skolastik.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:48:8c:c4:e1:cd:38:ef:df:c8:3e:62:8b:70:6f:63:61:0b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skolastik.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:8c:c4:e1:cd:38:ef:df:c8:3e:62:8b:70:6f:63:61:0b
Serial Number (int): 286024302402984025645308882826800348225803
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:5d:a0:29:0f:da:48:0d:7f:04:5c:56:71:7a:a7:ff:f0:10:2a:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b5:40:18:5e:73:ca:80:a4:8f:e7:50:8f:5f:af:1e:53:ff:23:4f:8d
Fingerprint (sha256): 41:38:c4:b8:b0:9e:6b:7d:a1:a8:d6:b9:84:6c:73:11:b5:42:90:a3:b4:e4:84:ca:9d:6f:09:2c:d4:46:ff:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skolastik.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skolastik.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skolastik.cz
www.skolastik.cz

Other certificates including the domain name skolastik.cz

(limited to 100 certificates)
www.mercedcapital.com
skolastik.cz
download.osmanturan.com
muji-uat.order.place
brunchycafe.com
skolastik.cz
www.skolastik.cz
skolastik.cz
codi.ditosas.com
www.skolastik.cz
demo-sso.ramp.com
jk-holkynavdavani.cz
skolastik.cz
modacenteroficial.com.br
www.woodofmetal.com
skolastik.cz
www.serravi.cat
parceiro.soulcial.com.br
l.karaokekan.jp
skolastik.cz
icredit.works
thatgame.site
negocios.mybiznez.app
links.well-beam.com
www.skolastik.cz
api.spmarketingm.com
pubhop.estore.business
learning.qooper.io
www.skolastik.cz
www.rogerdavila.com
skolastik.cz

Certificate

The complete raw certificate details for skolastik.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286024302402984025645308882826800348225803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 21:44:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 21:44:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skolastik.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663197927026029005712157635070779404347542283172701313354622289839247002764718080077819466566756081314111165689959810274593644496101219351172066810916763108623964642389140330371425425858108856809834949240453958813223302123327150691447703919853149237859608231327358305390431211348139062649737750550320449863387408718209890442245217208459952544851582348389394705406259547301680491602446395502136821564550846396291757120419669643890885485920388380957840712123936752210814389395342202574209621348473893356053778097777154931430342696507049254251230058492133028380732501602448456928400114694303594004662622784915946037889122574896509382024105471405782646798254087971078088363374723263800237607632561593952157753905495942449880124595852535725922898465680013847083713572979002827004662274800937657801304157647251793920268373664785979607629007051420447387244032230677484232067571591359751496480514049454948014149595168439273229855170108435344572861111759870632012038275572459988892372177499142210556690397376731458101228248191858064816334243671254398070848670910702978253237246734394208401895106790515093252243776298515016206727326747164725209562299572461857888967947908914864932738441071091729228964764529792348514970774058527384413696644091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							455da0290fda480d7f045c56717aa7fff0102abc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skolastik.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skolastik.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ad76b3d5e0000040300473045022100df76a19ed0945b3624d608ab71533d36a0b27877e6ffa77d2bbdc3b9e55186ed022051698e6ad504000642a62af32a1d14aadeae1092c519fce9ed44e0eb296d60e900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ad76b3f71000004030047304502204f09afe11299f67f5337458403cbec510f6d09945a9d1776b80825fb86b6c074022100efa3714f819e7543a4ef8c86b7eeacbbe371a54d80e55586475dbedf232c7527
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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