www.kncar.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:ea:3e:48:8f:8f:91:ec:a2:c6:f8:78:c5:00:2d:35:95 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kncar.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:ea:3e:48:8f:8f:91:ec:a2:c6:f8:78:c5:00:2d:35:95
Serial Number (int): 267773303144984083226374468289763138680213
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:b3:e4:6f:fd:f8:b3:7c:09:33:71:cc:64:4e:1a:03:16:24:45:d2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:61:02:be:8d:36:94:5f:05:40:ac:12:04:fc:a4:75:da:d9:88:b5
Fingerprint (sha256): c9:f9:f4:34:4f:86:5b:78:ae:42:a5:4c:76:9a:24:f3:06:5f:3e:1d:d5:ee:0f:36:39:4a:22:e4:b2:55:11:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kncar.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kncar.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kncar.cz
www.kncar.cz

Other certificates including the domain name kncar.cz

(limited to 100 certificates)
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz
www.kncar.cz

Certificate

The complete raw certificate details for www.kncar.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267773303144984083226374468289763138680213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 04:08:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-04 04:08:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kncar.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818135511617553280383950381281231981570887168602828903916928739679545299748770221435625017690671639089389113268975199571063738528865496033587178810477595172459546429220401354902229445395787556264729670016018795122984134730418384576793480164985467037309016626994233916320661553135202187266884859690771294293874809496470855006703346301093019585540014369634595909478111640413244765534036480816420917119816603203617169178151955937108158592626239913637688731925577076343784511857055744266535509640131387539708792252254524479617960252398295874296480219023522325391918916177332947908757531977152305835169918143614568915576333356628767369504644078520797612873824563846165112502386698738407119989375480055146488946251846656184840761211517586184693568559617891135219317107831777109126004136578096789283255255787216777828784813453308999100364051097545174693833515263690985264303193232608912542871539381637763240399627688330672120522914167312187957660775994463461382019202953762316376024123168091037155498304705378284281948435072358049249429648689663592561140870015478608717255666943707171543396378035031376391498729823806548463635235426371628295464865316560947032826210646028275635868346434505088838373243511949748148196039598068384884600951237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5b3e46ffdf8b37c093371cc644e1a03162445d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kncar.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kncar.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650da30e340000040300463044022002dc2e8b63b94954beb37242a7ced0ec710eac5105e2b1711d370e8a0389053802201e9283685f91682509fa5eec2e1e92c9cd23597afca8ff72bdacce932f6a15e80076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001650da30f4f00000403004730450220569c808ea2f07861a98f6547a0c800ca88f4105bfca6388fdd524cdc7801bbe2022100907b08035c85eb4636cad2a63d6f67b6e594b3c174ee1bc082d32d990138bfa7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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