www.francecar.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:46:89:ad:35:95:bb:04:ec:e3:78:d8:1c:ef:41:f0:f3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.francecar.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:46:89:ad:35:95:bb:04:ec:e3:78:d8:1c:ef:41:f0:f3
Serial Number (int): 269937677785781058312790369073173517955315
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:c8:59:55:fe:dc:78:b0:e3:2b:8d:75:36:2e:c4:52:c6:1b:da:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:c1:d2:c9:6f:0d:ee:d9:d4:08:9a:c7:77:ae:c1:dd:8c:96:1b:8f
Fingerprint (sha256): a0:f7:eb:85:46:ec:e7:c6:dc:29:d6:5d:24:d1:8d:18:90:43:8e:15:f7:f3:56:aa:7e:44:9d:29:a7:8b:d7:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.francecar.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.francecar.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

francecar.cz
www.francecar.cz

Other certificates including the domain name francecar.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.francecar.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgISAxlGia01lbsE7ON42BzvQfDzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQwODAzNTdaFw0y
MDA2MDIwODAzNTdaMBsxGTAXBgNVBAMTEHd3dy5mcmFuY2VjYXIuY3owggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDDSnM26X6kIudn3QX1hj8uHv7xROPj
btMPle5FV+e9l8r2egDqDdI8XzC7ECjCZSyXNdf4ZN+0EZ2gP2CR7hj+qsc4LVTw
3poZh+zKyfinUxaD68t3airPLjf432IXiQXL7216WODDWxfGSJZ0fuu0kcnzqJr7
Paz97DGqCtek/TJDeD6I/8+1ZrmlpMrlZdk0pxOH9a25hhCiTh94gbuS9SVc+eqs
acPKNOyzlw7QCWTq/pucr/h3rNqXrzoBCsQlinRJas/KdXL/rv7GPxv+HVTIrmU9
F8rXPStgj5ihBm5Ji24WqEXoXSnIrSJ9D6RQ/TDOo1K5ulkyOAZ5hYdn/gHAjiQc
7+sjRlLFKQCI4XoCEFf6bUAt1dVGWfB4MMTDgeyqAdZFC8dqrWVl9yQ57A667ycv
yCyYpXqh6XlIz9UXmtwjdSLyHJxuNZemX2rwvNjFinPzXYIDLBhbUG0noEUMu+5w
teani7ypnVpRI+ZEGoK7msslH9z/WMm8wyfXg7GtH0yv6UD9SH9P5/4AgHB4BmIq
S+sBuEEMXQOGrulD6HgQEVUI0scCpBcUgkIZbKSCa66tH0xic35gxRroTSYjp2X6
oTBUSCTFnHtHiJ5ILWKrmQK7WMLGoHNYL7Kxtxu4jq7tnqYgZdd74gR9Kf3X96xb
u9GwGnzGlHtDewIDAQABo4ICczCCAm8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSq
yFlV/tx4sOMrjXU2LsRSxhva/jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDGZyYW5jZWNhci5jeoIQ
d3d3LmZyYW5jZWNhci5jejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw
57JJUy3vi5BeAAABcKTJj3QAAAQDAEcwRQIgQUb3mngtxNSLUccr9QDqzKCP1v+l
JyNddlUzG74b5BYCIQDDsc3fp3ndONolbiCUGVAF9v3kwtR3MFZFoiWE4SgLxAB2
AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcKTJkDwAAAQDAEcw
RQIhAICF9QYuEIwu0v8QU6Quc9emKpv0YcfeHA33e01xfYz3AiASu5vwI0G0d+ab
TrfmniVvloJBYmZjqRXPmmCf0C1iMzANBgkqhkiG9w0BAQsFAAOCAQEAVMkczeXg
ygmfgjcMTeU0smMyMMxZ+Qu4dFR49cW+0UmlejSAI1Xrxk4UKk+oWlwnnMM0+cnZ
RJEqgqcQ7dp/axoh6UzhGxi5uprJN52XYUICjhYkXh0JNmMmiRVVUceY+rv6vQPE
qBwXGT6lREgyWPXPDTgm5AZ/EygB/356UbGun0RXHfg8zTKx3AxdTTsAQ8Xk3XWW
VMbJN8u2ZW+EZSbYRo8DIwuZXtk20OxLkr12PMVJ5xItTshGegB0V90Uz6mHfZTW
vHmrrlNleIpG0Q8g248apGZ6ZiMdkzYMxvLZZPtio36P7Uka5E+cx/g/1DB5ndg/
oGAnERinLnk/Mg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269937677785781058312790369073173517955315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 08:03:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 08:03:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.francecar.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796717037529327910042505857359288147046795422449730745637795375260028834871728221634838245067488343467664497963151926041187084118549379312252689417147468201870009727113131768674936203767913045155762711894000922893753185151528103331058878970983169282514038000279447306297788109423661588407271231264340498067657968334266020803457885129240592784320101020525066022295004170104665889745804755281539023555162572110355196394823112261131042418574765149277465029596153742336934627697833086098977792641654067071809022865272959931865291035208692985199894824648173521583362100206186672075425695320867745368632379231244118205020390251418220424687697784189252146578577388040639578981066713048155354665896215551128025262326456306616763304377801280266383250678245800864941497623517923201676323503453370885960900880828157449392352292908157243934042512780373101924365629419601955126734196366943001341763415079044103150108168304823632969751842574315012927016155155423960314836667021148084246160113886653096889415765630134019738041471225578376440740478061299771893274952254545541478363880711805764537187010929212660449235566946900009099457940892393153562856728383239085697514241745726171349381195392926205307340286766732523315768225319539272121314919291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aac85955fedc78b0e32b8d75362ec452c61bdafe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francecar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francecar.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a4c98f74000004030047304502204146f79a782dc4d48b51c72bf500eacca08fd6ffa527235d7655331bbe1be416022100c3b1cddfa779dd38da256e2094195005f6fde4c2d477305645a22584e1280bc40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a4c9903c00000403004730450221008085f5062e108c2ed2ff1053a42e73d7a62a9bf461c7de1c0df77b4d717d8cf7022012bb9bf02341b477e69b4eb7e69e256f968241626663a915cf9a609fd02d6233
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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