www.opportunity.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fd:52:4e:07:e1:d4:cb:16:8d:c5:2a:f1:3e:27:1b:04:9d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.opportunity.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:52:4e:07:e1:d4:cb:16:8d:c5:2a:f1:3e:27:1b:04:9d
Serial Number (int): 434649984412716806792664448069243921695901
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:8c:52:26:00:81:22:c2:f8:f5:68:fa:b0:f1:7d:79:74:a6:2b:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:a0:96:c7:0e:dd:29:db:ab:a5:e0:78:ab:0a:00:cb:60:27:29:1b
Fingerprint (sha256): 3d:ce:c0:03:4f:23:94:e4:35:01:f7:e8:87:43:0d:18:8c:87:56:bd:62:fa:1d:12:a0:c2:8a:19:6f:8f:78:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.opportunity.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.opportunity.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opportunity.cz
www.opportunity.cz

Other certificates including the domain name opportunity.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.opportunity.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434649984412716806792664448069243921695901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 08:27:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 08:27:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opportunity.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710583003523153759007337608667491528106189142023737621779859277289251162866129767883493754127066352411671048852594355454360529622387405004415066862446950112150841525158473551831301267027684832960813399774932639688155827250860302523381768199917646713267149318552667533835950164804112253570648686684587740631049243183867711672414197582299357711091175463316776436924352545617663914355796055994013141498070112114913135305907670826183469214128186724220700984466690677115101958149022707693898321845573010912500930407783399118405558271257648786593605798708262189793333760140245015740242549213650252436217578944360973811489274132069174184175697733937903541533703313484995702951982611050401738342241386177866944037818472139560785181994421379474940630753230346332780755013990485762088085364896107277493832131226681235336920089473192167077912991676893237367875053104928798300246527345354161480992079030050215747545348359988052901202992177413238965078825362158657534934741771965174545234274952745814963383757708421012591479281913561052574113661097276678162401658427341359273842313772346971720391644316887981542641786578866820061393124081194497003961439027325221128502418499982517131283369638296628494730326595958956341136976315982902678174128533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c58c5226008122c2f8f568fab0f17d7974a62b2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opportunity.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706c397474000004030047304502200134802c4944353ab381e2a216db2448cf1c96bdeb094a8fa886dd01bcde38a20221009804d7f738ef76bd4575d22185200947f68c0ab61052b902d3074720f071f7a70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001706c3975d400000403004730450220776454e90d949106659074ac3261d428e69d9699f7d3ed75939f6ccd50965cf0022100b223cc996ee770f9fd35485ce21c6aa7fd86ea64cea653c2180f60a1a975b13d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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