supersaver.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:c5:18:91:1a:eb:c9:85:f9:8c:2c:ee:4e:8e:6c:ac:89:ae was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=supersaver.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c5:18:91:1a:eb:c9:85:f9:8c:2c:ee:4e:8e:6c:ac:89:aeSerial Number (int): 415517424911432825758094909443625467021742
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cf:0a:67:41:7c:84:17:f2:24:f3:e8:32:43:08:14:89:30:cb:f8:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): da:23:b4:6b:65:33:f8:c5:60:c0:aa:a4:4b:ba:4d:c3:39:c4:87:b8
Fingerprint (sha256): 73:53:86:9f:ee:ad:71:c4:74:45:92:50:93:65:e7:da:2a:b7:c8:d5:e5:5e:5b:46:6b:4b:ee:93:7a:08:85:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate supersaver.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for supersaver.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
supersaver.cz
www.supersaver.cz
www.supersaver.cz
Other certificates including the domain name supersaver.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for supersaver.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgISBMUYkRrryYX5jCzuTo5srImuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjkwMDI3MjFaFw0y MDA1MjkwMDI3MjFaMBgxFjAUBgNVBAMTDXN1cGVyc2F2ZXIuY3owggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDSAvWmG5saeyrI4yOSXAdqJOEXedI87Zft O0HRIsEZBRCh/hg26GYgntsd8sQ7RgBpyYQtANWoFrBiqIC97+35c7NnsB5U0oyK 2PWokUg7hCBlraImyImPtJZborLJ5iALOZQqrFHmMaNVM4lFBMiqeutKbYNIsMTS 0d7zbYJCesGe4mk7MdMNbsLkyUAA+xSo2uOtZBv4B8ttvJ+LN4mjixaD5gzi3Dmq tTIY2cvM7Bgh1weKPUqy4qOmIjNQZEDI/7MUSImbYNrvC49/gy8uifybQJtppoNX kjlhQGAdh9Fi7ZH02OYeWUjv/J3Ir80IFR0s07pn12svSVvliigPEqyVck6GimI3 Of2e8ja/FTBCJtBNFEZZXuqHB0hzhmrMwl4WY3BcF8FrKRjkuoVEZj57fjH75qF8 otj8hNJJAaeUCMdE6s7GZzPnGjLAobPH1xxRyxw1mwagmltG5HVGgAO4jtoYRFXy zZanJjxJbUdfNXbEkQiqPI0PM5/F8z7XQ2UEXO/fCt0IJa8S8VeXoN19wFxxS5SP PLYm5LxgjKuMrq+VkvKc4Ewp5PuK8M+D0ANOk82dlc1ZQedrr+Mp4FdInW098eYN itZDHyu8ETDiW1k54ZL4WmwnHCt/xuMEk5ZFiw6y+fTz71I+wucUDoRU+8BWarsD yXwPQ5I/EwIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTPCmdB fIQX8iTz6DJDCBSJMMv4cjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXN1cGVyc2F2ZXIuY3qCEXd3 dy5zdXBlcnNhdmVyLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFwjo4XAQAABAMARzBFAiBKinxhdPn/Zo353vrVqrkylLxBHnj5 cErrO6fB120jNwIhAOxLszWIHndmus4uNNnuj7se5mnZ/TPO7XotAo6iVkSxAHYA b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwjo4XPwAABAMARzBF AiEA3rD8bjCEVhdaSKvGsy5AvCH9oih2WoBEotgKSKqpBUsCIF9rYxBDA2hjUuro XdqvD5A/vie3sAlefwVR2lpK4m/CMA0GCSqGSIb3DQEBCwUAA4IBAQAebC21MfXx Vuh0qg9ZvSAdT0BwMisO0xwHEwyr6holC+FWDaOCvasxCFLvbH70vSIAyXkkZRav dqaEJADPpAPgrWlp25N+D6ZZZtfnPEgAagJJr1wT9fzZ23ZBcJ0/HfUxi0fEPIYH fb0+KsaY1SKsv910TgqjEl8n/TJIE2AybTGS81stXQYzup2xkRPc8bBN99eVKvMe vNrANdapu6DJYKJJjZnFFUoly8FYay/B7SMySzQp6/n7zX3JujRnC2n4Py2IC6Jf UI0wiSeDr4vLDq9H2WN+NrQHR7KNkUz/Pdq/uq6EnnUJTX+7R/bI4Xs5buPqm8ET nE51Kg0d8Dje -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0gL1phubGnsqyOMjklwH aiThF3nSPO2X7TtB0SLBGQUQof4YNuhmIJ7bHfLEO0YAacmELQDVqBawYqiAve/t +XOzZ7AeVNKMitj1qJFIO4QgZa2iJsiJj7SWW6KyyeYgCzmUKqxR5jGjVTOJRQTI qnrrSm2DSLDE0tHe822CQnrBnuJpOzHTDW7C5MlAAPsUqNrjrWQb+AfLbbyfizeJ o4sWg+YM4tw5qrUyGNnLzOwYIdcHij1KsuKjpiIzUGRAyP+zFEiJm2Da7wuPf4Mv