honzovakancelar.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:f7:87:65:87:00:87:fc:b9:29:8e:da:31:20:d4:ff:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=honzovakancelar.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:f7:87:65:87:00:87:fc:b9:29:8e:da:31:20:d4:ff:4e
Serial Number (int): 328701506412959729971175630408783060336462
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:1e:ae:67:ba:ca:ff:7f:97:c3:fb:4d:b9:9d:ef:4a:8f:d2:da:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:7b:e5:46:86:1a:d3:2c:f8:e5:e1:b4:2e:70:5a:b8:a3:57:bf:09
Fingerprint (sha256): 3a:38:c5:7a:2a:34:ae:6f:3b:68:f8:40:3d:3e:bc:03:4c:09:2a:9d:cb:1d:50:c2:0e:c6:10:55:fe:a5:01:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate honzovakancelar.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for honzovakancelar.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

honzovakancelar.cz
www.honzovakancelar.cz

Other certificates including the domain name honzovakancelar.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for honzovakancelar.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328701506412959729971175630408783060336462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 00:00:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 00:00:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'honzovakancelar.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740652617149191786475170170057289995982929750129184010315873278481618206895944712408965235362602386493052497247903865815121331934650289721232972036364423854370195887761014733276271682595165434084919779726778162500986374520638918719508760511367762555130330878834006076814792897280299139380695979474042672970604551077967539481517326810598847991924052260577163996132961946296873159678785298574838933946078382290511462837503841101400187143377293381560138270835541812199555226132880644455925861280328713813295477185231677304839271275543557903573713691381007690325896319095377190478318305105733850207477624905758971006013417490337921031108002164358983202126467263022484219604224473719244785376094759373881099778134277266444256203814738373071733868683230862940317587240414084289932591558652925366405485567216269884169313673760432724785840796635333545879169583487027552923445930005834743676473218950856934095795597384889841977963686905392991997183727877146132530163020825418436489333866174363108463821505846309457818496310596502206097155800593294245269780555279369691620348079058360238183104198863784117896876817514785052171371420925325806451710861540312178503877259364467144932174271897683387195480667474660914923219299162614574205654015259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							861eae67bacaff7f97c3fb4db99def4a8fd2dab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honzovakancelar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honzovakancelar.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b2a4d79670000040300483046022100c3066a1a72c85fafe745c0eb3c954e5287ff84542ab08bc79fca261913a586f8022100d6cf61e52fa41750aeca317253d7ab4d5076dbea23afd0b1d55a3d1020009262007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b2a4d79880000040300473045022020a758d6d52052e537acf815d1dfac45887215009e8994f648b5eed156a598c4022100bdb1891e40c4c90e98a9f75a3c9a057e468498ab7cdfda35e4c752d7847347a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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