www.autoposik.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1e:33:be:be:53:ed:22:0b:4d:66:40:6a:a2:37:88:b0:67 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.autoposik.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1e:33:be:be:53:ed:22:0b:4d:66:40:6a:a2:37:88:b0:67Serial Number (int): 271614109827404197457221096545326547382375
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:ba:da:dd:e1:a1:74:6f:62:5f:61:37:27:23:e9:a4:47:b6:12:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0d:f6:94:7e:0f:8b:2c:7a:2c:dd:42:3e:6b:e3:cc:a9:f8:6d:59:f3
Fingerprint (sha256): 67:a4:7b:c5:37:1c:19:db:da:a2:4f:b5:82:80:21:a1:f5:72:19:f3:f2:3c:55:db:32:6d:fb:89:86:74:5c:2b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.autoposik.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.autoposik.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoposik.cz
www.autoposik.cz
www.autoposik.cz
Other certificates including the domain name autoposik.cz
(limited to 100 certificates)
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
www.autoposik.cz
Certificate
The complete raw certificate details for www.autoposik.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgISAx4zvr5T7SILTWZAaqI3iLBnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTUxMDUwNDVaFw0y MDAxMTMxMDUwNDVaMBsxGTAXBgNVBAMTEHd3dy5hdXRvcG9zaWsuY3owggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/x56bcbePUFg7gaVMCFpmCOBP/tfp RzLsa3vZ1Xu3VlNEL5+v9YZTGxDjS3UjK6rBthh5mkEBh19TfTr+G1uHLqxgerDt TorU04zkHJtCjulyBV2R6aZq0mOmER8vv+2mZlbgXMmv11XZ+Ne0owDu9W3pCB/P mp5n1b8TGcH15u2KcT0ZnVeivj1QIZnn5ZVXTWNALd+2WwVIKprEn8H8OUWZ7zzS drU7fEJQdAfCDEwmdfZepahl9uRL6Ir+zbps9C463m8F1r8awKA4u2AjceUYjJ36 3MNSj2eh2Qy4fD1l9eshRqgpELgauOPBhDN3tfbfH9yED/48KhA7sW3e+zFqLPK9 QUoxgt3d5AQy0hrq8rR8H19wlYYwJAq1F531oNCzSGi1K+7Ss5ASbCvQYRROfH7n gw4lvFowfl3fhyWJdfogFX8fmEmFquo6T7Z7v9q3T4qmbZRCv4yMYErda4HQSP58 UFg1qoaYYQG0Fpc5iASH0aMwHYeUegl2/3rmmgrn2LIFtVtLgngYzL2//W00fLuy u+p6l8On4cOXUlEisG7XECz3BcfKt3oahEjo3shVQj9nRLJQ5gNmDbKIRP3P2NQA l9snsVzEJ5ltMYIu2SxKCHv4gjIe+UIhAQUoHj6Klpthc3ZYrLLWS60w5lrxUqwI ipm202l0tJr/+wIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTY utrd4aF0b2JfYTcnI+mkR7YSiDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDGF1dG9wb3Npay5jeoIQ d3d3LmF1dG9wb3Npay5jejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC AQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh 0DSmsKiqjrJzAAABbc9BmYMAAAQDAEgwRgIhAOCrwI4aVILDXCWAuKaJHm1ApRrL ES6KEl98KXKX4hbhAiEAwENAGlYOakuYoGNfRDRyshbi1v4xF1cCQy+TyLTzhpgA dwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3PQZl1AAAEAwBI MEYCIQDB7PjFNv0gCufg0KTLQDMTKv41m4nhitbIuam+2M45EQIhAOXJlgeJbLH9 Wze9SArbkH9LKFmMPKSwL3ICMV9MIRuAMA0GCSqGSIb3DQEBCwUAA4IBAQCTQQsi fN3s2e6HiYEawYqRwKC4uwtEoONAprurmu0qLdg8pKRTGuu6BFJ74jcDdQjiOFWE sBHRTCPy+2CLiw6MNpuNp0fo1+Ug2vBD7CyUzYDJIRjiQ8UEpdn2K9Ooi43I+WA7 Blq8banyZfcbPD4Ebdc7t+/et/VU+PI8osGamVh4nnLcuTudhySkmzofvamwgNM/ L3WkwO5EwZIhnCkFGTfetxwPeHHrAg+WEgQWVYBszDQWhedLOF8ZLyz6Rx015Xsw 8x2qaltSsFYZJdo+Y9NDOhbyH9W45jqkSMbfo9fVidzbVqR3ZKK8RTP14JZf6IUh