cheb.cz
Issued by R3
About this certificate
This digital certificate with serial number 03:c0:ac:2c:18:a6:2a:d3:16:79:39:78:54:14:95:96:aa:86 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cheb.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c0:ac:2c:18:a6:2a:d3:16:79:39:78:54:14:95:96:aa:86Serial Number (int): 326899928420380665012291398493964621752966
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 23:f8:70:ef:48:da:f5:ec:51:fb:2b:17:78:5f:24:e7:ae:28:33:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 60:1b:09:d1:15:00:7a:4c:75:a8:c1:8e:2e:2a:65:ee:b9:54:e2:09
Fingerprint (sha256): b1:d1:cb:7b:84:05:94:be:07:aa:65:a9:f4:03:6b:0c:02:f7:d8:53:72:2e:c7:67:99:f9:fe:c4:40:87:91:c6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cheb.cz
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cheb.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cheb.cz
cheb.eu
mestocheb.cz
mestocheb.eu
www.cheb.cz
www.cheb.eu
www.mestocheb.cz
www.mestocheb.eu
cheb.eu
mestocheb.cz
mestocheb.eu
www.cheb.cz
www.cheb.eu
www.mestocheb.cz
www.mestocheb.eu
Other certificates including the domain name cheb.cz
(limited to 100 certificates)
Certificate
The complete raw certificate details for cheb.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISA8CsLBimKtMWeTl4VBSVlqqGMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjExMzU0MjJaFw0yNDA0MjAxMzU0MjFaMBIxEDAOBgNVBAMT B2NoZWIuY3owggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAho5rhr8K 8Tb294jXUhtCVesuEIUSYKk2FcqOoFlksE4lpYsSR2vjadHXtVDrMwBWFXU6KkN7 xdQ2ZdbEnv37rwRnzDOtscqsw/uzfuBlEtFO8WBPXIossiHa/YYyzdzcE9MwBUri TOjb06AsY0DTR9hrI9ncsKlDO//lKAXEzMe5T2Zot2Wz5OIGc3lnFNYkiks/wgVj RQLsSmoFNDvIYnULXqAabyJ9ZZ5NhBrHRfhioRhyoGCevrobyd1soP5KnUQ4J9sq oSU75CMm5L3NyaJVujV56swy3kmpcz/kywlMEv2jo4K4v6q0vBMtycVxr3io7awk zFlrnY6JSCD1AgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCP4 cO9I2vXsUfsrF3hfJOeuKDPLMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMHUGA1Ud EQRuMGyCB2NoZWIuY3qCB2NoZWIuZXWCDG1lc3RvY2hlYi5jeoIMbWVzdG9jaGVi LmV1ggt3d3cuY2hlYi5jeoILd3d3LmNoZWIuZXWCEHd3dy5tZXN0b2NoZWIuY3qC EHd3dy5tZXN0b2NoZWIuZXUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAY0sg/XjAAAEAwBGMEQCICMFu0nHc2n6nC0969n7wKAeHw6h31hYFIssbOTd FFPLAiB9rzgJOUuhb//EjboM0sGMNmq+2BJNKR6bHktS7jM7FwB2AKLiv9Ye3i8v B6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjSyD9eoAAAQDAEcwRQIgW7JZ9GvN 6Y+qQ+ENp+irxg1t3hUAKN4kw3FIlkJSPuICIQCE6QRauvc5b2u3+xWglOlXtNIr ENyjmkUuDM2WrCUOMzANBgkqhkiG9w0BAQsFAAOCAQEAcFV6XM+g1Gyj5GW5X4z1 prmR0B2kHm0nV+2KSb9NdN3ieSxWHSbD2oSHOwXuhlUCHYwsR8oAM4SXGO9wW7Kk VVK2rR+84YLB6o+iQm7n3Ytl+HFIioQ7UFVSqQErZcSKRGG+n8G+CQ20gQJuopNL kwM3+LqpA0YHrcCc5EqksUtE3pMU9faaqKBmw7ajV22HCOjsNfycIBhhWF2Vjo8A B2ebIm2VNSYClNWAMGYSSzOwmoX4DVjMPH+VynJ1LI/A/efAMScVhDWkAUWbvr96 sWOQkcgDK4Y7O2FClY6fTg9rSTScxu19LXHb3IAcGFsbdpQ5FRnVLnyHcPxTBdIX LA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIaOa4a/CvE29veI11Ib QlXrLhCFEmCpNhXKjqBZZLBOJaWLEkdr42nR17VQ6zMAVhV1OipDe8XUNmXWxJ79 +68EZ8wzrbHKrMP7s37gZRLRTvFgT1yKLLIh2v2GMs3c3BPTMAVK4kzo29OgLGNA 00fYayPZ3LCpQzv/5SgFxMzHuU9maLdls+TiBnN5ZxTWJIpLP8IFY0UC7EpqBTQ7 yGJ1C16gGm8ifWWeTYQax0X4YqEYcqBgnr66G8ndbKD+Sp1EOCfbKqElO+QjJuS9 zcmiVbo1eerMMt5JqXM/5MsJTBL9o6OCuL+qtLwTLcnFca94qO2sJMxZa52OiUgg 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326899928420380665012291398493964621752966 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 13:54:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 13:54:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cheb.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24304106751909792271363816488396327083471285420997500500185286692391121195569030952945031881074968424223663947321840052935900254985493025192863828613399120558777974055397603896442002961168028737245175286886897528561371232149391596955710595085663534145221959306421981954986715415556816550946622443637548728632541415554510216116347179271902748294278055249709384635522778951087854258429425534219541271464437018646525857604619830212580884354884326242126088996558650248956603355399137374329755242864467194218929895512987328323912835604093748902208859287625775373200392779433453728094656912250164930037969939789176023556341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23f870ef48daf5ec51fb2b17785f24e7ae2833cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheb.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheb.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mestocheb.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mestocheb.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheb.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheb.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mestocheb.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mestocheb.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d2c83f5e3000004030046304402202305bb49c77369fa9c2d3debd9fbc0a01e1f0ea1df5858148b2c6ce4dd1453cb02207daf3809394ba16fffc48dba0cd2c18c366abed8124d291e9b1e4b52ee333b17007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d2c83f5ea000004030047304502205bb259f46bcde98faa43e10da7e8abc60d6dde150028de24c371489642523ee202210084e9045abaf7396f6bb7fb15a094e957b4d22b10dca39a452e0ccd96ac250e33 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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