my.nxtv.cz

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:03:38:1c:78:9e:81:da:16:ac:a5:66:ba:1e:02:7e:68:0f was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

my.nxtv.cz

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:03:38:1c:78:9e:81:da:16:ac:a5:66:ba:1e:02:7e:68:0f
Serial Number (int): 88207717631046445635696902112488739203087
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 7e:9e:55:67:90:e2:bd:79:f5:07:cd:d2:62:5d:1b:66:49:0c:05:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:06:a7:4b:33:95:f2:17:58:f8:e5:a1:88:84:ef:ef:fa:a2:a5:5c
Fingerprint (sha256): 89:88:41:41:a2:49:50:a9:11:99:3d:bb:35:26:b6:36:65:05:45:0d:56:f0:a9:73:d8:f3:23:a4:b6:4e:44:f5

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on my.nxtv.cz
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: my.nxtv.cz

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAQM4HHiegdoWrKVmuh4CfmgPMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMjcxNzM4MDBaFw0x NjAzMjYxNzM4MDBaMBUxEzARBgNVBAMTCm15Lm54dHYuY3owggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQC76Hvw8sC9fyZfE+9uO3Igd/EAzXk+TVV2BY1R GcUnUVrf6BFfLQekkugT6f2B8ogmjep8oe71rzwiTjDI4/As9OgAxzzMdavomi41 ihG1Ow6SFGR7mkHF7QbVf5VR1NQRPptp/3RMJTdBe+gp4U+am2MtTthC3Oxaf8rp YfwLR78dbbkfMQWTcD2vqnfH+b64zeloWCja/JZJbSkwTbplFKMxDRuqky54Dq4S qBGSrgG3a8OjCLcRovu84ligmmNoro47XbeAAMdLXb8BB6pOVcPhowQUAbjTdrDk lNXESWsLCrEm/POlCVQgx2QoEOGw7H2vAmWeZ3lLIV9NDlkkAgIo5t/W/AiM1X2x YsBG1mlMRnqEZHZA1QJZLA3nRl8R1XyUyMoiA484+9C4b76DLtqMaMjx+zpBWFGj 4IHJPZ4SpLyH+p5mhk2VEQEyk83WyaDnD8bMozLJmDEmQcIUIfaw6PFglwXewH0t DeTQDYRP6HMTst4KPIq1AYrPxGBq1VVXWmI7IoHo45chMRrgBS++XGyR/TD4QPdM 2ADJj40s6ftUAGoHDZdRFF9ubtMk4LnYIs+suZ5zigx3hghy+ekbqP9PcCIN/D51 4UB7kKWVe/zUnOPQIbvNM3YMX1dXMM3AVfS648kAyzmINcLWqwsNT8sOfw7JHyQi bhpYiQIDAQABo4ICCzCCAgcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR+nlVnkOK9 efUHzdJiXRtmSQwFBjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBw BggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14MS5s ZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDEu bGV0c2VuY3J5cHQub3JnLzAVBgNVHREEDjAMggpteS5ueHR2LmN6MIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAGAwrbMwYycKNcRV92xjeyvifJn9 RZdSTPcAMP9CT6alITSJNj2mX2tgeLQRDamycrSIeOrAxZc+oX3K93CZ9fQU2228 Pin0a9+0Qtu+yfDAS45Tgsvw7KcETX8cQX6Sv6PVd4zlk28jZGmPc7vtJMdd1QVk gaMZVZQkEvaaptscnEb0m6yB4T8oCT2QDfCSRUjFVQvZUMjHACH8eRfGN570EkL9 nQTfkjx9IXOmlC53eRkCxttniDoA41VRSR32i5It+z3B2Hx/5eGI1xp2wdfK4YJ/ 40cC3Uv12KqzPRDx2ACL13vXmo7hQZiEucYXzdhPBHIzaG77fWLIME2sWs4= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu+h78PLAvX8mXxPvbjty IHfxAM15Pk1VdgWNURnFJ1Fa3+gRXy0HpJLoE+n9gfKIJo3qfKHu9a88Ik4wyOPw LPToAMc8zHWr6JouNYoRtTsOkhRke5pBxe0G1X+VUdTUET6baf90TCU3QXvoKeFP mptjLU7YQtzsWn/K6WH8C0e/HW25HzEFk3A9r6p3x/m+uM3paFgo2vyWSW0pME26 ZRSjMQ0bqpMueA6uEqgRkq4Bt2vDowi3EaL7vOJYoJpjaK6OO123gADHS12/AQeq TlXD4aMEFAG403aw5JTVxElrCwqxJvzzpQlUIMdkKBDhsOx9rwJlnmd5SyFfTQ5Z JAICKObf1vwIjNV9sWLARtZpTEZ6hGR2QNUCWSwN50ZfEdV8lMjKIgOPOPvQuG++ gy7ajGjI8fs6QVhRo+CByT2eEqS8h/qeZoZNlREBMpPN1smg5w/GzKMyyZgxJkHC FCH2sOjxYJcF3sB9LQ3k0A2ET+hzE7LeCjyKtQGKz8RgatVVV1piOyKB6OOXITEa 4AUvvlxskf0w+ED3TNgAyY+NLOn7VABqBw2XURRfbm7TJOC52CLPrLmec4oMd4YI cvnpG6j/T3AiDfw+deFAe5CllXv81Jzj0CG7zTN2DF9XVzDNwFX0uuPJAMs5iDXC 1qsLDU/LDn8OyR8kIm4aWIkCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 88207717631046445635696902112488739203087 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-27 17:38:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-26 17:38:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.nxtv.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766598333549445188733065281794059204204780122157178547301737749989212035542293208743208618300232884841153795641995244134286299602914613859379571146108697761195100405083842869855292116352377743997958649316816279160910108192457087705446503516405350318921128631279809041003030362309387553193080484661211191077168039520445487611389210982579136581537616037527857044003671961125021462523277831926391423141258842021722492651388047174938429349560380271301773955926599282374426514803937334112587498177592478100180712051055879400594595833423471963894541053247008080686265064259651672143259007385396778873393534473359129571071476708648413946173419131409297275475087948156510126658755513156858414885133954628334937870326898464281991463796978162780057839069721100209491910361481292601248543009596761667302633856280780295734386361661750433414123446351518589302442696129849826663288166325459110935025896052350893906210653154442319728366251873804996096447441213991565645081201278795004762402913291116617723801178594864230969659690087677789981011927501648711558460839934433540539750514703511685910046211522170397587652040478033638854359113294135288218877718314479986695869777887385001525033066883841513002089780009662176896660498070680135698724051081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7e9e556790e2bd79f507cdd2625d1b66490c0506 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nxtv.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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