unizdrav.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:e0:cf:55:34:95:21:7f:e8:cf:17:9d:58:a7:97:c7:fc was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unizdrav.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:e0:cf:55:34:95:21:7f:e8:cf:17:9d:58:a7:97:c7:fc
Serial Number (int): 330713001884907620413970572217313249445884
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:2a:81:1e:7b:ff:73:a5:6c:e6:40:3e:76:3d:92:5b:a9:c8:c0:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:30:0c:27:bf:af:0c:f4:87:d3:e9:df:f3:ad:e7:f0:45:bb:79:39
Fingerprint (sha256): 69:a3:67:6c:79:31:fb:ba:c3:d8:3d:b3:74:93:1a:32:d1:06:10:ea:e4:e9:5d:9d:39:6f:59:4b:9e:ce:21:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate unizdrav.cz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unizdrav.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autoconfig.unizdrav.cz
unizdrav.cz
www.unizdrav.cz

Other certificates including the domain name unizdrav.cz

(limited to 100 certificates)
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.sk
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.sk
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz
unizdrav.cz

Certificate

The complete raw certificate details for unizdrav.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330713001884907620413970572217313249445884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 21:00:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 21:00:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unizdrav.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797081875689150341212963813758032040674069199827982392387433725722850612586349982349371094599954487406341765634083942559467081351869864375723792841004092872186740893585737092875905366142594804399152239866972887899306764425111590145027062015436769884006461999471704095120608845151718033134653129552182992838335487407531980112802975756935633709241238038967291267786750564651891922510341621420957563092299850073733724394028152311216489515910140915906209062267903758186363049328903595717746717308966500067716414419590192041111795906485892242441746318876541090827140192289955311236736339653048513356075079585561217271376074578843501803284007612527544893776637742066904424320262460178608349895879970902703730261238172720097693977442055689070876012889781460292973559455240267070819877557024109106609882305593999226749150789442553142156401489395964457616890513797873676556436324529240715834741306470203606672451995902505996082204158533781469046561818663018028145927341071463796625626921179237014851944932717329242552219805201071103621512652386395680822570023383449130931101811456225536741083536794211916725132386839620867630065714537099082141535170746277781856900805539891229837889350318991189371090151978873619713263000772005068485722240711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc2a811e7bff73a56ce6403e763d925ba9c8c09c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconfig.unizdrav.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unizdrav.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unizdrav.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bc4277755000004030047304502206f6d91eeda2e0b4e5e3f3fc210d5fb4f17f34bac9e02edf1edab2c4b02a7696c022100b04162cfdc3ad853f44ddb8b8b040e8e18dc5e9a90b9af0e315193830d01b53b00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bc42777490000040300463044022028b28479f7159c319407879fc28fb1bae39c9c653f4bd9626497e4337f90694302201465bf1d4ac1adc61cc204c8d8a461fa38dd9c9f3eb9129abae43bad7c8718f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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