klerk.stable.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7f:fd:6e:7c:03:c8:51:e4:1a:bf:d2:6b:2c:56:e9:4c:e3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=klerk.stable.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7f:fd:6e:7c:03:c8:51:e4:1a:bf:d2:6b:2c:56:e9:4c:e3Serial Number (int): 304889586745146418689102654241467680771299
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 75:3d:c8:70:bb:8b:30:d1:0d:39:2f:6c:2b:bb:24:0f:0d:7c:17:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bf:e3:b4:ef:20:71:41:2d:93:58:db:c3:c4:4a:3d:b1:d4:e5:26:14
Fingerprint (sha256): 42:20:f9:20:3b:f8:a9:fe:7c:a6:68:97:2d:e9:20:49:1f:01:fd:f7:67:df:7c:d1:d8:23:c9:87:8e:2d:f2:b2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate klerk.stable.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for klerk.stable.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
img.klerk.stable.cz
klerk.stable.cz
klerk.stable.cz
Other certificates including the domain name stable.cz
(limited to 100 certificates)
*.stable.cz
mail.stable.cz
vpn.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
www.webmail.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
*.stable.cz
vpn.stable.cz
webadmin.stable.cz
metabase.adapteeshop.stable.cz
klerk.stable.cz
klerk.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
vpn.stable.cz
klerk.stable.cz
platba.stable.cz
*.stable.cz
*.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
detskydum.cz
dns.stable.cz
percona.stable.cz
*.stable.cz
zkouska-jedenact.stable.cz
vapp.cz.david.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
vpn.stable.cz
percona.stable.cz
stable.cz
www.webmail.stable.cz
stable.cz
stable.cz
stable.cz
vpn.stable.cz
vpn.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
stable.cz
cdn.stable.cz
percona.stable.cz
dns.stable.cz
vpn.stable.cz
www.fitham.cz.novyweb6.stable.cz
klerk.stable.cz
percona.stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
percona.stable.cz
vpn.stable.cz
vapp.cz.david.stable.cz
klerk.stable.cz
www.fitham.cz.novyweb6.stable.cz
slevomat.percona.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
zkouska-jedna.stable.cz
stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
detskydum.cz
detskydum.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vapp.cz.david.stable.cz
metabase.adapteeshop.stable.cz
vapp.cz.david.stable.cz
percona.stable.cz
klerk.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
klerk.stable.cz
klerk.stable.cz
vpn.stable.cz
*.stable.cz
percona.stable.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vpn.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
www.webmail.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
*.stable.cz
vpn.stable.cz
webadmin.stable.cz
metabase.adapteeshop.stable.cz
klerk.stable.cz
klerk.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
vpn.stable.cz
klerk.stable.cz
platba.stable.cz
*.stable.cz
*.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
detskydum.cz
dns.stable.cz
percona.stable.cz
*.stable.cz
zkouska-jedenact.stable.cz
vapp.cz.david.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
vpn.stable.cz
percona.stable.cz
stable.cz
www.webmail.stable.cz
stable.cz
stable.cz
