katalogrouteru.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:14:be:44:3f:65:2c:49:0d:d3:a8:ce:b0:c5:f9:6d:f0 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=katalogrouteru.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:14:be:44:3f:65:2c:49:0d:d3:a8:ce:b0:c5:f9:6d:f0
Serial Number (int): 265447818678877360246567764314557655903728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:9f:1f:09:dd:af:a4:d5:ad:d4:8d:a9:f9:5f:3b:89:46:3f:da:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:33:99:6d:a7:4b:a8:6e:36:7a:45:e6:f5:f7:33:0f:0f:a2:7f:4d
Fingerprint (sha256): c8:3c:ca:7e:f7:03:a9:b7:cc:e3:d6:58:83:52:0c:ca:f8:25:c0:4d:44:70:18:d3:1d:05:26:26:18:f7:04:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate katalogrouteru.cz

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for katalogrouteru.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

katalog-routeru.cz
katalogrouteru.cz
katr.labs.nic.cz
www.katalog-routeru.cz
www.katalogrouteru.cz

Other certificates including the domain name katalogrouteru.cz

(limited to 100 certificates)
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalog-routeru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
www.katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz
katalogrouteru.cz

Certificate

The complete raw certificate details for katalogrouteru.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265447818678877360246567764314557655903728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-23 11:14:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-21 11:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'katalogrouteru.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686013869111704705127361413314276390744005828939636359100562207641938758148616752463464893090243056541626969323276931950647122097822208913835335930324852500665122917346505278231878380109942973787691013248088323532833100797251966760789188006145849906994939801703317934318788501797448139788611772779053757532223812992125773777698477611705737053873118934459897929643914336128427343857022893166559177609950018991095609559745719803040589209909349925833986985719624554922888279195118691139760824786084298177870736925432108195645798511170445657750994243978642266157395954151722545180856183210673682222494858246477918314212820390161458324120934756561538835608585202709004074607807819992280457722299931011074262968180149219775621226250449821057537732474322048826295280316278217225891287352015156202255762863825602263894941924190540584447364411770539389673433649204165987829494079689783185881670603615227955202976341774470268612775705214293022792947363503464671771248776567403969272053587161886420961603299446857536510468623189897071035708993460480038564113657717254030962002145715736334336105175399148717218583983663056097632656997475419941679835296887871193691751373295333238189284151278371162720439139515550858979981455296044189721174769417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f9f1f09ddafa4d5add48da9f95f3b89463fdaa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalog-routeru.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalogrouteru.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katr.labs.nic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katalog-routeru.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katalogrouteru.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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