helios.7fit.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:c9:75:57:48:2b:c4:cc:f3:fa:e5:43:93:c2:6d:ef:6a was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helios.7fit.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:c9:75:57:48:2b:c4:cc:f3:fa:e5:43:93:c2:6d:ef:6a
Serial Number (int): 277597913136737673379405230085397489250154
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:d0:10:63:2c:b8:8a:64:cd:31:37:6a:2e:7d:1c:a4:c4:4c:b2:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 08:d3:45:b9:23:09:aa:ef:f6:f8:f8:b5:e1:0e:7d:c6:73:bc:3e:7a
Fingerprint (sha256): 44:57:98:2f:84:66:01:51:1b:46:e5:8a:26:c8:f0:82:7e:b1:03:58:55:91:f5:36:7b:ee:02:cc:86:b4:44:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate helios.7fit.cz

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helios.7fit.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

helios.7fit.cz
www.7fit.eu
www.beatme.org
www.e-plk.cz
www.faveo.cz
www.halenky-kosile.cz
www.kabatybundy.cz
www.levne-tenisky.cz
www.svetrymikiny.cz
www.znackove-tenisky.cz

Other certificates including the domain name 7fit.cz

(limited to 100 certificates)
7fit.cz
helios.7fit.cz
helios.7fit.cz
helios.7fit.cz
helios.7fit.cz
www.7fit.eu
7fit.cz
helios.7fit.cz
7fit.eu

Certificate

The complete raw certificate details for helios.7fit.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277597913136737673379405230085397489250154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-09 22:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-08 22:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helios.7fit.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684990009797110533975215595008679001205433459502794316175971499834148573925582244387765092439417873677604591703463970012420815970289372090384696202033289133427658168680247525376777187359465113564145264206134569468282704373824856852513168527501626467921016694700722972479019487473466557852620261118580012879667182307657988218706088737162264658171145851232998391752809280405606500395147813588281176235668101329539455086740090934099604648704267929789046245837656677293845356513242785644727663258011604787911148785845145885783675819221895390478871311481654051717344475854827141930472040594845458327126989995687300260587519427481447095241155921305283140092426085547149390526037536936651722435510983226458200412275462470506401064209902090989773945945984153222287244555837402514120124953759887924823076180868682716190416532949410862224713427545289762814725217668731861694650897337599789992592480402068894538894279695976437103004916920020593388761097426386810294783668031497718637978855899484721618714809274071112287558691114444790494860943446992912164790417964000922942597485321282546810916416914468751482882921614509529284518207704162100611972798181414193667468970121679509467577310825219324348710116085862170000106143031799938041358121307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99d010632cb88a64cd31376a2e7d1ca4c44cb225
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helios.7fit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7fit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beatme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-plk.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faveo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halenky-kosile.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kabatybundy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levne-tenisky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.svetrymikiny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.znackove-tenisky.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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