autaborek.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:5d:27:38:ae:03:46:01:8d:3c:5c:fa:1a:51:10:25:fc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=autaborek.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:5d:27:38:ae:03:46:01:8d:3c:5c:fa:1a:51:10:25:fc
Serial Number (int): 328836588298413686909217520090215888201212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:ca:ff:86:c9:46:1c:71:3c:1a:54:fb:05:1b:4b:5a:bc:99:90:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:80:d2:44:66:6f:25:c1:d5:ae:e6:c4:99:a3:09:e7:3c:62:cf:12
Fingerprint (sha256): af:fd:b0:31:47:57:35:16:61:70:7c:7c:40:be:bc:6f:ca:68:d6:84:76:7c:21:f7:70:03:db:d3:b3:ca:d9:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate autaborek.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autaborek.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autaborek.cz
www.autaborek.cz

Other certificates including the domain name autaborek.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for autaborek.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328836588298413686909217520090215888201212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 08:12:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 08:12:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autaborek.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645972765359619402738788658406952313788561416310809026636480781793876034539816280634047674567754455015456617075849231341573633243176218882372001990755059060771034333896875567789459284021435240929369522024932951532684556735259337296455027008426151471568477153511597240988429986520991101053766080466172686487015315639709872958565462504706007533206181482841284385892850274280813562838045285919761104962820661645058944292465981635207346804718375370844958023299451275740305255407406751365102593997479217275407805337330853506127264358435884122318689001936508929984494555810059543179232628194891976416337027683785537122532353870542116487399141208933392896945353114465115544801666683061969549964804642010549045826316320996232615795439035691017781489931117754907697528353173172603316069614922523615015682596436220216609939690121946529523145687519682245900352041966119283673443479732914547576050060011011226446854038284037538558718599661120427689494110697026855200325451076893745500739158771890631610524993679759460555259175927248892161170341398143006574707283988520325050742047212462013809881593055909501077512597623078403210883795836921050359645426783299802549507794763428455622745904801601229256753881350367594927967461906985553960238275329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bcaff86c9461c713c1a54fb051b4b5abc9990bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autaborek.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autaborek.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b080304ea0000040300483046022100ffff05cf9521c5e6118ddf7145a205e29980dbdb56a1d40652d49d8a85bc3f78022100c0580ad2b44743ac85c05264196f33eb9e32e9bf7511308c86adf35d2fb0eb4100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b080304ea000004030047304502206d48afd4e833b96d3fc88fd3bb0a5a340045dba05b68c1dc951f7aa07dab2399022100ab187d29bdc3dbfa6fd85b7ca71d49c4032aa2c358481a585357a25d89a83f2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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