ckvt.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:15:fe:23:d6:81:ac:2e:7c:4c:ac:98:a0:8a:70:9b:87:82 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ckvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:15:fe:23:d6:81:ac:2e:7c:4c:ac:98:a0:8a:70:9b:87:82
Serial Number (int): 355932883424409487434973407518247526041474
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:a6:70:f0:98:d1:fb:ce:2a:4c:e5:51:e0:1a:09:01:05:fc:2b:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:bf:9a:08:33:2a:49:6b:00:58:0b:0e:4c:52:75:36:27:8d:a5:41
Fingerprint (sha256): 6d:21:8a:14:04:08:5a:3f:a3:79:f7:74:65:21:05:0c:f3:a3:97:d4:7a:f8:24:8f:8b:9f:9f:e9:a5:51:5f:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ckvt.cz

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ckvt.cz

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vtt.cz
ckvt.cz
ckvt.sk
ekotom.cz
istour.kovotour.cz
istourkovotour.ckvt.cz
istourviamare.ckvt.cz
kovotour.cz
mwdeployfront.ckvt.cz
ostravskepodzemi.cz
platby.chorvatsko.cz
ubytovaniostrava.eu
viamare.cz
vitkovicetours.pl
vtt.cz
webtest.ckvt.cz
www.ckvt.cz
www.ckvt.sk
www.ekotom.cz
www.kovotour.cz
www.ostravskepodzemi.cz
www.ubytovaniostrava.eu
www.viamare.cz
www.vitkovicetours.pl

Other certificates including the domain name ckvt.cz

(limited to 100 certificates)
exclusive.ckvt.cz
synology.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
mail.ckvt.cz
exclusive.ckvt.cz
istour.ckvt.cz
mail.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
istour.ckvt.cz
istour.ckvt.cz
sni.cloudflaressl.com
istour.ckvt.cz
istour.ckvt.cz
mail.ckvt.cz
mail.ckvt.cz
www.ckvt.cz
synology.ckvt.cz
control.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
mail.ckvt.cz
istour.ckvt.cz
control.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
sni.cloudflaressl.com
www.ckvt.cz
control.ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
file.synology.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
sni.cloudflaressl.com
ckvt.cz
ckvt.cz
www.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
www.ckvt.cz
mail.ckvt.cz
exclusive.ckvt.cz
exclusive.ckvt.cz
ckvt.cz
exclusive.ckvt.cz
control.ckvt.cz

Certificate

The complete raw certificate details for ckvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAgxMiymHbp196IyGWPdwu
BIfaxiOwddAt5XPgNflFGL5oCqV2yo7DqpyHojpelyQQWuANOjwnZyPnjj6Le98J
4RhrRIcQhcKEt6EjV7q5upVlOIBetxDQG/ZDxRl2fbjJlT4fZuWFIwlxykscHqxx
J+6eHmKxgoMwFdo0Hl14KglgIKFTxwhaUEOLH1/ofXaaQm38hLRYJFBUkh0dpz1z
AckJNTLp73ZBrxCmGoA0WqIFTHCXpWjj+uakTT7PswzIrHjPmkUXOxlJg2wYBY9O
f7vziFSsfJUQkRYmPEz6G0mg85BZkF8HNIUsbcA5v6tfScxdoUe3pHZ31Z673/QG
BsEoYkurtcd7ZZZ9aRtxWcxCATvR9SlHBIY9aUg/acGjq0GWBbY8pDeRlXzuSK5+
iVx3wA11Ki5p7+n0G5jUroXXT1NrJxZHoSASiVCDAYy5a7duc3Rs7VLfcyaoRazC
Chy5ozxLSJHrG9xj5T+G/zuCD4SmhAAz05mwnJ999vW9AgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355932883424409487434973407518247526041474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 10:19:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 10:19:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ckvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2974580668695480635768155332443784981900563571438698000721708604434252198781423626548561310923428130239758922755980109158133077020585281482444788819149175224276642990950076309349276600369784568666873189573519275676060302723377647204464233832037586058532675324356321625145712921496886066526104247856500759379973941170917237330292152582601482465427225142423441530436716819182351578153474978885536131431915779303534292731165341694558433590372329174924846931354150767028485708513052434216834376621374020929202048771239056410927165762070228807678431009491284427100450316920966652574472466167740285410314459755271591143394083593327853895502250642762384150719049035480675465026373054293536420630987061765617124742809251670347202412405897765928060917184702543598514466815941776817476687813430794657491547678895228187210283060067592847567593353185032095184147857129997037727837135982622851776659006341895767251131966281390130634094013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18a670f098d1fbce2a4ce551e01a090105fc2b1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (413 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckvt.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekotom.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istour.kovotour.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istourkovotour.ckvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istourviamare.ckvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kovotour.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwdeployfront.ckvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostravskepodzemi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platby.chorvatsko.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubytovaniostrava.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viamare.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitkovicetours.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.ckvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckvt.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekotom.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kovotour.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ostravskepodzemi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubytovaniostrava.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viamare.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitkovicetours.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1ff4a17c000004030047304502201fba2599b626f28a89da03401011eb11cbc5779c373a5b7c814cc73d0b95e0cf022100e296f5ee4c83d785f6bbd9d7ee01079c77433f9a416ef9d32fbc7c999ba5f3a900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1ff4a1d30000040300483046022100c22f6717161823761c50774c7ccf4aa569697ac00738f915050f7192d7c2ec2e022100f66b8245bf332ae22ab03f9127248725af96a3f544b1b60750c89cc0497a9bb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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