ojete-vozy.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bc:5c:07:6b:81:3a:bf:39:4c:93:b2:22:8a:a1:fc:28:26 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ojete-vozy.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bc:5c:07:6b:81:3a:bf:39:4c:93:b2:22:8a:a1:fc:28:26Serial Number (int): 325432270278563834936144178667891921266726
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9c:be:14:c9:25:78:8e:ea:b4:99:32:b5:5e:47:a8:0d:19:7b:70:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c2:a5:c8:c6:c4:e3:63:51:64:af:2c:74:71:8c:a2:51:9a:99:ee:c8
Fingerprint (sha256): a3:e2:e1:21:cc:86:93:ff:e8:48:7c:01:61:dc:e3:f6:23:3f:34:7e:db:52:01:b2:b4:cd:ee:b6:ac:b6:b3:8e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ojete-vozy.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ojete-vozy.cz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ojete-vozy.cz
Other certificates including the domain name ojete-vozy.cz
(limited to 100 certificates)
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
ojete-vozy.cz
Certificate
The complete raw certificate details for ojete-vozy.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISA7xcB2uBOr85TJOyIoqh/CgmMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MjEwOTAzMDBaFw0x NzEwMTkwOTAzMDBaMBgxFjAUBgNVBAMTDW9qZXRlLXZvenkuY3owggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCYvui18qHZF836W+2L1yOIvcsaNg97qNS+ RzFF6nWSglhOmzihtaeJWWy8amAcOnqioMAoPasWW8gNSDPUnnsVL512vcc0glfQ JCxT8/zrT8YVQJBAsagZJMT9m/o+vptStDLtGhpr93MyiqjajBHXsQaxkTH3cW1O 3D8Haaxc/JvsMDv+VuU3etowXLflNdbu8umbXte3y4eZutSPrOPqOtP9sn2st3Oz gzLVnCz75Pr+kP5DZUfCtlCnvO6HYptppU0Nf9c+xEqyXZUHUzpiOpTUM66MM6Wp lApo1r8Ex2yX37i7kNDS6o5CnT0pnJavmC+b23X+q4hGeB12dXaNyPqHC7PRdJ2m Er7r+Wf4QeRbt2eyyt9DMcGcQMNZAYpc2RvX7v2kresaxjpoRXW6UXArkBATwuuw mGA28I0af8LReIHX8lHYH90z/ysYwdwFNfABfKcxm6bM2fdbcWbxMLiDOPFcCPcd p9sfJKO1Q8Q/daO66vNl7tFUU38M/7uy/trasE80qmB+viFaR73lQrZ6IDHS9wUY RsEH3a+gkBJQqi9RA59WqrBLLFl92kGG7shztS3urcqUMXocgqfno9NqTja3iMSS Ozsrq/t+0PvnXOG5wRCxQfYl/gI4j9Dt79dteVqCR5uqxAhwGHDQcbNqDAbPvBpK M/OI7I32WQIDAQABo4ICDTCCAgkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBScvhTJ JXiO6rSZMrVeR6gNGXtweDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW9qZXRlLXZvenkuY3owgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAbJFSl+EMXRCZSVNqM3/o sbgJDEUG8O5jqODIgKB815t50GsQZLTf3EZrLPkwMlM7HjSXFr5N1C9hC9RRFY/F yQF4uBeJ3Qo3qFUb2+LLe7YpoFzxDGeOQrMoPdQPl8YS2DHcRVVO5qvRvyTuet1j rxYXw6kOIm7IhVKYXMFt6zr6GEEJjOGQKPSfwA5+jCk4+Ta2ArAaSSRZKh9mA0X6 4D3bG/k5uVVzYKTxw4yeLVxxKGpVuvfDk/phqFwKyFlDrDz1veYyYht5rbsXH0iE 03ACzqe9tQqwBR/A7TU1opzwCnGnXqaR/9bt2SRaCO6OlnP79Ll8xDA0Untndeig YA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmL7otfKh2RfN+lvti9cj iL3LGjYPe6jUvkcxRep1koJYTps4obWniVlsvGpgHDp6oqDAKD2rFlvIDUgz1J57 FS+ddr3HNIJX0CQsU/P860/GFUCQQLGoGSTE/Zv6Pr6bUrQy7Roaa/dzMoqo2owR 17EGsZEx93FtTtw/B2msXPyb7DA7/lblN3raMFy35TXW7vLpm17Xt8uHmbrUj6zj 6jrT/bJ9rLdzs4My1Zws++T6/pD+Q2VHwrZQp7zuh2KbaaVNDX/XPsRKsl2VB1M6 YjqU1DOujDOlqZQKaNa/BMdsl9+4u5DQ0uqOQp09KZyWr5gvm9t1/quIRngddnV2 jcj6hwuz0XSdphK+6/ln+EHkW7dnssrfQzHBnEDDWQGKXNkb1+79pK3rGsY6aEV1 ulFwK5AQE8LrsJhgNvCNGn/C0XiB1/JR2B/dM/8rGMHcBTXwAXynMZumzNn3W3Fm 8TC4gzjxXAj3HafbHySjtUPEP3WjuurzZe7RVFN/DP+7sv7a2rBPNKpgfr4hWke9 5UK2eiAx0vcFGEbBB92voJASUKovUQOfVqqwSyxZfdpBhu7Ic7Ut7q3KlDF6HIKn 56PTak42t4jEkjs7K6v7ftD751zhucEQsUH2Jf4COI/Q7e/XbXlagkebqsQIcBhw 0HGzagwGz7waSjPziOyN9lkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325432270278563834936144178667891921266726 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 09:03:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-19 09:03:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ojete-vozy.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 623148245513621131758064938137858438800767995029364379081728835538904170380304501365758158595141082436048229461609527832228716420295287059992748389517538076392582266136085340049517751282628847357971010291595163253951291836735090275245360024322051606467135854950788824948920185924422847412550589690891642832454847439045251126095691526202165193071157308349787115105714003695871157023360304661084802350614634152434492214695469597041040051616951593244909186358323879203058673669650069000221914592195823179055083149141083944019542103328081215577305724839702434671850431074853547314462964957578741862694436261036315177081893684208919659067646101359585891516818305010180855911384638379804333354039121561006748791069555765488603512752006626174302548097368442382118167344398526747414515715731685767823608371948101602677055138642224609593620860345564027408588426281461279488648393556008393877520455351188867197124390938666834437290768344187788462390119968466811459438211790880662344753471402826546937661415643465972048582495368830753601991747964223141002234635025553583731073645727188037245776235383968448073707975572885991310367395961786613590517728993252142620313078782826515299729440428402584092232118903388177664953449789893694760038561369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9cbe14c925788eeab49932b55e47a80d197b7078 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojete-vozy.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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