unizdrav.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:4a:f8:71:f6:b7:db:bb:a0:ee:6b:37:c0:a0:24:1e:c1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unizdrav.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:4a:f8:71:f6:b7:db:bb:a0:ee:6b:37:c0:a0:24:1e:c1
Serial Number (int): 325409595649185486071583659930659083001537
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:21:91:e3:09:73:ac:f0:04:b1:6c:62:0d:27:74:69:c7:07:a3:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:9f:e4:a6:bf:cc:d7:04:17:da:4d:5c:91:2d:b4:7a:dc:b0:b1:73
Fingerprint (sha256): 3e:f2:34:e7:cf:81:98:b9:96:1f:99:d1:50:c3:d9:bc:3a:92:0f:da:e2:15:a9:e2:d1:b8:9c:e8:8b:51:6d:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate unizdrav.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unizdrav.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unizdrav.cz

Other certificates including the domain name unizdrav.cz

(limited to 100 certificates)
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.sk
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.sk
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz

Certificate

The complete raw certificate details for unizdrav.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmu3xcqhniKEw/2vmnStD
yIqBzTkPhNx3BKx48Nm1UYVrKWycbnabHeC/GXVpPp14c+hClHpJ8BesUf+KLvYZ
c8u6Ht1JRwKMGCfBwlQtPIJadPj5EWQshS5XwnofidbFy3Dg2Li3fFrGk5B64N8+
60D0mk/N7+214UjFTMUiigbb65dG0fUZsaz0/EXPahECQenyLStVGo0tawDouAjn
Nn9PWKQ62c1g2eSdSEkegk3N6CTFRzIyr/1jJHfxDIEyUbe2jD42NBMMrxTprG1R
d8WcFvUtH6O9Jgy6WlWLED2ZHpDVrfX95eushRnRhoIlCwEi0xxTrxOIi9sM/yXS
sNyc2Gebii7m6paRbjwPee06xJufUxXMcPfbO55y3TZftCIW/W3za2/UIQO9qHPZ
3QvRhQPNPHIijyeP/KcS+0H3/XKeCLDxsle3bx7nn/kip6zDF6u/+FI7VytxHsS+
jmek2VRLREsZUt4WOMNM2mcmZRRVfjT7fty+AUPf+lAqdfJXRqjV6nWNy+EDIHm0
rd+K44ud+DTNagf8z0I4EsYLd+xJLS0y9Dvd+etEDBbS+ChpiJxWQbIt838tCMbI
tTLLuDDcnyXJnfUbvRwUCbwjMQezUJaFGCwjGZf5yFi7KPTkzTaJgCl7qg+za0rQ
+/CqYrZl5rJGh5ka4oPr+WcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325409595649185486071583659930659083001537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 21:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 21:00:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unizdrav.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 632057074694018268754073253669901816055470109904015569575413297543633717942059076569349755249853469602172429473905133971588778982468649623082770221515925596883182706100129362860274142709296714600969981256165068504430166177901527678675434904959874435870866954358999462029448512365143981463526761891901005348506190169921249925121279671433700872461180876368439896814721758063277282559610340902548774076557807917323545779919414895380015726148661658827821241507309306506770658802831274953269382457910507052777839961235935841425956533399813196650925548348364273693102475218480677849721896465041729909982517965123874379871142985548361291217081918219409692551792831580329615136098905828399315763236411241181586319692339644167557935413815662460476827337546033238584653896999740965717777029517292925085701905901128050412852894951193120562623973464301179912899787404250811078878264790689849461246459726807949722939307833569312857241511801221451981374276512407961091642581199966172886341202631126527138638334753547555493809557021535196727373147226160027503308465624648212917443383439770622535517146378745799314882226160285061085379802429501609255429171912885781066708850610167290677198531221313357534509275368853621535400750929715980644026939751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							532191e30973acf004b16c620d277469c707a319
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unizdrav.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016549e74d01000004030047304502202023b04d1568f4a3570ac3e0589e24a53188be1cf1681453b296f2f2cab732a8022100a295e9c8b42ba8434e6a41f4da88c79da8ab8334516b91d839a333bafce59258007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016549e750d60000040300473045022100afca71c2f46080b5a888ca1190c14fa2f925c640091263b190ca37e6064c6cca022027d5e75470b22ef5850d4eae19d4554966fa05abf9e179017bc0e3c871dae21e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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