www.glow.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:39:4a:00:14:16:f3:92:14:a9:68:58:52:11:43:e1:e2:f0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.glow.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:39:4a:00:14:16:f3:92:14:a9:68:58:52:11:43:e1:e2:f0
Serial Number (int): 367943601920689155884978655105426623947504
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:78:66:41:17:85:e2:5e:00:4b:ee:f2:32:88:6e:29:54:d7:3b:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:34:f8:18:51:8f:ef:ce:4f:69:e0:21:cf:cf:67:a3:19:9a:5d:30
Fingerprint (sha256): 3e:ec:79:a6:ae:19:18:57:60:64:2c:ca:ae:65:44:4f:7a:cb:0f:60:5f:00:17:e3:28:83:59:0f:78:71:96:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.glow.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.glow.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glow.cz
www.glow.cz

Other certificates including the domain name glow.cz

(limited to 100 certificates)
hamu.prob-amu.glow.cz
*.glow.cz
ranec.glow.cz
majak.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
t.glow.cz
webmail.glow.cz
oko2.glow.cz
www.glow.cz
www.glow.cz
reader.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
famu.prob-amu.glow.cz
doosancms.online.rev-doosan.glow.cz
webmail.glow.cz
reader.glow.cz
www.glow.cz
altmail.glow.cz
2itwiki.glow.cz
git.glow.cz
adastracorp.com
git.glow.cz
mail.glow.cz
altmail.glow.cz
adastra-web-sk.prob-prod.glow.cz
amu.prob-amu.glow.cz
mail.glow.cz
ranec.glow.cz
ranec.glow.cz
webmail.glow.cz
reader.glow.cz
jabber.glow.cz
adastra-web-sk.prob-prod.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
mail.glow.cz
mail.glow.cz
ranec.glow.cz
www.glow.cz
altmail.glow.cz
sekac.glow.cz
altmail.glow.cz
www.glow.cz
www.glow.cz
t.glow.cz
www.glow.cz
adastra-web-sk.prob-prod.glow.cz
tmobile-spolecenska-odpovednost.prob-prod.glow.cz
sekac.glow.cz
webmail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
ranec.glow.cz
amu.prob-amu.glow.cz
webmail.glow.cz
2itwiki.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
sekac.glow.cz
doosancms.online.rev-doosan.glow.cz
altmail.glow.cz
www.glow.cz
mail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
*.glow.cz
obrik.glow.cz
majak.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
obrik.glow.cz
webmail.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
webmail.glow.cz
adastracorp.com
reader.glow.cz
sekac.glow.cz
mail.glow.cz
www.glow.cz
t.glow.cz
reader.glow.cz
www.glow.cz
majak.glow.cz
obrik.glow.cz
ranec.glow.cz
dev.glow.cz
adastra-web-sk.prob-prod.glow.cz

Certificate

The complete raw certificate details for www.glow.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367943601920689155884978655105426623947504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 02:16:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 02:16:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.glow.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687657028243208421648792965185254357926710220344510765829547655580845053243573869323127043210589917932422246242881094561738745388702033330730067687301359555639110932446851596875536909230611691822604612923708180768823116059492088888344535682469377854599650037625515388593562455340724783069241002230351859870482888482292298864018616383756689461499538784708719500045121612951776213713020846298495458713970309074345192281515337412191513690565018727541380200325653853816114349470674193781201360828826285501382732284304230520572092005857251754429125211664219944935169336008595577041748626115718303007321159336940865001828212079276877160320277892802956097633658174038011682836528564011007906902155397534875418020786070312438031384413614960322293821123255635181369487940770785017234549644285381579492654839567444926115913592215582556004624350093844619433935338263435449719525054159220726389136679565161042783301844283391514392798319256315167019026997023210626611678055190707710396716109981086902154651621486150820134838785130343126203799984551407957134831062140629001775721834904021459651353261856471766286476900374082870956197992990700252592491809827513666920298192457935750173144246742000130593396866735828743147211289079862584161856040527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b07866411785e25e004beef232886e2954d73be3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glow.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glow.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f4be757d40000040300463044022002c5c573d8c17bd3ca1ab72646af4ce5d2959024dedd67ce9a0d9e493ea27a0002201f7865bd911e63a4f1d4bb377557098ed2ddf7adee961f65dc77d5c26445448a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f4be757da0000040300473045022100ecb9f555a47f8f8f9708911bdf4120fc9eff47722a61586b619f04f60371da3102202bf0f3bda9ef5cb707acdee9183b1683f7e27c4557136c75329232d251f58f83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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