www.opportunity.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:fd:52:4e:07:e1:d4:cb:16:8d:c5:2a:f1:3e:27:1b:04:9d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.opportunity.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fd:52:4e:07:e1:d4:cb:16:8d:c5:2a:f1:3e:27:1b:04:9dSerial Number (int): 434649984412716806792664448069243921695901
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c5:8c:52:26:00:81:22:c2:f8:f5:68:fa:b0:f1:7d:79:74:a6:2b:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ed:a0:96:c7:0e:dd:29:db:ab:a5:e0:78:ab:0a:00:cb:60:27:29:1b
Fingerprint (sha256): 3d:ce:c0:03:4f:23:94:e4:35:01:f7:e8:87:43:0d:18:8c:87:56:bd:62:fa:1d:12:a0:c2:8a:19:6f:8f:78:66
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.opportunity.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.opportunity.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
opportunity.cz
www.opportunity.cz
www.opportunity.cz
Other certificates including the domain name opportunity.cz
(limited to 100 certificates)
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
cxc.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
cxc.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
www.opportunity.cz
Certificate
The complete raw certificate details for www.opportunity.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgISBP1STgfh1MsWjcUq8T4nGwSdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIwODI3NDlaFw0y MDA1MjIwODI3NDlaMB0xGzAZBgNVBAMTEnd3dy5vcHBvcnR1bml0eS5jejCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK4tfXkcqvB6PPtWQeO+vLV3hYpd dBh2waZrO6opamDnFRbmIsZXxBSacKxELJDL4JG/DY3DLCGrgXT3CL+CBr4VatWw TVoxpjwn1DE9/F75BUTxJMsLcSK9XpuVfNWQCPTDFikqGmgaw9Hf6QQs+sElG0uM vyf5brAqlNKgLouCsW34CmfI5X1+iP4Tg7Cmz0Ldmmm/vGHw9KjFkhLJJQHkam8b QaupwYnYYPWF4F1gouhXii3zd8R89azLhNqxqXIiyleN8Wj+RtHe5HM0O9T06G1x c/K6xXs3S9VAIJSEgXVy7+iBBDSBkO7VildWJqXBPT6QKC0U0by9LJZXeEYIK8sj 4drt24zJAomSTh+4WvJYGq1u9WrNKIBYq/zwtowiRA9rMD2udRHECNkJEpEZKoww OhmAIv8HLRoIUUOs3YnoVUWzfVkUzhJ0pW5tUAZaHsIj8l80IUDcDTSC1W3MX2RO G2D0r2REkmgpX3K43Tsu8g2OyChUhUcLW9hfVMLxjKjsFi3KR5N3b/pol1FI2STp 4w7Apwx4ja87TcRT4yDIdwIG5PnumWEMuWzYQUN0BZcaLgutv0PBbPN8p0qiA4uU ny1m8NNT/bJN8m+LMeyGzRuRJ4zteV5XHvhsz631bUhcFcFZA8CwRFIX8vP1e6kN bwjIhxoF4Ph/ZVmVAgMBAAGjggJ3MIICczAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FMWMUiYAgSLC+PVo+rDxfXl0pisvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLQYDVR0RBCYwJIIOb3Bwb3J0dW5pdHku Y3qCEnd3dy5vcHBvcnR1bml0eS5jejBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AAe3XBvlfWj/8bDGHSMVx7rm V3xXlLdq7rxhOhpp06IcAAABcGw5dHQAAAQDAEcwRQIgATSALElENTqzgeKiFtsk SM8clr3rCUqPqIbdAbzeOKICIQCYBNf3OO92vUV10iGFIAlH9owKthBSuQLTB0cg 8HH3pwB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcGw5ddQA AAQDAEcwRQIgd2RU6Q2UkQZlkHSsMmHUKOadlpn30+11k59szVCWXPACIQCyI8yZ budw+f01SFziHGqn/YbqZM6mU8IYD2ChqXWxPTANBgkqhkiG9w0BAQsFAAOCAQEA Xsp3lfB3OaLhBQfIOJn2ElVyQU3t6ZUtVsX+1UcSJz+8OimPqbuN44gRzlMs5okA dDh+dPGcrnjqAv1KwyQST2EwvhdX0yQqsZplEuRbNvDFjE7OT5xZU88uU3WxibIG sr1DKQVB2fHhgN2Nl5qH7eJwqiAfnrpYLr0Mb5lbAgZTMXTtQ00VmUa8ESJJsa2U awisYnNVh/38f+uiyWg0g9WVAwX/izpg9cK0hALPTD2IgfG+2qXAwbsuMi+PBOUx