ojete-vozy.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:5c:07:6b:81:3a:bf:39:4c:93:b2:22:8a:a1:fc:28:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ojete-vozy.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:5c:07:6b:81:3a:bf:39:4c:93:b2:22:8a:a1:fc:28:26
Serial Number (int): 325432270278563834936144178667891921266726
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:be:14:c9:25:78:8e:ea:b4:99:32:b5:5e:47:a8:0d:19:7b:70:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:a5:c8:c6:c4:e3:63:51:64:af:2c:74:71:8c:a2:51:9a:99:ee:c8
Fingerprint (sha256): a3:e2:e1:21:cc:86:93:ff:e8:48:7c:01:61:dc:e3:f6:23:3f:34:7e:db:52:01:b2:b4:cd:ee:b6:ac:b6:b3:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ojete-vozy.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ojete-vozy.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ojete-vozy.cz

Other certificates including the domain name ojete-vozy.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for ojete-vozy.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325432270278563834936144178667891921266726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 09:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-19 09:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ojete-vozy.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 623148245513621131758064938137858438800767995029364379081728835538904170380304501365758158595141082436048229461609527832228716420295287059992748389517538076392582266136085340049517751282628847357971010291595163253951291836735090275245360024322051606467135854950788824948920185924422847412550589690891642832454847439045251126095691526202165193071157308349787115105714003695871157023360304661084802350614634152434492214695469597041040051616951593244909186358323879203058673669650069000221914592195823179055083149141083944019542103328081215577305724839702434671850431074853547314462964957578741862694436261036315177081893684208919659067646101359585891516818305010180855911384638379804333354039121561006748791069555765488603512752006626174302548097368442382118167344398526747414515715731685767823608371948101602677055138642224609593620860345564027408588426281461279488648393556008393877520455351188867197124390938666834437290768344187788462390119968466811459438211790880662344753471402826546937661415643465972048582495368830753601991747964223141002234635025553583731073645727188037245776235383968448073707975572885991310367395961786613590517728993252142620313078782826515299729440428402584092232118903388177664953449789893694760038561369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cbe14c925788eeab49932b55e47a80d197b7078
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojete-vozy.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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