percona.stable.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:df:fe:3e:a6:5a:3a:64:b8:83:5f:df:7c:8a:e7:37:87:bc was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=percona.stable.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:fe:3e:a6:5a:3a:64:b8:83:5f:df:7c:8a:e7:37:87:bc
Serial Number (int): 424670060757773462456810216286024862500796
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:37:10:76:82:f3:32:6b:ab:a3:46:68:44:5b:3b:b7:be:e8:e7:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:18:6c:8a:17:fd:a5:e6:87:e7:55:e2:f7:6a:1c:c6:08:c3:7f:21
Fingerprint (sha256): 8d:24:9d:3f:a9:dc:22:c6:78:e9:e2:7b:7a:89:0f:83:19:7b:5c:28:2e:a6:7b:af:2e:b0:fc:75:6d:5b:b6:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate percona.stable.cz

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for percona.stable.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.percona.stable.cz
bonami.percona.stable.cz
danfil.percona.stable.cz
hotel.percona.stable.cz
lucie.percona.stable.cz
percona.stable.cz
restu.percona.stable.cz
sportisimo.percona.stable.cz
trpaslik.percona.stable.cz

Other certificates including the domain name stable.cz

(limited to 100 certificates)
*.stable.cz
mail.stable.cz
vpn.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
www.webmail.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
*.stable.cz
vpn.stable.cz
webadmin.stable.cz
metabase.adapteeshop.stable.cz
klerk.stable.cz
klerk.stable.cz
detskydum.cz
vapp.cz.david.stable.cz
vpn.stable.cz
klerk.stable.cz
platba.stable.cz
*.stable.cz
*.stable.cz
vpn.stable.cz
vpn.stable.cz
*.stable.cz
vapp.cz.david.stable.cz
detskydum.cz
dns.stable.cz
percona.stable.cz
*.stable.cz
zkouska-jedenact.stable.cz
vapp.cz.david.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
vpn.stable.cz
percona.stable.cz
stable.cz
www.webmail.stable.cz
stable.cz
stable.cz
stable.cz
vpn.stable.cz
vpn.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
stable.cz
cdn.stable.cz
percona.stable.cz
dns.stable.cz
vpn.stable.cz
www.fitham.cz.novyweb6.stable.cz
klerk.stable.cz
percona.stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
vpn.stable.cz
percona.stable.cz
vpn.stable.cz
vapp.cz.david.stable.cz
klerk.stable.cz
www.fitham.cz.novyweb6.stable.cz
slevomat.percona.stable.cz
www.kettler-fitness.cz.novyweb6.stable.cz
zkouska-jedna.stable.cz
stable.cz
klerk.stable.cz
metabase.adapteeshop.stable.cz
detskydum.cz
detskydum.cz
vpn.stable.cz
vpn.stable.cz
mail.stable.cz
vapp.cz.david.stable.cz
metabase.adapteeshop.stable.cz
vapp.cz.david.stable.cz
percona.stable.cz
klerk.stable.cz
vpn.stable.cz
vpn.stable.cz
detskydum.cz
klerk.stable.cz
klerk.stable.cz
vpn.stable.cz
*.stable.cz
percona.stable.cz
vpn.stable.cz
vpn.stable.cz

Certificate

The complete raw certificate details for percona.stable.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424670060757773462456810216286024862500796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 10:56:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 10:56:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'percona.stable.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814363484649045301271070926525964787837917577976240113492699311790413789070404079036547656394281613947308340147440788327061938642922016494960744589536507959161530199369187728953687893094995779892494684634669879308272402448940954724621015109722417080875165173987414634906248111159735264888866028590405759445463003456663141936639062662968101170372791541980614818678046508984985281805838761986212618003875543741840930848019763114245523606108750352241654786183747493135722529625544753725845808755734542948093616143638594423485794616365179750396879402010945342431318947499228992314940591752519805872690175129751695797941239930119735818938356331019021847760571380146521108647441939804950547235249174490493012121002431262567924638791313520035198566786162487470500894359806948590207199188426575698563782664419475154802940552846234137426468596231934400202301817270192157006578481732491166761230348278259735038701301739950817740976168302592040664398763771298212873367563274294625283401435515216171495918277795202649927533863119830828092260032320176720869454349630894508233896905222078969288059830213614152891397672078435062512656660180113503762733481115232701877135418450918219240190371501387661939137672796099319035639289953161633889572807661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5237107682f3326baba34668445b3bb7bee8e710
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonami.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danfil.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucie.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restu.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportisimo.percona.stable.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trpaslik.percona.stable.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167c652b67b0000040300473045022100e7953b4a72593875cccb685bfe3c35f1cb715ae8fabdd928fb7755003c31fa1502203500c1d0461f7fc27864f1e8a8089b1e0022a104c9c05cfb4250cbf891801c11007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167c652b6800000040300483046022100e360aba6c7d8a9a668e4c071abc05b25f6ce15dbeb8c700b8cf1972ad77de15d0221009bb5314247f29fba445049363731d51548ce938a47ae7f542b4603800694146b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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