www.autoad.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4c:4f:6a:58:bb:a4:46:5c:c2:80:d1:d0:b0:a8:7c:dd:01 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.autoad.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4c:4f:6a:58:bb:a4:46:5c:c2:80:d1:d0:b0:a8:7c:dd:01Serial Number (int): 287303878876124628324754362919520499981569
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dd:5d:73:c6:19:de:3a:84:2c:f9:7c:10:05:44:2f:56:9d:a0:f9:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:39:03:55:cd:32:55:88:4c:af:b6:03:aa:41:83:2d:e3:ba:79:07
Fingerprint (sha256): 6e:31:e7:5a:9b:a4:14:a3:1b:17:67:46:dd:32:2d:e4:56:45:64:e8:7f:f4:65:63:57:e1:bc:0d:1e:dd:0c:a7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.autoad.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.autoad.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autoad.cz
www.autoad.cz
www.autoad.cz
Other certificates including the domain name autoad.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.autoad.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISA0xPali7pEZcwoDR0LCofN0BMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTcxNTUwMjlaFw0y MDAxMTUxNTUwMjlaMBgxFjAUBgNVBAMTDXd3dy5hdXRvYWQuY3owggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/Gwr0oFiB4ia0xAN6UedNAnP3HgCT3BpD s+xRZnwoy73Kk1IEG6NYSkOu7PD2Wr5bzXGwE8Rcd8ncWPMks16QxZUuro/p67l5 LQPJjDX1ugjHx+y0EaSKQ/jguQimI/btTLi874SdVqVfXLXC34Jsqe/znIueYA9R /HMj/zqOg6kJJyyIxTPsVDXbLVDYP3BeeWnBSpV8bbwfdrS9amW3ytdlxEsVnnDw jVSyaeSSg82RIUwURrTZCJwq0vb2ixBcoVMv8fg4/bXSGl0Gr4oX1hiMlG3/tDT4 pbdsnyf73uCAtqs3amHV+LPT+uovWH0d3TK81OVZQYIOUYbrLb8e6PsENInjRUAh g0p624j9sDdG4h1XYNfFBlDOi5yZN9QyK2Rei7hUs13EkLdVF0uSI4xW4Tn+Mup2 fYEGlVvQ7sOwrw1sgCqAXMoOiGL2AwxvgBsU+guOz/B1orx7R+EWSI2njJzimBi2 ARQrLRbvfzNZdW75fwxv6yey9APombJvOiIOMjxMThZQ6HxQJPv9fTHjiTZirZnR 7CgJvGf1/Jp9MXSe0DIPoXUmPXY9bEPeCAOfJ3mcI+MknCPwqwDJyIzhehg2c1UE sPlla3iGGO56G4Fw1Ukyq2ujqwdcwRXRfHDgy1CXOJYomdb70lD7eer4g9sNAfXs KewzlFEG7QIDAQABo4ICbTCCAmkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTdXXPG Gd46hCz5fBAFRC9WnaD5wjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCMGA1UdEQQcMBqCCWF1dG9hZC5jeoINd3d3LmF1 dG9hZC5jejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4 AAABbdqguQsAAAQDAEcwRQIhAJBpr4vchSjFkwY+7I18zKjusR2BGd4Wg6ZyYKoa WvcVAiBVeciUfon90842/3Ix9Q5vGPzFaE2kcq/MjAcBV56sVwB2AF6nc/nfVsDn tTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbdqgvQkAAAQDAEcwRQIhAOCk/4KE 0rsY2i4ur9fUvvtZe6koSRoux8CkgLuaG5AwAiBVDNDHt183IE30sbDOcToFYEXh v5XACzOQcqAlUCWKfDANBgkqhkiG9w0BAQsFAAOCAQEAYWMmIS1vCxarj5qNIT6+ 46EpMTCVmV8Yx9nE98jfF0J9OzLsPvdhV+4tz3wMlvtAHv+sXRofRNQ+DrebetiA /cXbnyV3mRqNPof2QNNc6Di7H5ykUfONLKN9iOwhheUGS4Chnp6KFJ0P1+SHVJGR JsdOiGLvK6ObSFgG3XgOfkBTm8TuE28ZXQSg/UsuF6KnOjz70Ux1Itbb/QGIZu6t 78fF/0zjaZLexo8T8mkeZOVdq6jZBx3f5gpL5l/2Zn26P+vXUtFA+cQkXynVcjpV jVUkEzbpsaFSMHJlzaqHcLE2x2iDO8x9uUTJEV5Zljmq+xBy6Np5aK60hg3pobQQ qQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvxsK9KBYgeImtMQDelHn