zm/97jVp6hD8dyQt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv8eem3G3j1BYO4GlTAha ZgjgT/7X6Ucy7Gt72dV7t1ZTRC+fr/WGUxsQ40t1IyuqwbYYeZpBAYdfU306/htb hy6sYHqw7U6K1NOM5BybQo7pcgVdkemmatJjphEfL7/tpmZW4FzJr9dV2fjXtKMA 7vVt6Qgfz5qeZ9W/ExnB9ebtinE9GZ1Xor49UCGZ5+WVV01jQC3ftlsFSCqaxJ/B /DlFme880na1O3xCUHQHwgxMJnX2XqWoZfbkS+iK/s26bPQuOt5vBda/GsCgOLtg I3HlGIyd+tzDUo9nodkMuHw9ZfXrIUaoKRC4GrjjwYQzd7X23x/chA/+PCoQO7Ft 3vsxaizyvUFKMYLd3eQEMtIa6vK0fB9fcJWGMCQKtRed9aDQs0hotSvu0rOQEmwr 0GEUTnx+54MOJbxaMH5d34cliXX6IBV/H5hJharqOk+2e7/at0+Kpm2UQr+MjGBK 3WuB0Ej+fFBYNaqGmGEBtBaXOYgEh9GjMB2HlHoJdv965poK59iyBbVbS4J4GMy9 v/1tNHy7srvqepfDp+HDl1JRIrBu1xAs9wXHyrd6GoRI6N7IVUI/Z0SyUOYDZg2y iET9z9jUAJfbJ7FcxCeZbTGCLtksSgh7+IIyHvlCIQEFKB4+ipabYXN2WKyy1kut MOZa8VKsCIqZttNpdLSa//sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271614109827404197457221096545326547382375 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 10:50:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 10:50:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.autoposik.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782393176176718103940019308597887513510855680362748898059350303963821172223950529995305142156776675391926449761027925294083445902046640897406540361192180226576428122439991046310703904116183100139990351974859119337564663828115185541259022894438931897808276399427847015699798028635513726733414744211243825295532495367861898921327207658425029776578808959941886634278676670119041926630300164290731087856942435605099888877013531658442907424403842608699506422514462650947898907112567349143386739972831390041704718652580307863580311884514339602313424316874969472771583025598223870660074303445209636930815754760729627896289863524550509378017838308986701477524130827131399298255977096736013485642404415338350410152275146277889113376872847024827344325731499283621552028695101269976485619099364650075978428509337865056830561903654558318907049760105187728899650946805074539677135105688927455520232825515609193824897367529861863085933878710645387017404723281550796187936371690862523004835993155329242066386237323333329207751679767704884528237937784061467339278766534596728778238892425687127324625142833681478853941707417170843158229617509124488695997501503890797081767904543094424766173760779187558959961176696077034879603290670844765388307890171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8badadde1a1746f625f61372723e9a447b61288 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoposik.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoposik.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dcf4199830000040300483046022100e0abc08e1a5482c35c2580b8a6891e6d40a51acb112e8a125f7c297297e216e1022100c043401a560e6a4b98a0635f443472b216e2d6fe31175702432f93c8b4f38698007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dcf4199750000040300483046022100c1ecf8c536fd200ae7e0d0a4cb4033132afe359b89e18ad6c8b9a9bed8ce3911022100e5c99607896cb1fd5b37bd480adb907f4b28598c3ca4b02f7202315f4c211b80 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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