Lon8m0CbaaaDV5I5YUBgHYfRYu2R9NjmHllI7/ydyK/NCBUdLNO6Z9drL0lb5Yoo DxKslXJOhopiNzn9nvI2vxUwQibQTRRGWV7qhwdIc4ZqzMJeFmNwXBfBaykY5LqF RGY+e34x++ahfKLY/ITSSQGnlAjHROrOxmcz5xoywKGzx9ccUcscNZsGoJpbRuR1 RoADuI7aGERV8s2WpyY8SW1HXzV2xJEIqjyNDzOfxfM+10NlBFzv3wrdCCWvEvFX l6DdfcBccUuUjzy2JuS8YIyrjK6vlZLynOBMKeT7ivDPg9ADTpPNnZXNWUHna6/j KeBXSJ1tPfHmDYrWQx8rvBEw4ltZOeGS+FpsJxwrf8bjBJOWRYsOsvn08+9SPsLn FA6EVPvAVmq7A8l8D0OSPxMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415517424911432825758094909443625467021742 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 00:27:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 00:27:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supersaver.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856772418250171627179903897094972574663042678951789162781737927310663864499113382041918739303884056834619923443536180360230426026054937783960801191781796832499141524419992911873585673148019550625114438846757525273867737856703275598382476950083749768428019770568741908085309352892807328961224766341355006693891285269012979182560783292501461733269401131238585737278182527974027332311822345885630971435285375960356978261598201512812832154380159650368015951601087261602144740927812016361997629437002604271082783740312304779656431095709198567871542061196750984324975212284833341254208150963205180147682626219706974121480181649026448162287118553296510948734575015569072599648884360260682452945407686190116837070224172483727716613525162742283862244553869133415377845825411482148238836322740451592067016261765855016434375419902930891128751400608044504534720307706343619259460337255949846076944846845760043215310400867895064553039537510466348748999839786195193288740474484826213702283660645740445529073250089054681925877774726091903206308815423601712781572494636863009556689956683573650169438252163691286888748974716887807916322389538291408675232870865888138692254005236682877876996757056850978122162358896350137890670120170402660191543901971 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf0a67417c8417f224f3e8324308148930cbf872 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersaver.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersaver.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708e8e1701000004030047304502204a8a7c6174f9ff668df9defad5aab93294bc411e78f9704aeb3ba7c1d76d2337022100ec4bb335881e7766bace2e34d9ee8fbb1ee669d9fd33ceed7a2d028ea25644b10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001708e8e173f0000040300473045022100deb0fc6e308456175a48abc6b32e40bc21fda228765a8044a2d80a48aaa9054b02205f6b63104303686352eae85ddaaf0f903fbe27b7b0095e7f0551da5a4ae26fc2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001e6c2db531f5f156e874aa0f59bd201d4f4070322b0ed31c07130cabea1a250be1560da382bdab310852ef6c7ef4bd2200c979246516af76a6842400cfa403e0ad6969db937e0fa65966d7e73c48006a0249af5c13f5fcd9db7641709d3f1df5318b47c43c86077dbd3e2ac698d522acbfdd744e0aa3125f27fd32481360326d3192f35b2d5d0633ba9db19113dcf1b04df7d7952af31ebcdac035d6a9bba0c960a2498d99c5154a25cbc1586b2fc1ed23324b3429ebf9fbcd7dc9ba34670b69f83f2d880ba25f508d30892783af8bcb0eaf47d9637e36b40747b28d914cff3ddabfbaae849e75094d7fbb47f6c8e17b396ee3ea9bc1139c4e752a0d1df038de