dobrebyliny.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:b7:f1:73:ea:8a:38:47:fe:55:ae:d9:bc:3b:b1:c4:65 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dobrebyliny.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:b7:f1:73:ea:8a:38:47:fe:55:ae:d9:bc:3b:b1:c4:65
Serial Number (int): 347332516677188050650302837301599892784229
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:00:b6:49:1c:85:36:1c:16:2d:b0:12:aa:7a:2c:41:09:4f:bb:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:8b:99:b8:4a:b6:9b:14:d9:3a:cc:b3:1b:e2:02:7b:5e:f4:3f:28
Fingerprint (sha256): 32:ca:6e:29:df:4a:a3:ca:0c:c8:e4:70:d3:92:8c:bc:20:52:86:b3:7a:e8:eb:da:07:c2:81:dc:dc:b7:99:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dobrebyliny.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dobrebyliny.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dobrebyliny.cz
www.dobrebyliny.cz

Other certificates including the domain name dobrebyliny.cz

(limited to 100 certificates)
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
www.dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
www.dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
dobrebyliny.cz
*.dobrebyliny.cz
dobrebyliny.cz

Certificate

The complete raw certificate details for dobrebyliny.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347332516677188050650302837301599892784229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 00:43:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 00:43:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dobrebyliny.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714491803585021249611955456352415402996726196541626617276756639990758636216681894018916998770215891756356838607828490366348795817288333483046284658178376566708121121354729415207934611625605882562686388944975253396882077478310467817635402978283233859604728486488834407460228928664431535559757331571896416179077153276919035187654105639063645154393986633085988809363208562061774910812934215341579618204414162660528134077739083833306201475931740170728403745168252014675023130242545086405431335509077419498997740537749364743609278120404129166025750538398195645061418070369917022210411389766579019780474459491815955947858150324977767192574547223044271052729126592828066787461609221544472328733211570088531471527884374564533313927148198800666559857014821985256170529295307008954942383144218312421426307452157479405825350031295703697575929930530313619799381395133486690736999872380472718300014818232942388769891942817089342262975226472110693874340576453577065875564586233945025357185526507601317814527282752175880770942177569359269573630379225204297223954313558981129603096182081945609538912964099786209246944869215340573087090754198183198011208472090369436945791312267029729068290562369678158381020511896068459239046379803227369798945242937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e500b6491c85361c162db012aa7a2c41094fbbc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dobrebyliny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dobrebyliny.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db35601f80000040300483046022100d5ec30e2e643f8ac4a337b04475c341119fac8219ff8c9c5d309ece2ccdfb868022100919dee8a5cacf874807478f303a5c6ecb2b4a31e148b5f3c5443544d9b4ae194007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db35601e60000040300473045022100e8e7b9b4f49e9227a6b8b07ca2cef1f423b360d6a0ffc4b66e492f7689007d6902206c63d3b9fee873a4f281a14db727a4870c43bb5067d8d05375d08166d596cf59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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