test.equestrians.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cc:52:3a:58:46:08:93:f5:d0:6c:73:3d:de:6d:78:2f:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test.equestrians.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cc:52:3a:58:46:08:93:f5:d0:6c:73:3d:de:6d:78:2f:d6
Serial Number (int): 330863760286425015858324766149552064966614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:ed:1f:80:91:b5:78:45:21:58:d6:7a:7c:28:da:df:e0:b8:62:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:82:73:4f:6a:e6:69:42:82:16:4a:ce:d1:7c:fe:0c:90:55:2d:c4
Fingerprint (sha256): 81:86:4f:7c:ca:7d:0d:e4:29:ff:85:c8:51:6d:eb:b8:7d:35:85:bf:ef:2d:11:aa:6e:f1:4b:a3:54:9c:32:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate test.equestrians.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.equestrians.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.equestrians.cz

Other certificates including the domain name equestrians.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for test.equestrians.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISA8xSOlhGCJP10GxzPd5teC/WMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDIwNDQ3MjRaFw0y
MDA1MDIwNDQ3MjRaMB4xHDAaBgNVBAMTE3Rlc3QuZXF1ZXN0cmlhbnMuY3owggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+NiCMvRy/j0RPosa8GoQxOwoF
TfT8vJUymTwUH5ztEnJqRsuuyuz1iHfEyFtkVASbDiwdQkMSZzq/p/vk8N2Dmgok
BMDcAKA9YYwA7UkddnjkXKl/J8eLYFgPJo+Q+gp1zu9k2QN33XtFRUnWBS3v7/0M
dv1jHnMmbOI/1ZF5CQG0S9kD3SJTHP5M+Ni3yratg91F3BkOn5h0F1GKyAdwt7r5
Ta5wRbK6FLwJKJ6KgT7orxUvkO7rwPatEmtmK5dyUffLAV/orQQkyzAZrYBxYxvx
DSenoF8p/0h+9bhp1Radwy3jUBPMoiK09I9Aa/MqszDeDxrzaHxcLlqszwQbtnbB
cE4/a6dV9XmFntKpAi0iiZn82Sv86LMeNuqC8CyKmwsf6yG22HSye+H5tcAOp2Vt
uaKnR1t6s/2ryAG0T9eYs03DdN3OBPoTEOSrKosdOwhIgl7IUMm0dp1NV5rA4RwN
jrWq2UxWaw9QDhZOf1HpJ6WVHjR6uCsS6h/ZTHOr2hD4rbXfImYDwxOF34MSxt2b
Kcz+287kDqGlY8tNRkJ21C+HfBdIcac6jyTRbVFQad/hmGaHMVfIA5NBikIGtVmX
oUpAJ5sl6VfhoVHV/WftCuPJDH+hnWvtMD16+7LP4GyZmrMnRtU4GsEsxP0Yv3Nn
DR92vpnx2kKEnkmLYwIDAQABo4ICaTCCAmUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBSg7R+AkbV4RSFY1np8KNrf4LhiYjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3Rlc3QuZXF1ZXN0
cmlhbnMuY3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE
AdZ5AgQCBIH2BIHzAPEAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOi
HAAAAXAEcHoFAAAEAwBIMEYCIQDyk/1isjZ8dCo8Ova6zHe3gk4G+R/VUrPlASV5
EiSngwIhAKAMhK4UBaR37ke35Y6Yepj81RrYpXkiLrjS+JXY8nL3AHYAXqdz+d9W
wOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwBHB70wAABAMARzBFAiEAnkTs
BkwkxJhUR5dUE9f03yH0sSpdP+vd3BiShzhzhmECICAOwvwsD17pzmHMrvizVb2c
xSghAhjKjK9wTIKyKo4AMA0GCSqGSIb3DQEBCwUAA4IBAQB+z1sL7an8Xz36z2yO
xLZNTcRvph0k6TkPm09Eym/xQeJmQZsqu6ySsuWIlNqMDCvNXw2Qx4IMQT4dKQ5q
Rq1lYAAi7Ay+YZw4u9XtRTsnV/VGte/nhtjW20qoUTj+UC6hs/EIQodKnvRge3Ws
2IP+AMe0O/rAX/FU4K6/koFOdyCSGv6/QDMDnTbVvGt3I9VmKEohQWs/lQFQiEks
QyftP+hgFFw3Yx6X3aKU42PrsjK0NWbcRx8nN6IsI932Hc8Tsze4QB4/W0l8m7m+
JcvFQ1gLtTzJh3COw4w4qMsyHCvmPESNLTOmwHpcyV5iFTjbCVQQyNrKqCNwAT25
BnEk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330863760286425015858324766149552064966614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 04:47:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 04:47:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.equestrians.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775994949080961548548929001094764334912108983409582089575447309459343029852650003121938999937431463099924762986524008918069686407457727392770835297290867136787034123874450707352485635642837311458474039149653678959597613879695137335095481662651551478743187695378592591859198621767647250273743594215304085480918821789119061955505159816896468858071591303506236548448590898013619029427975103057161793433164314851810179768318492009333770663112497015050093111544358450580995211627891582836846588573686291435752227642529009172224417716575088401436750988203319646670166998795751335597670828565331512466307809038868099271409984207659385232694797243002259894948900280980572794090561084353060868623328735895866164963715256157489237778768611427290939012795302917191622894336155845616585672658695100837249207118378206901700072302157542648871083571261872451529369013257535813029409142984914349003944832488863422252459760295891617146025350498215514214356195395944501661776487794749887152661941926077984504604675960535333483468971185907076101177184293809174148011158869955160446850564693575775102874657947604838745938348973546847885316853284044323251410374804798998138415391577166725740080645673439414345081542514094346978337785566330599692151917411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0ed1f8091b578452158d67a7c28dadfe0b86262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.equestrians.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017004707a050000040300483046022100f293fd62b2367c742a3c3af6bacc77b7824e06f91fd552b3e50125791224a783022100a00c84ae1405a477ee47b7e58e987a98fcd51ad8a579222eb8d2f895d8f272f70076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017004707bd300000403004730450221009e44ec064c24c4985447975413d7f4df21f4b12a5d3febdddc189287387386610220200ec2fc2c0f5ee9ce61ccaef8b355bd9cc528210218ca8caf704c82b22a8e00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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