petriska-nabytok.sk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:72:fb:a5:8c:36:e5:4c:bc:d4:0d:de:eb:97:aa:b5:8d:c1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=petriska-nabytok.sk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:fb:a5:8c:36:e5:4c:bc:d4:0d:de:eb:97:aa:b5:8d:c1
Serial Number (int): 387575829355838273676309986694922402893249
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:52:34:30:14:93:45:5a:cc:97:ad:05:1c:6d:1f:24:80:9d:3f:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:2c:8e:ce:cb:75:6c:a5:e7:a6:c1:02:d5:e7:d9:6a:6e:e6:c3:85
Fingerprint (sha256): aa:7f:e1:3f:05:0f:c0:3a:d9:b6:c2:41:df:7a:17:f3:cc:6c:60:c9:d5:e9:f7:10:87:c6:ef:6d:c3:be:0b:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate petriska-nabytok.sk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for petriska-nabytok.sk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

petriska-nabytok.sk
www.petriska-nabytok.sk

Other certificates including the domain name petriska-nabytok.sk

(limited to 100 certificates)
petriska-nabytok.sk
petriska-nabytok.sk
petriska-nabytok.sk
nabytok-is.sk
petriska-nabytok.sk
petriska-nabytok.sk
petriska-nabytok.sk
petriska-nabytok.sk
petriska-nabytok.sk
aaanabytok.sk
petriska-nabytok.sk
petriska-nabytok.sk
petriska-nabytok.sk
aaanabytok.sk
petriska-nabytok.sk

Certificate

The complete raw certificate details for petriska-nabytok.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmTghUcl8ntAOYDH0RUsQ
QjlpUFl4oVP3w7MiDSjibmbLq8ffgpbVv5yDOnGvfkYCKmQ3OOgvnrgE0/Pn9tAk
qP89hRkcA9vElREzBvtra2AF/DfjROqBmVXVMx7xInUOwLGQw0VXFo+7SmIIpgiM
Io1OhXp0nBRUMlnb7NFqBDhrHP+2TOVDzJ5+gVEuYILFhjKhPdD9I+EXxaw27XPd
4xAe+4Jx+kY/oGSo4HAvkuLkwLeSjtMBaaqO/ScOQixhMcPL42+2DQNAnxHp57pv
Pby+XCuBV3NH01lkGr2gD3ZrUBPD+I5v1DWqtaC/NrbFd10vsnsK5kNoe9jVlwN2
RloQMKFbtLzN1FvVHViaGw4+YwIaM5oqghlBzrSG5zMQsKjkLqUZuAN4bpR0U4Og
ulHWVnaTepAAzTBzSiM3IlCcXp/C8q5iHZWbO48hhiRMKMlS71Y9BgbVV7A3hnGb
Sm3JYk5fsC9euVtHrZrsgD+44xmbHRgOHCQDjOypHHQApTKKRNyuw/jI7kAllQFJ
xXcR8GVA+mH17GUYntRh9U+VZNr3R0Sk3oUn6N2NotM3VG9PVMrXYNnJ+JNH8A4Y
dq2/R0diexH1KcrErABF0ZVUsfgrOA6A3rs5E+krLOmgGPWj/sR8cMR0++Kzjkx+
QBfvqNfAo7Rul9cB9jf+XrECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387575829355838273676309986694922402893249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 15:56:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 15:56:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'petriska-nabytok.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 625080038698902267010065756435954656445556665612778050469030513461495725103834899599479166572788311731434810954965800684775739357313260955255231996989154902268621844000315767947740328322810129066692921964590774637089374363806523853311749427475782928541134333992197905475619892804835296751424893840512212874415598999165726866732507208374525233433114860530835682672359325301010637158172508341017799435629549245909419316085211641333176239276502515462907473134254823892665682345224319671489941505763355735979159874017018843503024386383872441521529569792769773025429406514762920629633236256320058444765221157836244541251456656109110412731637233306420919306335568710066891565971785425434437176140602985856499984950915337466490473111828421957651649183124076261364787820233264787944538781138360980959923788214295039199936333818856379908424483283952301493126004560668651991260307927667247727128126685012766021305367961631416614687753455239531537032426839809388553548494865266666839742039028934320124964550520187942143400502679860007801617482609816653797006915725658795068057252375664138001809997163732722726555467664021099041889209511043491680630700128096140687512143794498303666566791360738535269485872174497271307180173600637839662978588337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be5234301493455acc97ad051c6d1f24809d3fd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petriska-nabytok.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petriska-nabytok.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165a583f9b00000040300483046022100e13ecc3a865d130a9a8c8f952552e5d3c77522b020506341fa7a62c84cbe025102210084806971857029e6da75b50f9c097e0dfac8bb401c4540cd5ca47349d020cbef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165a583fb740000040300473045022100feee55dd04d660962b6291a226e4d48194cd0f79579c21416de552d8802785b3022037beec90eaa01121ac6d3050ed8a7d4f4102ac9ab4d7f99b368592ac81efd5b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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