DV SSL/TLS Certificate for les-ve-skle.cz

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M03)

About the les-ve-skle.cz DV SSL/TLS Certificate

This certificate with serial number 09:05:f6:33:de:f4:d7:b6:6c:c2:32:f0:2d:63:f5:b3 for les-ve-skle.cz was issued on by Amazon.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for les-ve-skle.cz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 09:05:f6:33:de:f4:d7:b6:6c:c2:32:f0:2d:63:f5:b3
Serial Number (int): 11994007028757372286945119791829218739
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: d2:5b:0c:cd:69:11:a3:94:27:18:50:65:c6:8c:d7:18:7f:71:de:a3
Authority Key Identifier: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (SHA-1): 18:86:87:fe:d4:74:5f:2a:5d:3b:e1:70:ac:fa:8a:b8:9d:d0:72:47
Fingerprint (SHA-256): 2a:a8:05:8d:4b:17:1c:09:31:9e:47:36:90:f0:07:a4:be:3b:45:df:35:94:57:22:78:60:c5:40:5d:8e:c0:e8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation Information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate les-ve-skle.cz
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for les-ve-skle.cz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for les-ve-skle.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wBFIFOi4KBM6IbQpTmK
LPhSdbyfEXhEOw4uYdtBx3H3dUKmi36vSJ1ZPXqguzvqR0xYhtLZMmZWPWoy9BGw
QbIjh4Y108MSgvvPle76HnOoms0as3fq//8X0TV7CeNxkYWc45l7/2oFhq0zMq/D
Hlx7hJuy9HyGhxjoSZR55mEszDmBhzjt/UGluCSSN0MFaeTj1m923HwVH4OOiFMe
yuqymxYUDsL7gWRsWGisRT5nh0rWCggefAi4zqWaMVEy3XhSwq8738p12rB/MTXd
r32PCgEPILSS8/ZdtRNt1WKfmEEBbn/9fDoJSG/12sqYln2jFv1txIa/2k58eDDO
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11994007028757372286945119791829218739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'les-ve-skle.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30171088040939746508377801496664269125018452024962154480631540111658510552625583876389843025203898792340396991142238704246536898405194606437242003843945380992704958643856058855727976174772380293751110140071058578876987230810396743200844878412945622596911803267633427255129909712848605239447983749667907932951546440569275169380830482132785446742847993300036271682748979088136821023692384819782947251981943255619396157530546922416883280081891472756363288185567842482471676872478845841903723331571472742579552730505006989528054920585966390849166443342743396025457357101815636310900650209870422691991298328473271826173687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d25b0ccd6911a39427185065c68cd7187f71dea3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les-ve-skle.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.les-ve-skle.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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