to 100 certificates)
www.total-local.net
hladamedealerov.sk.vhost.omnio.cz
rts.renault.pl
omnio.cz
www.duhovkagymnazium.cz
duhovkagymnazium.cz
partykrupky.cz
cms3.omnio.cz
partykrupky.cz
lukasik.renault.pl
renault-bene.cz
www.automotolandcz.cz
nila.cz
renault-retail-group.sk
www.jih2000.cz
www.duhovkagymnazium.cz
www.renault.euromotor.sk
www.stillking.com
panthergym.cz
uni-car.renault.pl
karlik.renault.pl
renault-prerov.cz.vhost.omnio.cz
cory.cool
daciaeasy.cz
poznan.pl.vhost.omnio.cz
autodruzstvo-znojmo.cz.vhost.omnio.cz
www.automotolandcz.cz
dacia.inicial.hu
www.renault.euromotor.sk
www.total-local.net
bestway.nissanfinance.cz
dubnicki.renault.pl
bestway.nissanfinance.cz
uni-car.renault.pl
dacia.inicial.hu
autodruzstvo-znojmo.cz.vhost.omnio.cz
nemoczech.cz
www.karmayoga.cz
renault-prerov.cz.vhost.omnio.cz
renault-brno.cz
auto-pilar.cz.vhost.omnio.cz
www.autoposik.cz
transbitumen.total.cz
nemoczech.cz
omniodigital.cz
www.formontauto.hu
www.automotolandcz.cz
www.automotolandcz.cz
jirisoucek.cz.vhost.omnio.cz
transbitumen.total.cz
duhovkagymnazium.cz
www.formontauto.hu
www.total-local.net
rocketchat.omnio.cz
cmnauto.cz.vhost.omnio.cz
renault.autocb.cz
lyko.renault.pl
autostyl.sk.vhost.omnio.cz
polmotor.pl.vhost.omnio.cz
autecobs.cz.vhost.omnio.cz
*.omnio.cz
nila.cz
renault.adamowscy.com.pl.vhost.omnio.cz
www.duhovkagroup.cz
facebook.omnio.cz
pabich.renault.pl
www.lovesavage.tv
nila.cz
uni-car.renault.pl
autoset.cz.vhost.omnio.cz
cmnauto.cz.vhost.omnio.cz
www.formontauto.hu
autotichy.eu.vhost.omnio.cz
renault.yama.pl.vhost.omnio.cz
www.autoad.cz
www.autocentrumlis.renault.pl
www.renault.euromotor.sk
addmotor.renault.pl
winkler.sk.vhost.omnio.cz
www.autozieba.renault.pl
omnio.cz
*.omnio.cz
duhovkagymnazium.cz
www.stillking.com
poznan.pl.vhost.omnio.cz
nila.cz
cmnauto.cz.vhost.omnio.cz
renault-prerov.cz.vhost.omnio.cz
autotichy.eu.vhost.omnio.cz
lyko.renault.pl
transbitumen.total.cz
cmnauto.cz.vhost.omnio.cz
autaborek.cz
poznan.pl.vhost.omnio.cz
renault.rja.sk
duhovkagymnazium.cz
www.stillking.com
cory.cool
autotichy.eu.vhost.omnio.cz
mg-offers.cz.vhost.omnio.cz

Certificate

The complete raw certificate details for rocketchat.omnio.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6TB3qM7kpcQC4XCbmB8T
joC3u4tueeLUxyYbANP3P1qp6sUGv8I1vlrnkLdcSXuEvQUOqi/juyfnh6yGY7h4
s1JOSi4JhVYWIVzt/yjo6Z6D12sy3XBGvKqOCEN4N38ey5k+g3+d9MJYhPIKj/BJ
va03B3GeZa3ZcwtvZhiauOoT1L21x+xWLS8JY82lZvKEeXJdFnvtQuSgjg1i1acZ
WZ//Q0zN7DJZgq10XnhbOrr+q/L7uW0CF4hqNF70TGXVWz2y2LNbvPbIvDkV6Yvi
b1pirZPba72fQh/U+gOluj3aoc/i1ZYLhG1FgZhUgDgUVC8ifs99HKhCKLD0jdOp
amZhBORUHQCFEH32Ph0tCXb7njzMmKPJ++aNjpTgTxQISCFNedWgjXjcJpnT8/Kd
jYW6xG+3f3ekz6ivct7OdMUsXXyFLr8aqre4YQnWtzRccupaKZBLtjIfIrfaetV5
v9yhZ2KjNvd5FmAwxJjsG0QIZD3nGsTPGFtu/gD855FapT1Ipyjw9l6yqQN7zFz3
8x1BTOeOOn5Y/HMr0CipnnQIYfV2hp1y6H2wVuZqpL5P+fu4adfejl1+jPI2uT1I
fPSD/OtWtSk+KmQ3UYRyS7EY3/VdStaUiOVuJ9NwvCAC1ty+avyPf7trSJqx2i8H
1PPO2UOx/IwpuCmYh/6ywSUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327042382517956317024819978219700326591332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:20:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 09:20:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rocketchat.omnio.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 951329449960773522066991243501725791930130096275752154305493007566902630444257925139090714761364362701878075351485385109952283503118284906737247715006542237390241713482145827505162289301234582795241301518807586198166280856898528222988460119296069169643341430078464845832233160677919586177899816718020662601879091764302195203132387344735340613766540596019659893295236366254157931578847134264352309679945632515655234294715127190832691978805591350727543417435008816388239002430450855805239215255628294514562578988055549483164971560766833997074662226437527076156232643546465787172714255114227370704071166168623023708239377635983175771235058898240616852622267890919530699337640566389458403053673971715442426477536371774955582261110543449829820151270796069259770910658717784727124317660603002411461833028211876035825237661063791082188896429752437491836507956414447584968542418137556465092452278994137700910011598548781763663153205389997814089564142359111858677455160362564512355330332729956726501257663414272016405122013085342931952687236350858186842077083185959635341359812912115194147810105549582101562999464302660607041761374924261773841232159225060299969542958008094472425326243937288855025502905316477069821521298520722902854411665701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9dc7d7d865aeff0a3fade982f7fd36d1f5e4f26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketchat.omnio.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f941f07ef0000040300483046022100a1413dddaac486f89c93903c964cd6c3c15504853ddd802c4322eef1d6e04cce0221008cfe84b8e8e104ebab06681ffb3cb3201da3c0852def01ae9afba78134591dec007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f941f07da0000040300483046022100e2031cfbba080e02182b032a20df4ec7f007701860768193daa2e6efb57f51fe022100a7b0903d0b93ed01b3b746fa1154d6dea038ddbccd02d73340a77cd552db36dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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