TQJz9x4Ak9waQ7PsUWZ8KMu9ypNSBBujWEpDruzw9lq+W81xsBPEXHfJ3FjzJLNe kMWVLq6P6eu5eS0DyYw19boIx8fstBGkikP44LkIpiP27Uy4vO+EnValX1y1wt+C bKnv85yLnmAPUfxzI/86joOpCScsiMUz7FQ12y1Q2D9wXnlpwUqVfG28H3a0vWpl t8rXZcRLFZ5w8I1UsmnkkoPNkSFMFEa02QicKtL29osQXKFTL/H4OP210hpdBq+K F9YYjJRt/7Q0+KW3bJ8n+97ggLarN2ph1fiz0/rqL1h9Hd0yvNTlWUGCDlGG6y2/ Huj7BDSJ40VAIYNKetuI/bA3RuIdV2DXxQZQzoucmTfUMitkXou4VLNdxJC3VRdL kiOMVuE5/jLqdn2BBpVb0O7DsK8NbIAqgFzKDohi9gMMb4AbFPoLjs/wdaK8e0fh FkiNp4yc4pgYtgEUKy0W738zWXVu+X8Mb+snsvQD6JmybzoiDjI8TE4WUOh8UCT7 /X0x44k2Yq2Z0ewoCbxn9fyafTF0ntAyD6F1Jj12PWxD3ggDnyd5nCPjJJwj8KsA yciM4XoYNnNVBLD5ZWt4hhjuehuBcNVJMqtro6sHXMEV0Xxw4MtQlziWKJnW+9JQ +3nq+IPbDQH17CnsM5RRBu0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287303878876124628324754362919520499981569 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 15:50:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 15:50:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.autoad.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779642973941172532651442488715523282948195060291909529546316997666519558226351651874768173528724437882701028332013639343710725999600386526899698039928449281932124903587063828885301111316009641660693266928798160035692767002198487952101916285873885313300208598189794495485407242000655367647484741287519355979901636007165340907502831448596581556409677238253953163850256118545569601863563736242441647848210189386159960296122621310745315355240571758589009836994078487430525957649622378970867161317851638101806304235321495857196848471264443786108553793090741397003735882913676633964019262004565303883704616462848802031893082115731769246806983863915851193584519761268011004013246003241371494656992369586735839416367183328103451402077003184998962395296621767969053903431196093566225333681094606365653620143357385326284537211795496774330207967095821772720829693170068493260877328514357850157782900537372806808885189417998275036526281410083151661559210451857086945067938841852105333459616280060349886262851625817296790108682673150237534039408885869507722546104354075570645511359101675322639737583290149495369657887165771946296010992987180623543328088134913329191679566305854903998789994379100788627482968514716863735888576524718233266500470509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd5d73c619de3a842cf97c1005442f569da0f9c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoad.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoad.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ddaa0b90b00000403004730450221009069af8bdc8528c593063eec8d7ccca8eeb11d8119de1683a67260aa1a5af71502205579c8947e89fdd3ce36ff7231f50e6f18fcc5684da472afcc8c0701579eac570076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ddaa0bd090000040300473045022100e0a4ff8284d2bb18da2e2eafd7d4befb597ba928491a2ec7c0a480bb9a1b90300220550cd0c7b75f37204df4b1b0ce713a056045e1bf95c00b339072a02550258a7c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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