kovarskebarvy.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:4c:2a:42:8f:10:f0:9c:e5:41:8f:10:ff:b3:0a:f9:a8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kovarskebarvy.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:4c:2a:42:8f:10:f0:9c:e5:41:8f:10:ff:b3:0a:f9:a8
Serial Number (int): 296487182342259017469522467712762823506344
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:45:91:d8:bc:4b:e8:9c:51:1f:6d:75:3e:45:3c:a2:0d:5f:8a:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:d7:19:70:84:48:71:ec:35:3d:ab:20:38:53:46:b8:28:f3:20:4d
Fingerprint (sha256): 58:df:71:f0:79:ec:3c:a2:aa:20:1a:80:c2:48:f7:46:bf:37:bc:7a:7c:8b:11:33:dd:97:5e:29:2c:46:37:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kovarskebarvy.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kovarskebarvy.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kovarskebarvy.cz
www.kovarskebarvy.cz

Other certificates including the domain name kovarskebarvy.cz

(limited to 100 certificates)
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz
kovarskebarvy.cz

Certificate

The complete raw certificate details for kovarskebarvy.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296487182342259017469522467712762823506344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 00:00:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 00:00:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kovarskebarvy.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 965763660169398011342462645042030269283370583399201526852333667763550778811904697498544277928302084970295520117284268910787419033627801516379748354787816746658775632140711235693236444567303102742629545558120959327898407327738482708929622652948607188501598450824667186116710755110320086770238746065039457854618703838117224468310708831262911774297389211968125622721369502247128481832940502087812024765946169259936864990446426428961143366576125135058197313937338909229964793380528365532390581642978095812427775906175705054269140297546915666632876505480966780494958804141765143096767445384573948395169662137104926008817212771479364699116284154965243793771516080954170744997733036601396106843359945721899607178835050582731523023350350385693347685865986951898715805319543304997109921617179967180811444664723666395227408990294373549959230495146349037849163950771558830140061277825249102466581631039069897931525556110147281082598584048570831213746010514797983246028467830020319647704759292302107526114720402340432736249685808993688375088709186612818352245560824755841886609651303218516991501491306614082393748676977205715808607970298655204211998840554175794095285947775878351368373316631274061832400320775599144694096157594162667591700996093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							414591d8bc4be89c511f6d753e453ca20d5f8a77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovarskebarvy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kovarskebarvy.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d1dd5ef96000004030046304402204358dfb441763cfe0d8673822189c9b9fde8795e936d436a9d240238a1a7dfb4022064b7cc175f4ef95d98ee51d6d3b011148f0d3b7e965c1322cf11c0d68ee0df7700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d1dd5f17e0000040300483046022100dd9bffb7b8fa8d2d894d05ea3b21e4342b5fccb40619a629e8768490a356ed5d022100cb8cd492eeecca753762081082a5d27fa1ebe18800e8a2bae9641c4d53cc2891
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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