szestabor.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:4e:c3:99:55:58:b2:3c:4e:3f:97:2c:fe:9d:af:b0:ec:0a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=szestabor.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:c3:99:55:58:b2:3c:4e:3f:97:2c:fe:9d:af:b0:ec:0a
Serial Number (int): 288138878026743410362320573375728606833674
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:69:74:1d:07:f3:2c:f7:38:d3:87:86:9e:a9:df:5d:db:8c:9a:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:d8:9e:a8:e4:1c:8c:29:82:e5:d4:e8:24:f5:89:a8:47:34:b6:8d
Fingerprint (sha256): 9a:65:74:24:a0:da:21:f4:2b:d8:97:a3:bc:c4:b2:68:4b:b9:4c:f2:83:17:7e:20:79:13:8d:97:5c:e8:3f:eb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate szestabor.cz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for szestabor.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.szestabor.cz
cms.szestabor.cz
szestabor.cz
www.szestabor.cz

Other certificates including the domain name szestabor.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for szestabor.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrB7lBdMbQcvvVfWNHnO
A9AtJlNxzqe9MBjv3z16S56d04GPVcRrH0ilhKEe0I68/vUwoRxGJv8xEUsSHF5U
Rxl5YsrFpbpiN0xJCFQGbhodTAtWIuFBKSsQlf2IFluxMGPLOP/odOp2geVVXreK
DFusXelP1wHqvfJ+hxC2ZGN2MrJK+TPRGFlATvt5Ox3T/ZL8AWSqozJ/qm3dJh1Q
JH91RyRFfg2tzqrlQOSQ+ADS+ROEkFd0JwCgfiCXmtVA46vqEJLLsnBN3g2qNN0P
Rnhg6N6cYeWgGK42aIY5P4/inwXKbhN668KeH5Ec3/V881zGZqWT85H7Ug7bHpZ4
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288138878026743410362320573375728606833674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 07:05:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 07:05:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'szestabor.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26092117699937706977984804890694485203253491096390932861468031963673360846429322772013841669755233280116635126331097022725573452266702538601305974873149885689884463358316658060455798173677947932539725142788196910004428354926241711427284008509613040444994262001030716725242494625453783398359683305432287930880370482709236050959703944442723615611991317739109329106494932683511518695320659535249091666673881289663994627164966599792641135722696794278637740288849211161118659885071512438408188480056039894838794993063309115421981741866332259460664495949541979368662687207771765575129450323821053377183370557080441093257319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b069741d07f32cf738d387869ea9df5ddb8c9a73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.szestabor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.szestabor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szestabor.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szestabor.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189fd608125000004030047304502203535ea870b141aec742754cfea3b4a343540d3305509a9d040c2bc146fe16bc0022100d49d2c45b3b7dd93ae3e53287bed759fa5fb1a10954a8a7eb84b0285df4d36aa007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189fd60813d0000040300483046022100930af70c59fad8bc42084c0e8c537ed6390b88ab245c436eb324c6a786ad2733022100ba3962a694ff08c2c4d1a7f81535c083845200e2f8f58e506f17154efe074d9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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