skaldo.cz

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:23:e9:27:fd:23:fe:c3:1b:20:75:87:ad:52:a0:3a:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skaldo.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:23:e9:27:fd:23:fe:c3:1b:20:75:87:ad:52:a0:3a:09
Serial Number (int): 419275609642686537279654415521349067880969
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 66:eb:f6:95:30:0e:3b:3d:f2:d0:a0:69:44:66:da:f4:82:15:74:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:b3:3e:2a:17:7e:81:53:f7:80:14:31:2a:16:45:7c:07:de:a9:31
Fingerprint (sha256): a7:4f:b4:e3:58:ba:87:46:99:f9:bc:5b:97:e3:a4:4d:da:ea:8c:f2:bc:e3:42:92:06:c3:d4:e0:98:86:2b:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate skaldo.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skaldo.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skaldo.cz

Other certificates including the domain name skaldo.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for skaldo.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sc493QK0jPkAbEdEiMs
bnwfd9xGF66QGDRhXUar/MmgqlkBgCZwfhWk67sIQW+/IOVvgFN3uDvUBXn34you
Fw4gyuGqEzFFJxg5lIqwFu59mb3UyBlZNQS9svQ8DrKK/5VpS7KrQOkJ+qlp9yvT
JwZK/bPuyHbyonzCEDemZfA2lxgBtZZIqLvzTAUvcTE1vqv3Pm2GHuaZT0dxwJyG
84ZenBsntPqj49XjWHl3GV7phEMP7CG6QGU7lFvIpxJE1nidhi4VOvsh63TrcYcV
O/qIei6Spqmid1mUXoqf0U+Q6ZeP/pVHeFKzJZaKlsgqz5lSEa93MAuX6HzRCR1w
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419275609642686537279654415521349067880969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 07:11:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 07:11:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skaldo.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28628097211285459484937726508031443423670189468477470122896443429650408998112276717883838890481242341161174634998191489990381358472124338921753150331938501191860971068564649024486886990491407528192219008629741000583154383927684242910516659198118946142556072231460345336706646355109009244648217628980933830185743314178555370607306385247612682147030595317952003420682800667459973675393759891960604126482374739813409943202622682340627303668114249522402764412349162234085485828967595480252878648099852765445085901989801452216509683476321758668570637914110130816599388478937692139230270948412428275054632134110250763382913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66ebf695300e3b3df2d0a0694466daf482157453
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skaldo.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189c4c05ad3000004030046304402205edd4bfc8eb09154ccfde75aac78448a2c1e2a7c22d8163be5a00e1c9b4c79a6022013ac03043da4b019c8d2f530385e6f5704308a6d16e68a4c32a577694230e445007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189c4c05ad000000403004730450220070c87a5813a560c7e958992966d13d5e8aa0b600a2e23343e5903429d78dee4022100804c9758e2343671e74a18212671e59dd9d80a04cdd69abdea4ba9a349d901dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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