mail.dopskopl.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:9a:0d:72:b1:f0:e9:b4:3e:99:57:07:82:c5:07:06:1a was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.dopskopl.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:9a:0d:72:b1:f0:e9:b4:3e:99:57:07:82:c5:07:06:1a
Serial Number (int): 262562475833546231842017202980339463947802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:96:6c:7f:62:3a:80:04:ee:4a:3f:b1:67:75:57:94:86:0a:33:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:1b:65:10:8f:11:51:65:eb:16:c8:46:5b:f5:b8:9b:01:6f:d7:13
Fingerprint (sha256): 7c:71:a9:77:b7:f8:b3:7e:2f:19:18:06:dc:db:0a:3b:57:db:d5:6d:be:f9:27:29:f4:c7:0a:9f:c1:8e:90:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate mail.dopskopl.cz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.dopskopl.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dopskopl.cz
mail.dopskopl.cz
www.dopskopl.cz

Other certificates including the domain name dopskopl.cz

(limited to 100 certificates)
moodle.dopskopl.cz
bakalari.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz
moodle.dopskopl.cz
bakalari.dopskopl.cz
moodle.dopskopl.cz
mail.dopskopl.cz
moodle.dopskopl.cz
firmy.dopskopl.cz
firmy.dopskopl.cz
moodle.dopskopl.cz
meteostanice.dopskopl.cz
mail.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz
hades.dopskopl.cz
mail.dopskopl.cz
meteostanice.dopskopl.cz
mail.dopskopl.cz
mail.dopskopl.cz
firmy.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz
firmy.dopskopl.cz
mail.dopskopl.cz
moodle.dopskopl.cz
moodle.dopskopl.cz
firmy.dopskopl.cz
moodle.dopskopl.cz
meteostanice.dopskopl.cz
meteostanice.dopskopl.cz
hades.dopskopl.cz
mail.dopskopl.cz
bakalari.dopskopl.cz
moodle.dopskopl.cz
moodle.dopskopl.cz
firmy.dopskopl.cz
moodle.dopskopl.cz
mail.dopskopl.cz
firmy.dopskopl.cz
mail.dopskopl.cz
firmy.dopskopl.cz
hades.dopskopl.cz
mail.dopskopl.cz
moodle.dopskopl.cz
mail.dopskopl.cz
spsdplzen.cz
mail.dopskopl.cz
mail.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz
hades.dopskopl.cz
firmy.dopskopl.cz
moodle.dopskopl.cz
moodle.dopskopl.cz
mail.dopskopl.cz
moodle.dopskopl.cz
hades.dopskopl.cz
firmy.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz
moodle.dopskopl.cz
mail.dopskopl.cz
mail.dopskopl.cz
bakalari.dopskopl.cz
firmy.dopskopl.cz
bakalari.dopskopl.cz
mail.dopskopl.cz
firmy.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz
mail.dopskopl.cz
mail.dopskopl.cz
bakalari.dopskopl.cz
spsdplzen.cz
firmy.dopskopl.cz
bakalari.dopskopl.cz
firmy.dopskopl.cz
mail.dopskopl.cz
meteostanice.dopskopl.cz
firmy.dopskopl.cz

Certificate

The complete raw certificate details for mail.dopskopl.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArJhldYu/aapDhNFJV9bW
9W9jYA5UXeHXeokxp+RoZp6s0aEFAYnEo1p7DPJLDFbZGHjekQOHvtUXheiwlGBv
aI4/CT45rmUtbNQKv9co7TIEwrleC5e8qnh2cO1ybqnPOH6zaTTDkcAcOKSx41X7
7kxL7eG3pYT+APwNrZuC6m5591wuOKv2FDhVTJc1C2w0oAg9P7qfaHaYhxXXN+TF
ui3Hsna0ZFaoCvgX6xmUgGVO3V93sL6qY2nx+f5G448tAanFLdol1jMxzHmStidK
UphzocAawm7DdAur7/DcToLziN94v2wBTO55vHJYZIjxndtaHqccB/y5BXxSNulr
KtDmE1+JDgpyu1UW5uVZ/+25epNBCKv+iyPhlNf1n0s8z8tus4ie4kQiImuGhjrG
oQN4hTXwj6j3w/LJjSCyLR1qCdxTCA5bUXTzhy02zCwe8JGwMnFrQJpW3/vjzx9C
tsZ5c4FTH1JqTsJd0nFnO3eL4QDW59+CQDYAAqLbHonpn9lZlFkGAxNMPl8xoi0P
ZNq0++Dzb0N3N3lNFSoqNo/j7agpJ0Sk1iZ7VnNZhQsCKs56bcOao0G3r/qewKsL
SE0jb36T5AUs1o2FWV7IpQyU6Zc8KsWmOJ7pRYmKhUY6CRSmqSR1UhsxtTQ7NyQm
Etv71+mV1GUHfQZP9zoyxeMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262562475833546231842017202980339463947802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-11 11:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-11 11:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.dopskopl.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704127384241238142478417469574610496940437762276169655488172844829872044560585413043526230449406589102180482758409484008387944237282692959854841879278842335004581109206770443496805361754839033592694015423564918544915232186967711264302732257118481021866212493030102549589995473321333935525127107016968305962820428970741283459111667464320076932033913848952908049972352990703309539300488306483656078986430111484894916748085404866823766547958070343935778704672925492412148178847932855087828345297111411495548177340133918845831517219113885026793694071690393354324663231091328180597753199740514284700072954878552417998486718971989712515951246282289579162705612973817580158213449094873186508828656368227198912806514893309803403017039934441575763697319192982966412364539091466433245152351556849019299316087993708328735432556991762395764284846702994474982249941988958195724789912098966310216830175905254254731371728227926068596557324095685756072223714115255092552198230583354724540925717546137625006276064830084838405001523499848791693512902176823254724048742058199413060916593202834427763131457340826028628152800839295330516695540661164221291954115691278842120506787955406593344471514527975851834266236757464745756942055895719684195130459619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d966c7f623a8004ee4a3fb167755794860a33cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dopskopl.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dopskopl.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dopskopl.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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