goqEFvS7oSHPhWrIGsN/vSJXGoj8DetnZk4fsJo7krwhXJKlDh1iz9uduoCWQYU+ 2pnfCX+NlF7i1nTqfLqtmA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAri19eRyq8Ho8+1ZB4768 tXeFil10GHbBpms7qilqYOcVFuYixlfEFJpwrEQskMvgkb8NjcMsIauBdPcIv4IG vhVq1bBNWjGmPCfUMT38XvkFRPEkywtxIr1em5V81ZAI9MMWKSoaaBrD0d/pBCz6 wSUbS4y/J/lusCqU0qAui4KxbfgKZ8jlfX6I/hODsKbPQt2aab+8YfD0qMWSEskl AeRqbxtBq6nBidhg9YXgXWCi6FeKLfN3xHz1rMuE2rGpciLKV43xaP5G0d7kczQ7 1PTobXFz8rrFezdL1UAglISBdXLv6IEENIGQ7tWKV1YmpcE9PpAoLRTRvL0slld4 RggryyPh2u3bjMkCiZJOH7ha8lgarW71as0ogFir/PC2jCJED2swPa51EcQI2QkS kRkqjDA6GYAi/wctGghRQ6zdiehVRbN9WRTOEnSlbm1QBloewiPyXzQhQNwNNILV bcxfZE4bYPSvZESSaClfcrjdOy7yDY7IKFSFRwtb2F9UwvGMqOwWLcpHk3dv+miX UUjZJOnjDsCnDHiNrztNxFPjIMh3Agbk+e6ZYQy5bNhBQ3QFlxouC62/Q8Fs83yn SqIDi5SfLWbw01P9sk3yb4sx7IbNG5EnjO15Xlce+GzPrfVtSFwVwVkDwLBEUhfy 8/V7qQ1vCMiHGgXg+H9lWZUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434649984412716806792664448069243921695901 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 08:27:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 08:27:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opportunity.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710583003523153759007337608667491528106189142023737621779859277289251162866129767883493754127066352411671048852594355454360529622387405004415066862446950112150841525158473551831301267027684832960813399774932639688155827250860302523381768199917646713267149318552667533835950164804112253570648686684587740631049243183867711672414197582299357711091175463316776436924352545617663914355796055994013141498070112114913135305907670826183469214128186724220700984466690677115101958149022707693898321845573010912500930407783399118405558271257648786593605798708262189793333760140245015740242549213650252436217578944360973811489274132069174184175697733937903541533703313484995702951982611050401738342241386177866944037818472139560785181994421379474940630753230346332780755013990485762088085364896107277493832131226681235336920089473192167077912991676893237367875053104928798300246527345354161480992079030050215747545348359988052901202992177413238965078825362158657534934741771965174545234274952745814963383757708421012591479281913561052574113661097276678162401658427341359273842313772346971720391644316887981542641786578866820061393124081194497003961439027325221128502418499982517131283369638296628494730326595958956341136976315982902678174128533 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c58c5226008122c2f8f568fab0f17d7974a62b2f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opportunity.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706c397474000004030047304502200134802c4944353ab381e2a216db2448cf1c96bdeb094a8fa886dd01bcde38a20221009804d7f738ef76bd4575d22185200947f68c0ab61052b902d3074720f071f7a70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001706c3975d400000403004730450220776454e90d949106659074ac3261d428e69d9699f7d3ed75939f6ccd50965cf0022100b223cc996ee770f9fd35485ce21c6aa7fd86ea64cea653c2180f60a1a975b13d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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