tmobile-spolecenska-odpovednost.prob-prod.glow.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:00:c0:f1:31:7e:84:0c:30:a6:f8:3f:27:d6:02:e2:88:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tmobile-spolecenska-odpovednost.prob-prod.glow.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:c0:f1:31:7e:84:0c:30:a6:f8:3f:27:d6:02:e2:88:a7
Serial Number (int): 261593321917876036494816754301634592540839
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:f4:87:69:96:97:57:0c:8d:0e:d9:df:36:d9:04:14:7a:cc:98:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:df:b3:dd:e7:dd:d3:ba:c5:ef:7d:57:7b:2a:5c:89:58:71:9b:f2
Fingerprint (sha256): 4b:f1:2e:5c:b9:93:dd:01:ad:ca:70:a4:39:36:53:36:a9:84:2b:65:5c:be:c6:41:94:ab:21:9a:6e:55:81:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tmobile-spolecenska-odpovednost.prob-prod.glow.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tmobile-spolecenska-odpovednost.prob-prod.glow.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tmobile-spolecenska-odpovednost.prob-prod.glow.cz

Other certificates including the domain name glow.cz

(limited to 100 certificates)
hamu.prob-amu.glow.cz
*.glow.cz
ranec.glow.cz
majak.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
t.glow.cz
webmail.glow.cz
oko2.glow.cz
www.glow.cz
www.glow.cz
reader.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
famu.prob-amu.glow.cz
doosancms.online.rev-doosan.glow.cz
webmail.glow.cz
reader.glow.cz
www.glow.cz
altmail.glow.cz
2itwiki.glow.cz
git.glow.cz
adastracorp.com
git.glow.cz
mail.glow.cz
altmail.glow.cz
adastra-web-sk.prob-prod.glow.cz
amu.prob-amu.glow.cz
mail.glow.cz
ranec.glow.cz
ranec.glow.cz
webmail.glow.cz
reader.glow.cz
jabber.glow.cz
adastra-web-sk.prob-prod.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
mail.glow.cz
mail.glow.cz
ranec.glow.cz
www.glow.cz
altmail.glow.cz
sekac.glow.cz
altmail.glow.cz
www.glow.cz
www.glow.cz
t.glow.cz
www.glow.cz
adastra-web-sk.prob-prod.glow.cz
tmobile-spolecenska-odpovednost.prob-prod.glow.cz
sekac.glow.cz
webmail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
ranec.glow.cz
amu.prob-amu.glow.cz
webmail.glow.cz
2itwiki.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
sekac.glow.cz
doosancms.online.rev-doosan.glow.cz
altmail.glow.cz
www.glow.cz
mail.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
*.glow.cz
obrik.glow.cz
majak.glow.cz
hamu.prob-amu.glow.cz
altmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
w.glow.cz
obrik.glow.cz
webmail.glow.cz
webmail.glow.cz
webmail.glow.cz
www.glow.cz
hamu.prob-amu.glow.cz
www.glow.cz
webmail.glow.cz
adastracorp.com
reader.glow.cz
sekac.glow.cz
mail.glow.cz
www.glow.cz
t.glow.cz
reader.glow.cz
www.glow.cz
majak.glow.cz
obrik.glow.cz
ranec.glow.cz
dev.glow.cz
adastra-web-sk.prob-prod.glow.cz

Certificate

The complete raw certificate details for tmobile-spolecenska-odpovednost.prob-prod.glow.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261593321917876036494816754301634592540839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 08:29:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 08:29:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tmobile-spolecenska-odpovednost.prob-prod.glow.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747765377070981215941854361919771725912505565218142793264679901152692945889724992079300158790520443864235262731824756468249341777615006278191064879517882013973275610130410471708904671928188104785102283967120622927880746276150943365043774809281363200490198903395996503780874875554867282494563252384583863315467000128685538497885330679007994545366831701899719387113005942881645202867557478351222969787296489819254792247746735455565956757999690911878980833512078969563441866230006685812427910569217533527632753938629042866828685617431665918172829232155343951355268297074061594205350928002776701671043064074029294545261145932500874142252950654381408455189329642720625754949140958788257526488588353443252232687726679819550307852851132713667192248268945389645451268825906542426372013206100717516224734804553292835668832918730065377872012652270845603747160299240745706120565642774725868320199351299165221088677196320919299344396907637362231662401600053584054132098362425162907087352120504792603735774494232956976373552709540527466688227053596415645191352866349042964883277616064620401147953377893289550675241855652663875973318274615848574934389862623448505824415633988221698757159681702799233334554324524038490965702879998580521534696409171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38f487699697570c8d0ed9df36d904147acc988b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmobile-spolecenska-odpovednost.prob-prod.glow.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ce1dbe4d400000403004630440220484fda897610f63d0e892d4c6cd6cf8bff27abd32ca4f73ca6a5dc4eb6f1052c0220482ee875d1ec712959213562863c8057de6a0785a8c45894b33cb30c4eeff47d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce1dbe4f40000040300473045022100e69b435996a626f3e0b7314dfb9def13bb6e649b289e3843654d6ee2183720840220799eb45825bfa5d02459b615e9c8e8fcd16d63d586a0c8d248122a34380a9db4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00098346800c786cba6c54eaad6c6c974a0716b99f42ab97db337cb351a284be733d261f43dde92b0dabd9a49f93e95bb61b1ea2acda36891c9cd28b69da6caefe4f55516dd25ca6a1b609d3cff48b377dc966c6ef1fe9793ff7d76d8661ac332c3802d1374bb198f0b9f849a865d59c80635609210084fc0e7ffb4b4ca7bb69d2369afc7e4f44e41a2044cae6844a34c5080cd66bb96f8e884429b46a7de3580c5550cae1df7faa73b13f5f3c655dd55aad16f2c21cd85c4a842a39028b7dc639e9fa99b890361809a3ef11906cd74ee359ed53341031a088f239775fec3c3f196aeb5f945ebba010e681c511b64948af322a463dfac4447e976d0eb9d2282866