nostavebni.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f3:ef:22:b3:97:a0:c5:b0:aa:2a:71:89:fa:5d:09:ab:04 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nostavebni.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f3:ef:22:b3:97:a0:c5:b0:aa:2a:71:89:fa:5d:09:ab:04Serial Number (int): 344343338628719099826771414048844894808836
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: da:d8:e2:99:01:96:d6:f0:f7:b9:1d:dd:33:c5:04:52:31:bd:08:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7b:d5:48:08:6d:96:2f:e8:93:42:d8:f4:73:cc:a7:f8:38:a7:0a:7a
Fingerprint (sha256): 7d:37:bd:67:9b:aa:7d:c8:7e:23:89:08:d3:aa:93:9f:5d:1d:5d:0b:3e:65:f5:72:f4:1e:4f:2d:d4:e3:51:37
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate nostavebni.cz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nostavebni.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nostavebni.cz
www.nostavebni.cz
www.nostavebni.cz
Other certificates including the domain name nostavebni.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for nostavebni.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgISA/PvIrOXoMWwqipxifpdCasEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTMwNzM4NTVaFw0x OTA4MTEwNzM4NTVaMBgxFjAUBgNVBAMTDW5vc3RhdmVibmkuY3owggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDKilzeG79u9xqMHWjqfUwMpNs6MHnwqmiQ 61yXrN181nD/XqXlistZ3wTnFgTLZKfxLmjBOG4EZqrsIrtZSVpCjctNj5sYJQ7T uv85MHIn3b2v63Du2GrGm0ldd3QfoYaPsUIqOeTWXgn2/qRqFBlmHXI4fFdZMthH GiuCtZU/gOc5F911tiGgLsGy0mUVzklqvk7tzm6d+F857NVXMX88yxe3lskh31+D SO/mmJU8He1sI1EefKS+AU/EUTEdH/3ei7Jg25ELUWZX75oHDljAIneCsz03NAQd h6TilXDq6Anpfe82j+ens5oQeNgGu+a/gftwaDHbTrexrhV10mBKFpOdGwxGLHSz m25mXgD5rOau3m6irpdUoLyGmeKlSRt3yR8FQF/UJT061FhsObJQOXUeRSaYXfG2 QYxooISgE6zHlLaweCgS2sXjlR0HF7HeUWuG83TL1wfQvGn8MN7WiQtN9D1dFBST /4V50zBcRI63mpfXryA5gjpJJe7pcFP90ZIlJBaHadZrEqqc+ektHN3qqzxl/z9p SZV1q4g4d0rClY2zdFt3s2/E7Lqb69Zd1X9IH/0v3QUtbWF4n4NzawvnxCoydWyE gvTBdH3YavRs2/JLgvREub4N+t6tHenQNr1UX8ummLWDxBWax83ynukaWVqZrJvd 68DSA6Ay+QIDAQABo4ICdDCCAnAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTa2OKZ AZbW8Pe5Hd0zxQRSMb0IjDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDW5vc3RhdmVibmkuY3qCEXd3 dy5ub3N0YXZlYm5pLmN6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm OLHHaFRL2I0AAAFqsFhBawAABAMARjBEAiBz1hIHf23q3RSQ0cE3eeUsi4YiEbDl a1191gv0kQhpsAIgDz9KIXSNB4fsn6o17NDoQ/UIruaiYjvx1nl1u2z3JBwAdgDi aUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWqwWEM6AAAEAwBHMEUC IQCjgBs2w7Pd7aP9b7kqCF9NT2yicpCKC3BtCbSV0nIcSwIgb1mobwKlXD40beol HinZtlwMIY0qNVN9H09J3oTd5oowDQYJKoZIhvcNAQELBQADggEBAEu5qPF6UDbC riZu8WsWyp0TCoaU4sni0oQjpF9uVOh/CxCJBnuCoTXib/vhvCV29DUhnzlAFpm8 mwGG6L7C288RHXw96vs5aJBx9xhQYBuscL894RFWwkanao1esG6xQZwccTPtQxkS FmrBVnpOwW+YP+TjzkxycbCjVWtDHWsfAlQqOJ4bekkZR0nveC5jcVpuZbrbX5Ft ocWORDTuNwW/Gmj6sfBrlmBZQ531z3PvFYdV5nxPsRbAC9Ktn7dHyCPaojIO20hf 4VwFagC+wDGuk8QIB21NNzieSikWNwOdib/mgFSR8Hrz5F8fkvbcxsc//t4+29uK ckaf2i/xBzQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyopc3hu/bvcajB1o6n1M DKTbOjB58KpokOtcl6zdfNZw/16l5YrLWd8E5xYEy2Sn8S5owThuBGaq7CK7WUla Qo3LTY+bGCUO07r/OTByJ929r+tw7thqxptJXXd0H6GGj7FCKjnk1l4J9v6kahQZ Zh1yOHxXWTLYRxorgrWVP4DnORfddbYhoC7BstJlFc5Jar5O7c5unfhfOezVVzF/ PMsXt5bJId9fg0jv5piVPB3tbCNRHnykvgFPxFExHR/93ouyYNuRC1FmV++aBw5Y