onedrive.nm.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:63:2b:66:4a:07:15:83:fb:10:87:ca:7f:44:23:d3:52:53 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=onedrive.nm.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:2b:66:4a:07:15:83:fb:10:87:ca:7f:44:23:d3:52:53
Serial Number (int): 382194785971771782952253657336741199303251
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:20:14:ca:a8:3d:c3:5f:75:94:7f:ca:52:72:d7:e0:e2:48:67:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:71:66:45:8f:e5:49:0a:9e:a4:ca:63:aa:7e:96:c3:9e:9c:5a:21
Fingerprint (sha256): 38:1c:10:17:b2:41:25:33:79:bc:01:32:88:7d:cd:c4:1f:5a:be:78:90:ac:75:b2:9c:d4:71:d7:7d:66:ab:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate onedrive.nm.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onedrive.nm.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onedrive.nm.cz

Other certificates including the domain name nm.cz

(limited to 100 certificates)
nm.opac.nm.cz
mbssceny.opac.nm.cz
rezervace.benesovavila.nm.cz
kanesh.nm.cz
kanesh.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
vademecum.nm.cz
intro.nm.cz
nm.opac.nm.cz
vavobd.nm.cz
kanesh.nm.cz
cmhdok.opac.nm.cz
kanesh.nm.cz
nm.cz
stt.opac.nm.cz
npm.opac.nm.cz
nm.cz
npm.opac.nm.cz
prazskestopyantoninadvoraka.nm.cz
kanesh.nm.cz
sumerian.nm.cz
nm.cz
cmhdok.opac.nm.cz
posta.nm.cz
antonindvorak.nm.cz
kanesh.nm.cz
amusing.nm.cz
publikace.nm.cz
nm.cz
botanika.opac.nm.cz
android-app.nm.cz
amusing.nm.cz
intro.nm.cz
mbssceny.opac.nm.cz
entomologie.opac.nm.cz
oncd.opac.nm.cz
kanesh.nm.cz
kerio.nm.cz
edukace.benesovavila.nm.cz
grepo.nm.cz
mbs.opac.nm.cz
botanika.opac.nm.cz
publikace.nm.cz
botanika.opac.nm.cz
cmh.opac.nm.cz
nm.cz
*.opac.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
intro.nm.cz
helpdesk.nm.cz
zbraslav.opac.nm.cz
kanesh.nm.cz
csds.opac.nm.cz
eshop.nm.cz
posta.nm.cz
odtvs.opac.nm.cz
antonindvorak.nm.cz
stt.opac.nm.cz
odtvs.opac.nm.cz
zbraslav.opac.nm.cz
odtvs.opac.nm.cz
bedrichsmetana.nm.cz
rad.nm.cz
*.opac.nm.cz
navigation-app.nm.cz
mad.opac.nm.cz
no.opac.nm.cz
t.mailkit.com
no.opac.nm.cz
navigation-app.nm.cz
admin.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
ms.nm.cz
kanesh.nm.cz
amusing.nm.cz
mad.opac.nm.cz
npm.opac.nm.cz
antonindvorak.nm.cz
onedrive.nm.cz
p.pozvanky.nm.cz
intro.nm.cz
helpdesk.nm.cz
rezervace.pamatnikpalackeho.nm.cz
t.mailkit.com
prazskestopyantoninadvoraka.nm.cz
amusing.nm.cz
intro.nm.cz
t.mailkit.com
oncd.opac.nm.cz
ms.nm.cz
rd-gw.nm.cz
onedrive.nm.cz
mbs.opac.nm.cz
helpdesk.nm.cz
mad.opac.nm.cz
muzeum3000.nm.cz
oncd.opac.nm.cz

Certificate

The complete raw certificate details for onedrive.nm.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382194785971771782952253657336741199303251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-26 00:07:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 00:07:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onedrive.nm.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716587485861527760133107104443353081992555819119438593829702367164301337047499603136767396959351925581647382690920465545873232071908443796034542918944859872704346546126962832615231814701218029029195670754295467822008775416597960355391396869629604461558739735588411625259091976116687947506754980813881941966859958013876763988864807236802997142085257722552112515144854176604076851692318652259875499997622555454733097905399654702437095515459215042302119287302400022848301326617838559079902808611803748026558130237500293437546386868188451196518852609066970597224126943693387182715682902721914057386368833387686249459178194365522938020837078362529261058173522143451316974109858024120154093966222862561936087611906414223110660032034476688420610881114289868503064565888726335626194074377206838351644040567895865549079223152002558797574383114845188252318362182871774811415556241835729090634355928494626438842532370884600889041676059851377675757881127308111692752212816376010574157743131578910749735707510710054943708578190511977137886925671959830412790031941744477968531428161159070071345424937908075520390429351499760397883650686722191872230408093716342907436659368772949598561058513595938602244087763341949775680090711577984257355869655501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba2014caa83dc35f75947fca5272d7e0e2486722
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedrive.nm.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001871b74a7810000040300473045022053dbf6b702508e3c91f79e8d818ce63ba71ce9712f25abc395b1df87256e4c28022100d43b34ca4f09ade8feec01d66ff8f934502ce4caf814f60683c7c4e0789a54140077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001871b74a7980000040300483046022100abb3a5fabe9cd294c60bb2d1ea02ab46b3025896832d22cf2bc6a34ea91145b0022100e3d6c807a6505e1f32663d948f0a7f70206ec8eac98af65ba52f1c8d7588a327
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a5c6a4f09d6512ce6d9cefac28aeef212e259028a1808b1290877a1a979771d25d844f3a10ef78e8d498059b422c78aaf37bed8d9e6eb94f6ca9f9bf4533d6ed3011f4ccf1a37884699769e8b3487834c59dd2de229f67875896daaee45fb1973360fa7b56aeddfcbbf5729421d319640d89ffc0f28ea44aaa398b9e256f990cc04bea637fca517d8945361dfac018e3f2e8e87aedc6f7051c025caa4cb870f706c58ce3e2ab2b66fdb8caf3eb28f9d0a4b988b0d1c78b45a0470d08765e8ac16c46c61c7f9983b98666fadbc975312a9846fc60a0bc8de84626bbc0162955000b980ecba16fd2bb0aaa2765a88ff772945d0f0acbb04cdc1aac3b362191648