www.jih2000.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:c9:42:5e:22:38:6d:d5:55:54:f1:9a:3c:95:06:fb:d9 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jih2000.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:c9:42:5e:22:38:6d:d5:55:54:f1:9a:3c:95:06:fb:d9
Serial Number (int): 266368330360177034027080586831620869651417
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:19:a7:29:18:51:53:ac:77:17:b6:11:4a:d4:24:62:f4:47:ed:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:36:c3:7b:a0:04:01:ec:28:0e:f9:d9:de:48:d1:0e:f1:13:f7:60
Fingerprint (sha256): b7:3e:ff:e8:f3:90:26:c5:60:f9:ad:97:63:a8:78:c2:a4:4a:2d:0f:ee:a6:bb:f8:20:b4:1c:0d:8e:6a:dc:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jih2000.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jih2000.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacia.jih2000.cz
jih2000.cz
jih2000.cz.vhost.omnio.cz
renault.jih2000.cz
www.jih2000.cz

Other certificates including the domain name jih2000.cz

(limited to 100 certificates)
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz
www.jih2000.cz

Certificate

The complete raw certificate details for www.jih2000.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266368330360177034027080586831620869651417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 08:06:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 08:06:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jih2000.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1021372336139639830831882886644614690177862669956867493295824811537946027643385102377293207337067577446974650409055813096491225304541877946592851146873702749067612707196991318243322223300878255578488435839720687311323142842972857340365403659059567631952464130194499691653483942708484329813317598962884758768124114583108434581722062670887047878986369251009912473047729341141343566699354974208116858457955624699185327212167494683803607263966805441846479794657357379285931213356971982964458274673846244348309752941052857444973529085615698545785963678227818000273339779855222289313098267374415490876516143383130709199905561651297341013511721380392185582262534019102505818806874087300134240473959786572692874835596122975897548871341289746079055862206650297126414787828327285621776837049482568108670534275988366301506135972385660567281468010255266497148056638942704721140338279106515218675225311010916052932568251650668803519818651613579433750237809938499634115505636010245917458360425927821168341192539785330684799210989422716194333501234093870943262913229197248187007286781407148121574634931773765313981961633256894000583720684446463929962209942453380112619058421537783765086761851283990168305748698807732798808392378819902756026949155211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4619a729185153ac7717b6114ad42462f447edc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacia.jih2000.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jih2000.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jih2000.cz.vhost.omnio.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.jih2000.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jih2000.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a4cc00750000040300483046022100e67038b8773338ae4cd442a6d62b8bfe8fe4499b15ba6aafa7cc4ebbb044943e022100e82c266431b3fc937d840905a22f550d148bebfed5fc56f84f98a092a887385400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a4cc0080000004030046304402207fffa2520994854beee6dd0d135ac2162dddf8f478fff951666c8863632751db02202d5b34e508519f906d5de1bd5e07328d52c2bb3a8f8be77c238592593d554096
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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