*.pubquiz.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:22:19:f3:97:37:13:84:60:0d:29:0a:73:12:40:4b:6a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pubquiz.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:22:19:f3:97:37:13:84:60:0d:29:0a:73:12:40:4b:6a
Serial Number (int): 340327695420822645471008836257322522135402
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:d6:ee:75:e9:d1:2d:bf:bd:bc:66:08:3d:31:04:4d:a4:ef:6c:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:29:37:b8:c0:dd:9b:aa:f3:0e:1f:11:0e:44:6c:5c:d2:7e:62:39
Fingerprint (sha256): a0:54:bd:85:0d:55:04:ee:b4:c7:67:bf:fc:27:b7:f2:fa:61:da:ad:c2:49:2b:27:28:62:50:ab:e3:4c:80:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.pubquiz.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pubquiz.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pubquiz.sk
pubquiz.sk

Other certificates including the domain name pubquiz.sk

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.pubquiz.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340327695420822645471008836257322522135402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 09:11:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 09:11:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pubquiz.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852144910429871664552485912826906983816751386529087055833646481014456350842353146183490359646374009039854816375577903124005097262191148676784503731119853687187893224744882806258664499997144112638790370663957759059862841202768465251013082910788619368572964641684352759170567127776290628947743031387300932556941345244207031791490718325628144548532003853202887189242547147217984684761505055170095593963524469829063261896662659442799836734708784428138514038431670390072610850649274547237814448160009063680102013521485091448910206406788646183575801653034221614969520700802652463855261914044121993310558673084001659010505799815782699090112970414553599513114941454418344103159361860559631777530145370394912819459399674175007255634303957115248552445927978216819380500707324477883988583583100723662768306417246565505908884579636135533775908929090295847145720170524543871852971876891005676776787143197626233545501580295801858077882901682504301332980532489712287792419223990213476207877037837522582662958906170168253898682136243097092919450698009648681696786296260590332706157013764085219750563869045318497521930129039663150092637921741610760982819043028310588109558686611650270488188188726340557234667491627314806134388387554964723446122693261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45d6ee75e9d12dbfbdbc66083d31044da4ef6c8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pubquiz.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubquiz.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fbd490dc10000040300473045022007e846fec86ed31e3e7f3fdffb9d643878b54b375656d154a25d3f4f8cacdb69022100b526e6fb3b5f72fcc0a3155fff0bd64d76266e63ea280cc1619beb9e4ef3d010007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fbd490daa000004030047304502207cb9e923dc55d61d1c8317c031b06c48cc48d223278fe2af2faeaefd22d382e4022100d34efbfd964dc962a9864779f9952bd2414cd6c20dc9e06d377d86d8d8d2434f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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