adastra-web-sk.prob-prod.glow.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:e2:72:ae:cd:ae:64:66:dd:8f:0a:c7:d3:93:1d:9b:4a was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adastra-web-sk.prob-prod.glow.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:e2:72:ae:cd:ae:64:66:dd:8f:0a:c7:d3:93:1d:9b:4a
Serial Number (int): 265721247192656281579932244110760243731274
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:ee:0d:df:d2:fe:ee:23:58:d4:11:a1:43:19:98:5f:b6:62:eb:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:67:37:cc:15:2b:f8:c8:01:c6:5b:8f:ef:6d:36:c6:5b:5e:53:08
Fingerprint (sha256): 35:08:e5:89:49:78:4c:ee:b1:98:63:f1:a5:b2:76:4d:bb:70:a6:5d:b2:3e:ce:63:1d:af:a5:2a:36:cf:47:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate adastra-web-sk.prob-prod.glow.cz

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adastra-web-sk.prob-prod.glow.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adastra-web-abc.prob-prod.glow.cz
adastra-web-bg.prob-prod.glow.cz
adastra-web-de.prob-prod.glow.cz
adastra-web-en.prob-prod.glow.cz
adastra-web-sk.prob-prod.glow.cz
sk.adastragrp.com

Other certificates including the domain name glow.cz

(limited to 100 certificates)
hamu.prob-amu.glow.cz
*.glow.cz
ranec.glow.cz
majak.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
t.glow.cz
webmail.glow.cz
oko2.glow.cz
www.glow.cz
www.glow.cz
reader.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
famu.prob-amu.glow.cz
doosancms.online.rev-doosan.glow.cz
webmail.glow.cz
reader.glow.cz
www.glow.cz
altmail.glow.cz
2itwiki.glow.cz
git.glow.cz
adastracorp.com
git.glow.cz
mail.glow.cz
altmail.glow.cz
adastra-web-sk.prob-prod.glow.cz
amu.prob-amu.glow.cz
mail.glow.cz
ranec.glow.cz
ranec.glow.cz
webmail.glow.cz
reader.glow.cz
jabber.glow.cz
adastra-web-sk.prob-prod.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
mail.glow.cz
mail.glow.cz
ranec.glow.cz
www.glow.cz
altmail.glow.cz
sekac.glow.cz
altmail.glow.cz
www.glow.cz
www.glow.cz
t.glow.cz
www.glow.cz
adastra-web-sk.prob-prod.glow.cz
tmobile-spolecenska-odpovednost.prob-prod.glow.cz
sekac.glow.cz
webmail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
ranec.glow.cz
amu.prob-amu.glow.cz
webmail.glow.cz
2itwiki.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
sekac.glow.cz
doosancms.online.rev-doosan.glow.cz
altmail.glow.cz
www.glow.cz
mail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
*.glow.cz
obrik.glow.cz
majak.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
obrik.glow.cz
webmail.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
webmail.glow.cz
adastracorp.com
reader.glow.cz
sekac.glow.cz
mail.glow.cz
www.glow.cz
t.glow.cz
reader.glow.cz
www.glow.cz
majak.glow.cz
obrik.glow.cz
ranec.glow.cz
dev.glow.cz
adastra-web-sk.prob-prod.glow.cz

Certificate

The complete raw certificate details for adastra-web-sk.prob-prod.glow.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265721247192656281579932244110760243731274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 06:55:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 06:55:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adastra-web-sk.prob-prod.glow.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672264626962718328924889500134910360270716919852218219491242978782261154044114726167820311175182453290937568435578320174212556701008702131253210608255440677118095188792617607693240988768668072493490949594135292120740031492269162728078120763105865908563999919270422061593149264068729661662118128613992694879781838672819488981702348111526750878517885017530523470286787097033417833788493262881351322102632660863152346805417007993144933981422949042520075647721243681726591341018285476185663207879101655662679107166847362017866750020351483626382903655814090131166625121996894978326135199419375997416689537433779356998985222361943436547778365447212552924622930984763793868328555910695285233916846838847042934560600465585863724116491371926880776726568910128724227236634003213961625608501850066279288379406265774142549060022607258426109988696942169653194405945388323790131759052946000162158854949446038061081210349194359948714492532470941194114716548782434872986466100690140928580000561168618872451702202761616397995347069361728698947839798483023554701811463562425430732816959533528250687640738969699246867082861424716035245376585522250863408755766506525621344539467760307959022234104972783207104009773194857668207069539598853362874851556847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2ee0ddfd2feee2358d411a14319985fb662eb9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastra-web-abc.prob-prod.glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastra-web-bg.prob-prod.glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastra-web-de.prob-prod.glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastra-web-en.prob-prod.glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adastra-web-sk.prob-prod.glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk.adastragrp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db9d0df780000040300483046022100ef1a6005b4174104611edf0f526b3c5dd658c8ddd18442de8a8e98e8d29d6ac5022100c3807b7a3ae499d24d4129945f9fc98bcab4b969a7bf28117a111f1436c4c5cd0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016db9d0dfee000004030047304502202c4e6b482780f3300ac57a3935919d18e4934b7b2bdf5a4088ddb5430799f436022100eb9de802c38ce6749c767c69751b3e17c034ef67f8ad363677f6e6c7b214ee0f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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