wCJ3grM9NzQEHYek4pVw6ugJ6X3vNo/np7OaEHjYBrvmv4H7cGgx2063sa4VddJg ShaTnRsMRix0s5tuZl4A+azmrt5uoq6XVKC8hpnipUkbd8kfBUBf1CU9OtRYbDmy UDl1HkUmmF3xtkGMaKCEoBOsx5S2sHgoEtrF45UdBxex3lFrhvN0y9cH0Lxp/DDe 1okLTfQ9XRQUk/+FedMwXESOt5qX168gOYI6SSXu6XBT/dGSJSQWh2nWaxKqnPnp LRzd6qs8Zf8/aUmVdauIOHdKwpWNs3Rbd7NvxOy6m+vWXdV/SB/9L90FLW1heJ+D c2sL58QqMnVshIL0wXR92Gr0bNvyS4L0RLm+DfrerR3p0Da9VF/Lppi1g8QVmsfN 8p7pGllamayb3evA0gOgMvkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344343338628719099826771414048844894808836 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 07:38:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 07:38:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nostavebni.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826293065919034838579299465406299746214952414871235571626725744551123257914453161992906894060353430079793228501582691493612093656280877163433614014076568504160813000884878278732145363094537871238760623753867132206239064495277944095181388744203358282529276628409482459815551363794385263905019416662249502743881014654260816580002625041730596381588725024905582157130292220053477713825978977004702474884232183253897875095771770538611116849797029399383576640183082030164567802532225704768569966796269246956874940809346354386959265401562692200085952078370663217032136485377649876591725667284644790995280383861811785477181291041569414905845787333251041147451412283755741194298433608336292499606367826788001690468836648484729742749905388373366240647375014504703662653963818164001059054287109831750497400805109883031313775947869172586513345515175600253029053185507669642006965202915627297006104587650217314185963598824648604011871449029374912146931001579136915604053841248926844491926567887288397834451469719633252730237297848041906153146353385190525350016420733102152145693994015943786057933597965827098316177115283698508559904197922837923414612418529271558558675686862739082003829402508001924816175856878390907307072274151319566619684909817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dad8e2990196d6f0f7b91ddd33c5045231bd088c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nostavebni.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nostavebni.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab058416b0000040300463044022073d612077f6deadd1490d1c13779e52c8b862211b0e56b5d7dd60bf4910869b002200f3f4a21748d0787ec9faa35ecd0e843f508aee6a2623bf1d67975bb6cf7241c007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ab058433a0000040300473045022100a3801b36c3b3ddeda3fd6fb92a085f4d4f6ca272908a0b706d09b495d2721c4b02206f59a86f02a55c3e346dea251e29d9b65c0c218d2a35537d1f4f49de84dde68a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004bb9a8f17a5036c2ae266ef16b16ca9d130a8694e2c9e2d28423a45f6e54e87f0b1089067b82a135e26ffbe1bc2576f435219f39401699bc9b0186e8bec2dbcf111d7c3deafb39689071f71850601bac70bf3de11156c246a76a8d5eb06eb1419c1c7133ed431912166ac1567a4ec16f983fe4e3ce4c7271b0a3556b431d6b1f02542a389e1b7a49194749ef782e63715a6e65badb5f916da1c58e4434ee3705bf1a68fab1f06b966059439df5cf73ef158755e67c4fb116c00bd2ad9fb747c823daa2320edb485fe15c056a00bec031ae93c408076d4d37389e4a291637039d89bfe6805491f07af3e45f1f92f6dcc6c73ffede3edbdb8a72469fda2ff10734