stable.cz
vpn.stable.cz
vpn.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
stable.cz
cdn.stable.cz
percona.stable.cz
dns.stable.cz
vpn.stable.cz
www.fitham.cz.novyweb6.stable.cz
klerk.stable.cz
percona.stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
percona.stable.cz
vpn.stable.cz
vapp.cz.david.stable.cz
klerk.stable.cz
www.fitham.cz.novyweb6.stable.cz
slevomat.percona.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
zkouska-jedna.stable.cz
stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
detskydum.cz
detskydum.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vapp.cz.david.stable.cz
metabase.adapteeshop.stable.cz
vapp.cz.david.stable.cz
percona.stable.cz
klerk.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
klerk.stable.cz
klerk.stable.cz
vpn.stable.cz
*.stable.cz
percona.stable.cz
vpn.stable.cz
vpn.stable.cz
Certificate
The complete raw certificate details for klerk.stable.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISA3/9bnwDyFHkGr/SayxW6UzjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDIyMjEyNDNaFw0y MDA1MDIyMjEyNDNaMBoxGDAWBgNVBAMTD2tsZXJrLnN0YWJsZS5jejCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALlbgYPAZ2YxPeXDcXgOrcASModCfho2 B7EBVCMG91dp3Wly+UF9fYXPI1W4p42GYj6kxDScyahy3ZVFbmKjeFw8+aOyRpHp RJ1X5jY8LTxxjOPHUyK1byWUBb9tjEpkAdAnJxsx2mb5l2R5qzE+OjAOi1rBZhhB 2CYRHkHi+E/a0McpjN4EfEvviBNh5GSBPcVetaas46QNjeRR38sqWwWQegPA/6xO 8Qnz6dTp8Ur1dGL+2cVrwlBxInroNbu/PdU7xFLwUOdYSmhfaktcAi1QJvGO+2d5 mORwWTq5gC5Rj/4aykGWZTMEDATUU+KusFQ6LbwZ3hMXkwpN77JaB5pWxoJNHxAE kO+cwETRgN41vyhD2areuXpoqph0bQqN451joIFG0bHW5gRA8EEcWa/oUaXAF/fn yPmKRUFL65I932XEzuLGloAG8V0BqEU3S959ASzAGUFuztoznlvbRJD6Bo69RBp5 XTaSCfcM0j5nO70BGd5h9vuFZGUoVEbERX689JUpJBk0tyM85FsDfvYZPHUbgCfF e9hsZmU/eRP9/ic6GrO9guWik7T1dm6VWkedEd6/ItlNQnQGSePUneSpQwjIG35o 3Dqse0AV7Jig7twsRx+8lgBlDA4JYxBnxYg7cSEasZzFeQvrzH75eJAFgw2KhP9Z munb6VoQpCVtAgMBAAGjggJ5MIICdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHU9 yHC7izDRDTkvbCu7JA8NfBcxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoITaW1nLmtsZXJrLnN0YWJs ZS5jeoIPa2xlcmsuc3RhYmxlLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAXqdz+d9WwOe1Nkh90EngMnqR mgyEoRIShBh1loFxRVgAAAFwCC18YAAABAMARjBEAiAm9WN2PdTKc3NjtP7tJqiB Pznz9jiTzqwB6nIJg0wFPAIgez3izb6mkRXaWnRvmCzF7dIYwo9by4HAj5FSWI3q ObQAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXAILXynAAAE AwBIMEYCIQCIxuGTRaPZjQNDKetC/fkPhXU2VqsRLY/BeXxzxvgENwIhANeBynSB ucPEhYqoor53cF5JElYsMjunROax8wWZIgp4MA0GCSqGSIb3DQEBCwUAA4IBAQBM 2USxhSSC2L+NeWz2+U+IDWS/jBzOv3sVmHY2+6VmVw9Les/Q/dbA+YJO3Rbu0xJl 8JvjWMgzbmcli3kxc+EK2oetq3JyF5NXB+eWSb8B9+ChjlSVYPc7tLoQwZ4LFuMl LJ66HMypOZPdxc2ALssLYV2AfLTHQRmrCm3SwtkKgfixJJszpBisDqZDaaEskVLC hhRyV2DLYshaoDjafdQuABE9Hb5E9cJEozHejs6U3DZcJpxW2aZoUsNixXKNhMeF 0oXBOi2Z2NDVwUM42kpPrYg0wNqnthIbPsfw7LhO8ZWXkoTBdJRAD3rWdflMxnAY L9ugx74MsToqDb+sla1y -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuVuBg8BnZjE95cNxeA6t wBIyh0J+GjYHsQFUIwb3V2ndaXL5QX19hc8jVbinjYZiPqTENJzJqHLdlUVuYqN4 XDz5o7JGkelEnVfmNjwtPHGM48dTIrVvJZQFv22MSmQB0CcnGzHaZvmXZHmrMT46 MA6LWsFmGEHYJhEeQeL4T9rQxymM3gR8S++IE2HkZIE9xV61pqzjpA2N5FHfyypb BZB6A8D/rE7xCfPp1OnxSvV0Yv7ZxWvCUHEieug1u7891TvEUvBQ51hKaF9qS1wC