daciapruhonice.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:24:3d:f2:ae:6e:fb:1c:50:6f:e9:55:4c:f5:dd:97:25 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=daciapruhonice.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:24:3d:f2:ae:6e:fb:1c:50:6f:e9:55:4c:f5:dd:97:25
Serial Number (int): 343733364450267646980275604603169748653861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:13:63:89:ea:11:82:43:67:dc:95:6c:31:bb:e4:61:41:eb:7d:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:80:f7:06:c0:13:87:9d:c3:cd:cf:16:b4:68:9f:bf:04:78:e6:36
Fingerprint (sha256): 89:5b:be:b1:f1:da:9b:ef:aa:b9:fd:3c:ca:28:11:dd:29:e7:52:f0:bc:4a:4f:3e:c5:e6:56:50:1a:57:01:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate daciapruhonice.cz

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for daciapruhonice.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

daciacentrum.cz
daciapruhonice.cz
renaultpruhonice.cz
www.daciacentrum.cz
www.daciapruhonice.cz
www.renaultpruhonice.cz

Other certificates including the domain name daciapruhonice.cz

(limited to 100 certificates)
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.pyramidasro.cz
www.pyramidasro.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
www.pyramidasro.cz
www.pyramidasro.cz
daciapruhonice.cz
daciapruhonice.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
www.daciacentrum.cz
www.pyramidasro.cz
daciapruhonice.cz
www.daciacentrum.cz
daciapruhonice.cz
daciapruhonice.cz
daciapruhonice.cz
www.pyramidasro.cz
daciapruhonice.cz
www.pyramidasro.cz
www.daciacentrum.cz
www.daciacentrum.cz
www.pyramidasro.cz

Certificate

The complete raw certificate details for daciapruhonice.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343733364450267646980275604603169748653861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 08:22:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 08:22:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'daciapruhonice.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803336184315267223750619606325704181199304663350196484217591732417769104413975879156944898622524118982183630354017090760596888813911887013104580140834361214433193033161071125943282083181373533944620911744776720312744994784544940097950950261059514818447593362485601672519787891822668295279311389115287146929093577717400564239688505332318466368904006042971563371343411263271351693097586828989218548634886171231049912014876515547630300030095787998593952400621741006690536655358412379219136921854256961089726716982188157071523322781370719285106698173837643326878353182523212180713947219539224070411456366944738606206489719523882605539522444146989981326823845265463023343416356568879787337163866801281114353013162930569702284828658227193698917216255161412301608167702822162546563539014372864845538457985143600597307245987326014281720123228002828439859470583229751800435653338036825177392469094667073861047077885432147703252605995575753495146918634380549892738889365225766668434194981530128942380481251331505088830017241928126298074118504426809325638043692557931553906989776037218422144350067786982195039427208547981458636222333766017091156365177978804811085748838181154655900846598059771261550966848852734831208946547047991880957677783109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13136389ea11824367dc956c31bbe46141eb7d93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daciacentrum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daciapruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaultpruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daciacentrum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daciapruhonice.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renaultpruhonice.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e1bf920a30000040300473045022020ce4c6f7e4c40f3a66a8e6ca36dc436d1abf5160af2ed5a390a933dbdf7fe1b022100eafaf9e1896eb7b803ecb428d5f457852de626207718dbebf3420f963123ad0200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e1bf920cf00000403004730450221008f5ea94f3a79e553de552da5758a95b861e99fa7ce9367098350b048eb78fb90022036b6af1243bf287aba6d098a48873a5e0ecb7923d441e1e30338096f70d6ca43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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