www.kncar.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:ee:e3:d8:5d:4f:27:5f:1e:5b:7b:01:e1:48:ee:58:44 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kncar.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:ee:e3:d8:5d:4f:27:5f:1e:5b:7b:01:e1:48:ee:58:44
Serial Number (int): 318141270006933412674069722103432172427332
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:0e:18:06:d2:32:58:f3:7c:55:01:70:d0:1d:6a:5a:bb:e8:14:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:41:56:56:12:6b:c7:a1:ed:b3:58:64:fa:7b:ba:3b:54:88:76:d5
Fingerprint (sha256): 9f:93:fd:2d:92:00:41:ec:7a:60:1b:df:7e:b4:55:1d:34:3e:fe:13:30:db:b2:18:08:0a:eb:28:b5:4e:4d:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kncar.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kncar.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kncar.cz
www.kncar.cz

Other certificates including the domain name kncar.cz

(limited to 100 certificates)
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz

Certificate

The complete raw certificate details for www.kncar.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgISA6bu49hdTydfHlt7AeFI7lhEMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDcwODA2MDRaFw0x
ODA3MDYwODA2MDRaMBcxFTATBgNVBAMTDHd3dy5rbmNhci5jejCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBANSVMAQkh8J4OA9QKjO09ayqzW5UP8Y1YXw9
gxBBtygiS538foDz4Go/HVafhJtEhW2EFDaN171wW5W9XGX97d7DjpBYbEDIyzh2
I0iQRTmXjaAasjPoIunhAHAZAo3vbcx5XXnUMXTU4LRrumVGhA9ZRPiN0BcpoVeM
c0YAvRq1bA23Q+DWqYGhhhjDlgmiVmNZVbg0ec5BJ9NIXUwJGAS1sR8vXyJX7Fjn
xC41rcQl/kZa/2jusV9KykEHaVOyOcmY+RgYRNzlqCReZ5W1wFFPiaciw6GYCMJL
3kLRPjQ5zNSh7LRnWq6/PXTe8Or0bgaiHWGicPxMbqPqn4PfD4Ax8V6JDnNjafo+
5UPLmZF/9fNrCMkaA8mEhwFxa0/2GliuwfV2PANtGcDRAWtdv6thFhKzoaaeOmdt
TbEegBI++X+MZGW6A8IIJUlQqPkVBPO6xf1k0Vw6lpwyv7uZvzgQM/L7quM9h5Fh
PdPGP7ZrexRZwr4gD7npX5Hyh9Qlms67+wcIQNm3NnCEnK0G/RTRGCcRBqc0NOu8
O510/vBAmarfjeE7VjNrRjFxR90wVNa+dUmn42y81lotT34YHkSK1e6p5V5kdp32
f1eofGr9IXDoj4v9EhOBX4ahWid4aft2mbdqedJt0SaOmbhAJnA/PT9XM9iHYMiX
14+6fvvfAgMBAAGjggMdMIIDGTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKQOGAbS
MljzfFUBcNAdalq76BQrMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIIa25jYXIuY3qCDHd3dy5rbmNh
ci5jejCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEF
BQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVw
b24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0
aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2Vu
Y3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA
23Sv7ssp7LH+yj5xbSzluaq7NveEcYPHXZ1PN7Yfv2QAAAFin1sBtwAABAMARjBE
AiB/x3Dnto5/7FWXGlzg10GKLRmuKUwxbIUBYmiT7CyNRQIgQlQhgFsv5SP2c4mC
Mhy8Ek4iTa8iUm43NjIg9sCL91kAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD
DPTlRUf0eAAAAWKfWwHnAAAEAwBHMEUCIG0voCNYHeDYkBqcsEUfYWKDL1Tivr+C
P5rKQafWKnAKAiEApqrcUzVOmkjBY4VYQViyil9XABt3ROncoOX0TdHjX5QwDQYJ
KoZIhvcNAQELBQADggEBAHLdEVT2wtm2DU29t6815J4tn8/rFql8EqPnkjQXoCak
gY52/9pyIxzcZ0/2G571IM+/uXLk36FOoMqdfjhk4Vds0mdIdc4pik0ENXyEw1xL
IMKU8OH5rBpqqHSCDPzd4Sfpi/+rVwm17g4NSfnVt81U9T4CSCQMmNZpL+IF5Xct
gXAT5cGMBOP6IsGc7TB/GY3MoABzm3EiVtYnfhkE4R9cPBtrCTJGMgxmaZaqR68h
99u9bRgmmFjyhsesnHmWJzLmRfF7xeWId7niXq5J/M0YN/Mc+iWXz8vK+QMSgTbZ
uzFC13XHquIiXh/uh7nmBxiavlLDL+U5vgUCIJwWZKY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318141270006933412674069722103432172427332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-07 08:06:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 08:06:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kncar.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867262011784651239138670369017763682540601638649236299970529830231355894686095005104796590299654882664904812477100891095660121933483577600418075642463311486065480783352117368068797164039796881573996252185911126631328506157754601287077770044262907036427031748787886802678117627661422196193349797707898338253665103557391289140235431467711254508977111284669479846188151017014349394108790151848430578054874790766007620106196176449882381597153814964866917485363134830408583862905133056657035666877650558352995239477707249046525329982834654252751297327522909077365891686667332892809706378534391537454205674628818111166839149875477647460862811663884524631300660103212263550298531914306025857936542528562250793741565814747193109197026789598012513088414760785570523358115522734296801084768529648557312780887269232635892994110568832263938286631162764924834771812763202435204264072704251596985609664176796177111845270409879912353406089538780817815288531015118621116954883968624040194438855587614757070970111883884256457869227379205767710760284137716083103397204481546930266768791970651991155121281776804295001974477576758834744959565277785387994809309367542016356592728546646176637706879338009187051485504781671848229949905598965812162042199007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a40e1806d23258f37c550170d01d6a5abbe8142b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kncar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kncar.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001629f5b01b7000004030046304402207fc770e7b68e7fec55971a5ce0d7418a2d19ae294c316c8501626893ec2c8d450220425421805b2fe523f6738982321cbc124e224daf22526e37363220f6c08bf759007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001629f5b01e7000004030047304502206d2fa023581de0d8901a9cb0451f6162832f54e2bebf823f9aca41a7d62a700a022100a6aadc53354e9a48c16385584158b28a5f57001b7744e9dca0e5f44dd1e35f94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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