strnadatka.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:36:7b:d1:d0:91:b0:29:61:a3:cc:18:8a:5d:87:70:f0:1e was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=strnadatka.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:36:7b:d1:d0:91:b0:29:61:a3:cc:18:8a:5d:87:70:f0:1e
Serial Number (int): 279876690072820195911129471294132353822750
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:55:19:3c:67:8d:67:bc:36:ca:9c:c0:a8:5a:5c:eb:41:28:dd:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:08:75:55:cc:e8:58:67:eb:96:f5:b2:6d:f3:2d:61:8d:6b:51:59
Fingerprint (sha256): c2:79:e5:62:83:02:58:ca:e4:99:5a:26:68:6a:d1:e1:8e:bf:2a:64:83:cc:80:b9:fb:41:f5:31:4b:fb:a4:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate strnadatka.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for strnadatka.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

horeckovnik.strnadatka.cz
strnadatka.cz
turistickeznamky.strnadatka.cz
turistika.strnadatka.cz
www.strnadatka.cz

Other certificates including the domain name strnadatka.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for strnadatka.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279876690072820195911129471294132353822750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 23:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 23:02:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'strnadatka.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851582354022956486058795129098529412359593340542611772208056690115895891811947716929540921729191235574252244481714279721498312730445466905000477518658590261618000349356949743349286658613488096377295293208581169988149263941150164097920275823551274958893021064649088394836271508126479159761372597981617556092651601683366275164614265249971593914297819044990370347930266065181237037468648987953141709447036284561817057168620634425377587035629771336437247604995759477176898772177125236908624418233811137068343425983452846619181896062705331460092583292812406558269875475629306735308035596685512263596480107567678660621970178808429083762589101426313019039222400982421788372254190226617008136786487369831829245480803194200199180599137032553838485079658474581946032428929269901337515779597845588235311952778150819745990772516863720884746286806609113348224601227234299440201754608658248081284871810713867486699891857349313043245637886655180378422062151918019135814063330218933182152066764416210403710352868191104965708394156503788519611275117477177818875836157903049847597851194058563982430569774435674334910705787708392068255989584298002035506151041740488610730395952347825796232486233280853479308873501612164409364848191062139068272603701567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4355193c678d67bc36ca9cc0a85a5ceb4128dd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horeckovnik.strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistickeznamky.strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistika.strnadatka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strnadatka.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef8d00e3600000403004730450221009b1116420e626db0055c2fcbd582bc38a4aee4fa9f37ddbb5173b6b731e48b1a0220105722d85f1946e704a0bbfdecfe8e19c8486ee28d4fab6755c2a93a6846c9de007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef8d00eaa0000040300483046022100f710dcf3ce262a742654a38c226384a1737bff9f2c4deddf2a04f947969f1f75022100fa515d398fa35d4978c339f53e2603188ff0c6a8f0ee7234adad8b57f32aa2cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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