www.factorypro.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:28:82:0b:5f:1d:52:ce:d5:1f:f7:a4:60:62:66:87:2b was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.factorypro.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:28:82:0b:5f:1d:52:ce:d5:1f:f7:a4:60:62:66:87:2b
Serial Number (int): 268196349482764771624611521493874493523755
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:ff:d6:d8:81:b0:f6:ec:0f:84:73:4e:7b:7e:57:18:1e:16:9b:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:2f:41:20:b7:0f:24:9a:28:50:d2:d9:30:0d:6e:d4:8a:0e:34:cd
Fingerprint (sha256): c1:d0:b9:4c:4e:32:5b:c3:ed:3a:4c:63:5d:a2:29:c9:18:64:c0:4e:90:22:e9:79:48:ff:54:de:9f:02:8a:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.factorypro.cz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.factorypro.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

factorypro.cz
test.factorypro.cz
www.factorypro.cz

Other certificates including the domain name factorypro.cz

(limited to 100 certificates)
www.factorypro.cz
www.factorypro.cz
mail.factorypro.cz
mail.factorypro.cz
www.factorypro.cz
posta.factorypro.cz
www.factorypro.cz
eas.factorypro.cz
eas.factorypro.cz
eas.factorypro.cz
mail.factorypro.cz
eas.factorypro.cz
mail.factorypro.cz
posta.factorypro.cz
posta.factorypro.cz
posta.factorypro.cz
www.factorypro.cz
vm5.factorypro.cz
www.factorypro.cz
vm5.factorypro.cz
eas.factorypro.cz

Certificate

The complete raw certificate details for www.factorypro.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268196349482764771624611521493874493523755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 15:53:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 15:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.factorypro.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702572288050157127682970022084763012411574307383387371814498253859106053287942957758684538627981881826769915952251503772313737951762215214525656994754523927875264166370670071301361170844401079187434240011530164783400316983133064911152372271676865924348761630486680489895230626797872853002117719522622799933864161931695967644221474910790179553823066887657639190745540478004061740672277088640353599737884332063270933502480723162057700749013812973275226504298639289718747578831370095699452828449916384167374784701954061244905325618925382962918759001476310555914537846138829352831055807913144253029953514560813322675801066893414174498519521460810570758314549622665342599953546407243631720988344499782384870605247957583894747426220675352748751969886807265169624269412968479466352817921298954218185453862681864099720281481570847429719644318902076541465073593690648583755527883512273664246513644319996481148800782124777281499507124074941664079724731129194279100825149482355202707889848536141200992923129653121089592176494501135039986603202268495085490732740284241813732081168155272761026794919863332949287804963333371192355018719559401289554007949643073595004997643966802704550420410213743264473843123236443621871474924362636102884224925927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50ffd6d881b0f6ec0f84734e7b7e57181e169b05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factorypro.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.factorypro.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factorypro.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef5e0d9890000040300483046022100c240e23b87b3bf996137303eb7781d9096f1de5c67424e709008e3be1b012639022100aa569e5cf177334ea369ca7df53ebec6ca6e0be98525793a90b3878d4c0a5714007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef5e0d97300000403004630440220753ffb2d9a4b8545a06dafc3abd8512534cf70b86534eb4cedc74feece6f9b96022014f958c6c349cf27e1dced3fe6c0cb5125fe1ceb426cc0e4f6663c85a219ef5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d146ac1da172cc251f04fd48cb204e93d783794e1c84707b2f681a5d444bdf1353f4fead6ed35b2664bfad89ed0e25190ae3c625fc5054de3091afa77a96b8361467b1264a1b9409b19bc754c259c854ea3ed5f35ca1daf9cc723a5b230ef48adadbb1bb17a95ecac9ec7571f62c4a4164bc998b31856f6ea94f420e4e6df02cce43f9e5aa0407850fa7ad1d550f0d8ac109bb3b0f7b4651cbabf049a216d6bb46b3f4a2091cd0f06096099ca62973dcdbea6b2114a0eb7b9759e5f9e9453b50f7193ad17f3ed1f402d37819031a89f0436ad1972b2c7f4585daedabee0f73abfa1831dea11a9947c7148ffe63dbe3882658724e3bd96f452c7e9bf9d1b7c0f