www.autorn.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:58:a7:90:91:b3:2f:e3:f2:9c:c0:b8:cd:c1:76:9c:c9 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.autorn.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:58:a7:90:91:b3:2f:e3:f2:9c:c0:b8:cd:c1:76:9c:c9
Serial Number (int): 297524630798315187183151918072204545662153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:46:e3:84:5b:dd:41:38:a8:e0:09:75:24:53:82:7f:02:8b:30:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:93:5a:dc:4f:73:dd:fd:4e:3b:72:d4:db:c9:77:68:bc:67:89:39
Fingerprint (sha256): 9e:fd:af:20:9e:d6:37:64:83:0e:81:81:cb:db:6a:ca:1c:8a:41:51:cd:65:96:78:78:ca:aa:8d:89:51:6c:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.autorn.cz

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.autorn.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autorn.cz
dacia.autorn.cz
renault.autorn.cz
www.autorn.cz

Other certificates including the domain name autorn.cz

(limited to 100 certificates)
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz
www.autorn.cz

Certificate

The complete raw certificate details for www.autorn.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgTCCBWmgAwIBAgISA2pYp5CRsy/j8pzAuM3BdpzJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDYxMjMxNDhaFw0x
OTA5MDQxMjMxNDhaMBgxFjAUBgNVBAMTDXd3dy5hdXRvcm4uY3owggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCjxiYGnyTaEtIyDzMOwVnURMbagY1R+cAL
AZCcIA+p4h5G1yHKbfSlR9z9kw4KoFTl5ABQu+k7QAEma6rdIlx3ajuShAp7gwXd
EXuXtLPzLWtZv8ErclGDXo5md1jwNiMFOqDl4FFDSa+lLAD11D3Y++B7vJKvY4fQ
M8zpbF7eI5PIbXVw1zFDWiWsVeAsVOiPQBSoMj8asw16Zz51TJ+C9W23tGlWldfD
cv3J6BjrymIgyRUNCuQHwXgr05mRSkTJllsFjpqPopoGuZBFZCFHWUmNV1vWypNW
zJzmGamCFlBe3QPzfvKr1n3QjQ+XJarpzGg77NxiIFboc9J1euYaa6CQ/k5U16OJ
oIS4TLA/4elx98Wro24OqnbQbLPzZuOTKvLV/pPnAxlXFkjZTUZxz51zBGI1mZG6
AIz10dihKrigX5MafpLm+6YjADiCGMa/UHpRktLkIA1X2nRni6rvARYOxoejVYJ4
vXhRPFLpF4iZfu4LLzSN432c2lB0Ao4n7kTDblbazluLlaepzonwbCM5kcRET4AX
OWMSz0ykI7Ig1O/6ZaSUfH4og7iYViN97szOeRvLbuncX6mcojgcQztwEXN7ONu7
fe4UBPorNbxfEPqrZpxxNZn5p4uT+NIfvxQGtW+qeT5DafjBHs0QBXYM53Jwd20M
WoUP1dwDYwIDAQABo4ICkTCCAo0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRvRuOE
W91BOKjgCXUkU4J/AoswnDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMEcGA1UdEQRAMD6CCWF1dG9ybi5jeoIPZGFjaWEu
YXV0b3JuLmN6ghFyZW5hdWx0LmF1dG9ybi5jeoINd3d3LmF1dG9ybi5jejBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB1AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABayz9CFUAAAQD
AEYwRAIgbn9vUMxDBKTvRcGPRSryRSatSIYMkB8bIrzHWd5SCf0CIG9lYHCVUml/
2qZRgVREtpV1QQYA+Fm+WNQX4KBN13p0AHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXeP
vXWmOLHHaFRL2I0AAAFrLP0KPAAABAMASDBGAiEAgG2hoAR4wovv36YRIGlpSOtr
+kRWnp/Lmy7yAjSfYCgCIQD9LtapvuKjOybKOvzS23HVlTzYLfQNDvHmVOIrmj5M
OTANBgkqhkiG9w0BAQsFAAOCAQEAY5piiLAnqVVIk8F7+SUmjAR8BwWTD7kKcAmV
PQsxgjTCh1PZiY677im3UHxGSqTDboU+2dLYLCC6XFtlHfPnpHvIJmikjjP0QIX1
lHq3zTX38JG6vGiMN1NxoAt2qw63b7oKPNWGjIRwDXtwlCvdunGW2rTAzCgDD0l5
geuAlz1DPcrLN9ezBbImuOT4EJjMuYqb2kgymPH9vO9ucp2ziI+huD6lao7+85IZ
pjRwBa3LkN3jZENe2g3gxi2v7A+hijeqwF+wlr7nLnrVUMNIMBWFZ22HvwvubPgB
EcZ2Bq+qao7GH1ZT3TPg5uR6k4nQLLWloZGvp+29GjM6A8biyQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297524630798315187183151918072204545662153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-06 12:31:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 12:31:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.autorn.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668139699922574673597628559558394937404736590634516485508992139355062415383985233587923317478690381656877431870225700627473983952595961020664442918720181689896146940480873544822185612100668813579518303726746068269353438633625496636307253105072658404549660676466695914263648606140878531487397497836737951928650339796961261941360369634119293419943871735094924988753373832396452402266798420048670935923332327127384518172155987916056594081269876390395214924498566090648431508777812953354560233934694277372678579245592187689842805909723501060365021262529980988659940830390523825808501947223466492003340046730150167921692578486995777311492814784544657999328792864518436099284871716769516830796090258563294912081665474759045698993725085044402949387264329070276629743976859949778995618237508118638727470976519293406969252743572079329468450141641126638471929109839891378085790886015672670081894207525411496721129386543052427655927320259730273191596914065467503172355261482574444426546496223676246855552716392858392381234853311166214264188765751820309168582790868407884689722038928599409087207495984776398040024483837236782974977746222899546334040114772059120435153575869872725176564690677557301723399715381951814272511752535177804253054632803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f46e3845bdd4138a8e009752453827f028b309c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autorn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia.autorn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.autorn.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autorn.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b2cfd0855000004030046304402206e7f6f50cc4304a4ef45c18f452af24526ad48860c901f1b22bcc759de5209fd02206f6560709552697fdaa651815444b69575410600f859be58d417e0a04dd77a7400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b2cfd0a3c0000040300483046022100806da1a00478c28befdfa61120696948eb6bfa44569e9fcb9b2ef202349f6028022100fd2ed6a9bee2a33b26ca3afcd2db71d5953cd82df40d0ef1e654e22b9a3e4c39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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