strnadatka.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:2e:e4:3e:af:a5:09:ca:92:db:e7:d0:b3:c4:b0:86:1e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=strnadatka.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:2e:e4:3e:af:a5:09:ca:92:db:e7:d0:b3:c4:b0:86:1e
Serial Number (int): 330476507883146500823769447763499195336222
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:76:11:9f:ce:f6:99:0f:4c:3e:64:71:21:48:2f:7a:c8:f0:e4:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:0b:af:77:8b:d2:75:78:8c:a8:92:cd:4b:b9:61:0f:e7:8e:09:f5
Fingerprint (sha256): ba:35:c4:8c:cf:f7:e0:f9:fc:e1:e4:0e:b2:fe:97:ae:55:7d:77:b8:73:83:ff:49:6e:e7:c9:fc:53:c9:9b:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate strnadatka.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strnadatka.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

strnadatka.cz
www.strnadatka.cz

Other certificates including the domain name strnadatka.cz

(limited to 100 certificates)
noahcallen.com
windowseat.agency
strnadatka.cz
mestaobce.strnadatka.cz
strnadatka.cz
www.minipush.com
horeckovnik.strnadatka.cz
screens.tauchschule-poseidon.ch
www.boopthegame.com
www.smart-academy.online
strnadatka.cz
mestaobce.strnadatka.cz
order.epicwings.com
www.billionfinds.com
strnadatka.cz
me.asure.me
strnadatka.cz
www.itsok.co
strnadatka.cz
www.mandalist.co
open.renaissance.app
strnadatka.cz
popularwebapps.com
www.nsfw.xenoai.com
strnadatka.cz
thefewnessofthesaved.com
strnadatka.cz
dev.maria.cloud
strnadatka.cz
www.bhumacet.in
www.bireyodaklimatematik.com
speedml.com
turistickeznamky.strnadatka.cz

Certificate

The complete raw certificate details for strnadatka.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330476507883146500823769447763499195336222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:02:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 00:02:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strnadatka.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769073731279518951485751527727051900955163433772508593746915882409959467312262847951631699807200704426774661877111528666231196969028307500010903624391865755010110557199355291493682717590606694765289842208936895038766553362636900536985250870203247295794587047579186048496214315912393971182151456416161385141929815775885280683409201335766805365410329789744767210368291051513736128046186111604825211022713809005609261657755425226408170321891841733320366864350236940750441641981558151650441561892757521656980235853755965886769773984370766747498492681973245195903034505939239148474341629407899340596666659985145492449921186384825743442739183400890372258630500280095106585235238382354140794201994565976384538893643826111547116574145579900307134485508247931189848501561290926425770114106200324817139047107032171201919144693076286894864743224175195001285555648902460706987109424884128146327451290324972055271364514306883163691771043822789200167143471026988631577932682526977496291542538833065961674718667858577551070036888218383640725280664399087189703227974361454313801906806497975366289991997553556105789633731454335637731157818078143281820028971853560094833635004989815164894131365849719677243605573638486620664536798339071634652259739821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a876119fcef6990f4c3e647121482f7ac8f0e486
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strnadatka.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f7d8618a100000403004730450220551bb658f92796c38035b4c74927c65f1b91b446f9fb9ea79296f71201a76f9302210083412db05eace187dc606d5d12edd4a31e43170517fd36b16e98f84da83785230076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f7d8618d30000040300473045022100cd5038599101822211868eb3833292ede204f10000c5b90609cb05297d27a3b102202b68c71b5eca5bba917784e7b6718cae6b87954cd12be16d7b0c96cef9506cd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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