matomo.skaldo.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:1b:0e:70:de:79:c9:67:1d:f6:51:8a:a6:f1:65:bb:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matomo.skaldo.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:1b:0e:70:de:79:c9:67:1d:f6:51:8a:a6:f1:65:bb:56
Serial Number (int): 288255128919333309624021842867689665968982
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:36:05:17:e9:66:e1:ba:c5:03:64:c0:cc:04:31:57:e7:30:8b:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:ce:ba:2b:ba:fd:58:75:6f:7b:97:da:04:fa:f0:de:39:44:dd:ff
Fingerprint (sha256): 9e:94:f0:71:a3:81:2d:c5:0e:f6:5d:c0:50:8d:e4:14:73:f6:84:ba:09:17:3b:f4:29:20:9b:15:b2:39:2a:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matomo.skaldo.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matomo.skaldo.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matomo.skaldo.cz

Other certificates including the domain name skaldo.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for matomo.skaldo.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288255128919333309624021842867689665968982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 17:34:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 17:34:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matomo.skaldo.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744582650663874091345846163820221874469746884200233371530947994306049147970945773272564915289203605858946499846342264414513192203432846984456124258159030585068077315783539452655280006272888630460250272875808156775540704094328843930911773423708331979169930465578725490776918697519932056984884219091364617373292023642549204904459140924612899271732936486228749498981875830709086365308547364103061084443217163509422448484686953601135069646086805676055402132792560333674791693082020393491810154195510000909412756288915515823204909578829028699864470919663559827088556950725995928782984528699538401795773593048991095763620406984229222547519238815076048679734742319451758038915343299858989903708256679007798202632748029114192746518404949691500343762666857197219860662440553133805761572894852294082233092377668908731129827402688707006000490870562821657258064083305077031298705592242441514530283254324544603518032625334899953626610440607763798898597497181352841771714675658053369878687107119706578294156061576072225537846503107161175083012093498742265929148843532378480860270927008332779806566242588240489208655074791445377740430956112256829763857606565838458795068149050304768446281799562682572682747828818605273613326770620220058713130296189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26360517e966e1bac50364c0cc043157e7308b8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.skaldo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170da5342b800000403004730450221009f05fd0877441c9d4fd31f21b1d9268e0789106039bb6a6ee600469d7f5c0d540220459a629468a5c2095a73345fd51834d7022262ade49c783468992891cffaf73a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170da5342bd0000040300473045022100f25d2ef145a0dffeb1db58cc87d2bdf0ffadf7ae24ca9b38a4bfdacec3e1b589022076936ee37b16c6bea6eeeab28f30e20cd848df8a9253c7bfabbafdf103cf9270
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003714a33f90cedd2f9c7270b1775a57e90256d96c1a3fcbc7633e242392b4221704c4293b31051801049cf6529f56df2ef49d759d231fbadede37ac370acb842f402b9ef321bd44077e4ff5844c850fb974bc498e286e5ef13a3e38b894f82efb88c42a158d18444dab799ec2c81ea5b0069fd65a3075eb99ef9001ad722442f8c5f3472293285e38638767c8b685b817a28ca053b5173cd8510f1561388f1e6f31768ccf38ce5f456ab0782a13899e4abdcd9c8040e159aa2b7e6233860331c88ed6569a9c2a301a680cca0b95be8263d194e2356a151777deb5677ceb4c82b7dd24e7a1f86c894764bbdce1245966bf44921a0632d191b5edad8d06cd4f458d