zlatnictvo-els.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ba:77:42:b7:bf:78:a2:c5:14:5c:67:dc:75:ca:70:3c:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zlatnictvo-els.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ba:77:42:b7:bf:78:a2:c5:14:5c:67:dc:75:ca:70:3c:f1
Serial Number (int): 411900188524277480564505616626024635710705
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:3b:94:68:1c:3d:a0:ab:ee:e6:23:54:f8:ea:58:eb:4b:ba:8d:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:ca:33:4a:17:5a:92:97:8c:d9:a8:43:dd:6f:43:41:50:bb:23:c5
Fingerprint (sha256): 5d:b0:66:18:91:79:c1:07:8b:ee:0b:48:5f:08:dd:bc:21:41:e2:7d:f5:ed:b3:0a:e6:bc:72:36:6d:96:5e:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zlatnictvo-els.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zlatnictvo-els.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zlatnictvo-els.sk
zlatnictvo-els.sk

Other certificates including the domain name zlatnictvo-els.sk

(limited to 100 certificates)
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk
zlatnictvo-els.sk

Certificate

The complete raw certificate details for zlatnictvo-els.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411900188524277480564505616626024635710705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 07:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 07:15:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zlatnictvo-els.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 990091248603347999357571231970462328296961841792948529489026601925153776618157358753580961826155532490568470618994911694956019143407142665560434617788220200250795819390570487902425706307883140586649238788830665539281161013855521716231317870573894752504195942690152581069082265506581676834511129339957723148133848087121961688332158828741091807077165693682972135080362734663244986011722935057684896165114007472065687595155393257052610022415883397752977998416976841624109798631576893002438849181333287027142770890419176260172855119604338428973344613725535614806530582827986547792979443173185783672511108122141050009578199314731937294755928701712549958069658988597928195093800863625568107267539648708216578838541698244169449099259112566580506118292986706219361433700290121832695968876002440282930074907344933872384236110410317095118350880566365160781068559850159917838059985335505549956926780862238910382814577078676992618534045774774145593426336949236346202737252373374392000138072349317037421653560041802909257526456719927650929455683862837543045580965379580376934539982702019850005905663634960198096715228793738479628212893980187325024514400487438972519142229057957716887823722354920309979828332914251392487307038183315571378192666907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba3b94681c3da0abeee62354f8ea58eb4bba8de9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zlatnictvo-els.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zlatnictvo-els.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016855bad23f0000040300473045022100d55f3c3bf5094c47d71cfa63dc5bb7a776785a015277f9b45bfdbc08412c6cb0022057c5108c67e2bd01a04e6877bdf369efaea9a5aac10b7af601c05b5d0795e88e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016855bad2430000040300463044022015496121f9d9ec230405cedaa6139e6110a56d7c33b4e3e4caafbaddfe2c43a702202745fb93a75ff651b7597a739cb36bbff3f94a09a92aad761fcb4d0510fcebae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00002eed503d92a753944f1a53d25da23a36fd080e3362b31f6ec035d0b86820708c6db107854ee08f66ce02677b80f8da9c3746122dadcfa28b4fc48384ae6972f39fbf5323e39a93e575dd028d0927fe7f1a6dff11cc432b6f7e0559d7fc3718d49b58a3a7f7c9ef48df666cbc94617f544e3550f0abfe304cfbbd4929dd3e44c6b27beec5e957259e559ed1e227fee3b2320cdf5307435d0fc5145e34f2c7b10b6a24a787a6ad5d509cc6b0b6e8aa1f92271f3efc52ffdbc46ee352b0c74c83a04f8f1344ba4464d1289a2855f8a1425299cae58e3019ff9c04b420094a4b9134f4a7d6d3be9cf91fa8f6eaa73278f4b22491d8b02ad957d493deed89cac084