LVAm8Y77Z3mY5HBZOrmALlGP/hrKQZZlMwQMBNRT4q6wVDotvBneExeTCk3vsloH mlbGgk0fEASQ75zARNGA3jW/KEPZqt65emiqmHRtCo3jnWOggUbRsdbmBEDwQRxZ r+hRpcAX9+fI+YpFQUvrkj3fZcTO4saWgAbxXQGoRTdL3n0BLMAZQW7O2jOeW9tE kPoGjr1EGnldNpIJ9wzSPmc7vQEZ3mH2+4VkZShURsRFfrz0lSkkGTS3IzzkWwN+ 9hk8dRuAJ8V72GxmZT95E/3+Jzoas72C5aKTtPV2bpVaR50R3r8i2U1CdAZJ49Sd 5KlDCMgbfmjcOqx7QBXsmKDu3CxHH7yWAGUMDgljEGfFiDtxIRqxnMV5C+vMfvl4 kAWDDYqE/1ma6dvpWhCkJW0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304889586745146418689102654241467680771299 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 22:12:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 22:12:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klerk.stable.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756192400903745460417523540436810011396974336269599262641126048708122687246303813234767313947471404824098779629468413418908913225826548195656418259735551204077180635748336548135030033258160942225316561662384819088946089750416347199848041604379710803525637465088112931006027839719984034960185368621022190835590093775376192055057565117722850230505748062196007940498285186324194766358471949164063490904512818983716003927685283636729544711952968212901719201748037170977902789436879756703021930165786802882541185545311332446257931707868216128620245144906975820968026400607724900321427823855204317750307910484866049557837149677545911166269164575751037528091260177393439997213213736936430325338834997481662123393107278156382918060346161019241198202384535861875375748839542022298385182266460646292943602379350837962183399638248834618026712293586177013291790029609948374195528166876849427753010127906747812609559965795616918639588432045856368746895047464650944528894467067259136339418977868038832260342410345526931426554893378438995132774827149993289595388357460298060069880290565912546495660869627095992193469804122934254205361216723849197673476458807002631642298631808493424536233609712591326911105061455789236726445647817648132879051662701 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 753dc870bb8b30d10d392f6c2bbb240f0d7c1731 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.klerk.stable.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klerk.stable.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170082d7c600000040300463044022026f563763dd4ca737363b4feed26a8813f39f3f63893ceac01ea7209834c053c02207b3de2cdbea69115da5a746f982cc5edd218c28f5bcb81c08f9152588dea39b400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170082d7ca7000004030048304602210088c6e19345a3d98d034329eb42fdf90f85753656ab112d8fc1797c73c6f80437022100d781ca7481b9c3c4858aa8a2be77705e4912562c323ba744e6b1f30599220a78 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004cd944b1852482d8bf8d796cf6f94f880d64bf8c1ccebf7b15987636fba566570f4b7acfd0fdd6c0f9824edd16eed31265f09be358c8336e67258b793173e10ada87adab727217935707e79649bf01f7e0a18e549560f73bb4ba10c19e0b16e3252c9eba1ccca93993ddc5cd802ecb0b615d807cb4c74119ab0a6dd2c2d90a81f8b1249b33a418ac0ea64369a12c9152c28614725760cb62c85aa038da7dd42e00113d1dbe44f5c244a331de8ece94dc365c269c56d9a66852c362c5728d84c785d285c13a2d99d8d0d5c14338da4a4fad8834c0daa7b6121b3ec7f0ecb84ef195979284c17494400f7ad675f94cc670182fdba0c7be0cb13a2a0dbfac95ad72