nila.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:4e:ad:1f:a7:b5:fe:28:7b:ff:da:80:d7:b2:13:d5:f7 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nila.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:4e:ad:1f:a7:b5:fe:28:7b:ff:da:80:d7:b2:13:d5:f7
Serial Number (int): 327456215671012676713234423195204603598327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:6b:84:94:75:84:a4:05:a1:29:23:6c:36:25:37:f0:f0:98:13:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:1a:e2:e2:cd:9e:55:e9:84:1c:47:d7:3d:a1:5b:cd:b1:69:89:10
Fingerprint (sha256): b1:2c:66:23:2c:c6:3a:1c:68:c2:8e:b2:e2:53:ee:25:e3:ce:1d:44:31:3a:bf:39:45:a3:48:57:91:e1:c8:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nila.cz

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nila.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nila-shop.com
nila-shop.sk
nila.cz
nila.cz.vhost.omnio.cz
www.nila-shop.com
www.nila-shop.sk
www.nila.cz

Other certificates including the domain name nila.cz

(limited to 100 certificates)
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz
nila.cz

Certificate

The complete raw certificate details for nila.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA97oEzdemI1Q3Loi2BIWg
QFu8r+DXyZkZC1rG3ZpumH9CFMMkZWYCtHMb00gyEJxIqLCf4LfUz4MPRhukSMls
X7yJNckXXBxkadQA79x9xjRuclBXowf4ZQy759sKfu28Pl+C3jS4kxrz8uCSdvrN
3Y6cBmFzpccCbwiPVxl2EI+i4a9ox7e9+C/636TzE4WZsi8eTszeXcBgrBjHZmV9
VuQz4+LrHGtlwOfV+jAIxd4HrBk5Q65Jdj3vDbgY1Nk6m848yndxo9bnhgNscFTB
/MprWyBifcsTJ4floEWU2Wm+c17e4m0Iw0+Uca1MCv6Am3JSffdu9D8GeR1QEb1b
EJAmcewtq5WqDN3sGTp+EEkCe7w9egknZ+RRSpNG7Jmlj9mady/qfh/+Bcle1GYm
vW+V+A881aBgs0dznDf/fAnLd6mAPvoTbfWHH3gw5iHZmatz9K5kuX+LE0b4xSxU
mJch/QccFVkKQnBcLAkKcODAxNEV5d8HTMdlic7nH/Vva4z4JomCCyd4JiYGqSe6
9zLimH1ztwBACkgs/vJnXF3s0WLfK6qCX0BffKLtK1GHNlTYROWtdC48QsJ3+rGY
CAcn4cviYi1ybnfDn/XNLTU+9tXyhlKDjVjjJX45DYvrfHu/vsbTbOfIFASLb1k5
udFWe/ZsSOBjvfct41o8C0UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327456215671012676713234423195204603598327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 12:09:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 12:09:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nila.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1010636500249668811722837969737918573157529020819245182748942095512107203134610049443465575301235466157005415680110580560584843309692348355516188807665083950623401205757129148598863712386288702807913803587347867203691511736116597943243609827221020368415523672047245392335144686217967870043889800502644094213084339400944292871735591978998465221348569242597577702585157745528228580604452740973101486815770621442223790406051324527776297589747341855732434835653633222049618850603380618864240999337528458679692178433009074524361812134032717522405824593506033074029827892886104507206431840963077488301116964415425847511049218096690911798180409728157419811054812281335045134035537946059585173125790929889273444799804621490246158272429858267648193007023277933414557697278027469022507627264675839647956600638251568092060051349216507502432341326133442680275202855213104844709383440807679428990803127816150208307191374094363926738661980402061009162306209508185135582019085524856492607968658559960684331728611806091023229199570804640314463435840993740479015274610514413286062824775081814426598436504301083238721098743908768317810279523608410858317253306265086585585298433980375161169877362328627673145706444181630587064467122595389665021460745029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf6b84947584a405a129236c362537f0f0981348
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nila-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nila-shop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nila.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nila.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nila-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nila-shop.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nila.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f236d95ca0000040300473045022100a66c890b1fede9a219eef4ac79b45ca8428e4f03090ace7f0d22fec33cb9eaed02204c889c2696c391315d1a221d6bdceda295fe76c18e5b9b5f6e3dfa019356db79007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f236d95b60000040300473045022028f3c976289f8fa36ce4753b10395b372bba12e078db09742a343e2421ea54d7022100927cc3b52d0ab85727abbf16476f0f31cca4f2ff618fe9f539fb8dad47c11913
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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