daciapruhonice.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:f8:b1:d0:af:20:10:cb:ea:45:76:c7:5d:2e:38:dd:a0 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=daciapruhonice.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:f8:b1:d0:af:20:10:cb:ea:45:76:c7:5d:2e:38:dd:a0
Serial Number (int): 341974068200736886943831543589484432514464
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:bf:d8:ac:73:4d:8c:31:66:7b:31:c3:06:ae:1b:61:c0:16:c9:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:b6:c4:77:71:b7:79:0b:af:66:5d:1a:fe:9d:39:26:2e:d3:8e:8b
Fingerprint (sha256): 68:3e:7a:94:ee:b4:91:25:9f:bf:e2:c6:4a:5d:5a:10:3d:30:3f:a5:70:07:e9:0f:34:fd:75:3c:e9:ca:26:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate daciapruhonice.cz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for daciapruhonice.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daciapruhonice.cz
renaultpruhonice.cz
www.daciapruhonice.cz
www.renaultpruhonice.cz

Other certificates including the domain name daciapruhonice.cz

(limited to 100 certificates)
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.pyramidasro.cz
www.pyramidasro.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
www.pyramidasro.cz
www.pyramidasro.cz
daciapruhonice.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
www.pyramidasro.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
daciapruhonice.cz
www.pyramidasro.cz
daciapruhonice.cz
www.pyramidasro.cz
www.daciacentrum.cz
www.daciacentrum.cz
www.pyramidasro.cz

Certificate

The complete raw certificate details for daciapruhonice.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341974068200736886943831543589484432514464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 05:28:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 05:28:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'daciapruhonice.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 999944921588139278820779828101580479993017717934046965097454376371598227242606569200604458454028102144983117633661654294376349260729175778367365145642294257813749801371452232539135579175854461805126543251320787017334483139025893176545448485465492149504028574588838211242364460327109877687248945773331393789782359016432231505078042093802239773327297395817614325776622099603309311452364059501840442821302690165682875170423023130041192259087318584563183535857349005100741732510520728343565488006549248063541659236831503306411237087876989364674227364209280005800579706910589716986765708624256940278484967715168163905431000410569000929579578082757720183816919990833385095406955199168440151655010424618123899341069090521098121798455929827181342804963230471348513722706915699922265719791121640445078847416750390666261687382908336609238581984930843070270584824122390804734069003130224491562197041491474304247592649273917760854662378294182017436197370808940408468014336953804908714884874212011034310072183208887318647205388884893609551993389580617124013725947426647408379949792692485525919498936979767513171484601886894187816489389581039715443876666258033205167772239332262890219756484171660843526118681773144263949783617661197959066639371527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebbfd8ac734d8c31667b31c306ae1b61c016c976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daciapruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaultpruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daciapruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renaultpruhonice.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016893257ffb0000040300483046022100e80f8cc5a99f2cec3e6d6cac776107a587ce17f1c13ffcce42b12b4fa974ce65022100c5b716baf6c794270efde4b9aa8f7894abf487f98c4a6ad15a4d43b0c801fc34007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168932580160000040300473045022100cc2e37c02aada1131fcff47c33fb5fd085e346e4c2f993690d6f30c1f6420f8302205a280f4c73dd49a08c98d4612a8ab0ad9fe2d385232816353f48b918930dfa16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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